Track SQL user Login Password Changes in SQL Server
Step 1:
Go to Audits under security tab
Step 2:
Right click on audit and create audit
Using SQL script
CREATE SERVER AUDIT
TO FILE ( FILEPATH ='D:\LogFolder\' )
WITH ( QUEUE_DELAY = 1000, ON_FAILURE = CONTINUE );
GO
Create server audit specification
Using SQL script
CREATE SERVER AUDIT SPECIFICATION Srv_Audit_PWD
FOR SERVER AUDIT
ADD (LOGIN_CHANGE_PASSWORD_GROUP);
GO
Step 4:
Enable Audit and server audit specification
Try to change password any one user
Step 6:
By using bellow query we can check audit logs
SELECT * FROM sys.fn_get_audit_file ('D:\LogFolder\*',default,default)
WHERE
action_id = 'PWR'
GO
Another way to check audit logs
Thanks for your feedback
ReplyDelete