-
drop database
Hi:
Someone dropped a database on our server and we are trying to figure out who dun it! I have already looked at the sql error logs and there is nothing in there. I have looked in the Windows 2000 event viewer but nothing in there. Is there somewhere else I should be looking ? What is the best way to prevent this in the future. Please advise.
Thanks,
ndba
-
How to find who did it?
mmmmm... difficult. Are you running security audit on that box? then you can find who logged in at that time of deletion.
How to avoid?
1. Do not give SA Access to anybody other than you.
2. enable security auditing
3. take backups and tanlog backups often so that you can restore immedietly.
4. do not keep easy passwords like "sa" and "password" or blank.
-
see whether there is any "KILL" command used in the error log. was the database ever been used?
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|