finding out info about deleted login

[wrbodine]

Some unknown user deleted a login (from Security : Logins in Enterprise Manager using SQL Server 7.0) that is used for many of our applications. Where would I find a record of this deletion? I guess I'm not sure which log would have a record of this.

Thanks,
Ray

 

[tlbroadbent]

The transaction log file would record the transaction but it is not easily read to determine who did what. If you have done a backup, the transaction log file is purged so that isn't even an option. SQL Server provides very little audit trail info.

There are third party tools that read the log files and can read log file backups, also. Do a web serach to find such products if interested. Terry L. Broadbent
FAQ183-874 contains tips for posting questions in these forums.
NOTE: Reference to the FAQ is not directed at any individual.

 

[RickCole]

Unfortunately no audit trails are built into SQL Server so this information is not held any where.

If you want to use some 3rd party software which can read the master database transaction log then you might get lucky there. But that's only if the offending transaction is still in the log.

Rick.