connection history to SQL server?

Is there any way to see in Enterprise Manager a history of
connections (also via Enterprise Manager) to a db? I'm
trying to track down connections to our db that were done
by a consultant remotely through Enterprise Manager via
the Internet. The consultant had direct access and didn't
need to log onto our domain.
Thanks.Not unless you had SQL login auditing set to All or are auditing security
events on the server, in which case you should be able to see logons in the
NT Security event log
--
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Brian" <anonymous@.discussions.microsoft.com> wrote in message
news:09f301c3b372$868347a0$a001280a@.phx.gbl...
Is there any way to see in Enterprise Manager a history of
connections (also via Enterprise Manager) to a db? I'm
trying to track down connections to our db that were done
by a consultant remotely through Enterprise Manager via
the Internet. The consultant had direct access and didn't
need to log onto our domain.
Thanks.|||OK, so if I have SQL login auditing set to All where would
I see the events? In the server event log or somewhere in
Enterprise Manager?
>--Original Message--
>Not unless you had SQL login auditing set to All or are
auditing security
>events on the server, in which case you should be able to
see logons in the
>NT Security event log
>--
>HTH
>Jasper Smith (SQL Server MVP)
>I support PASS - the definitive, global
>community for SQL Server professionals -
>http://www.sqlpass.org
>"Brian" <anonymous@.discussions.microsoft.com> wrote in
message
>news:09f301c3b372$868347a0$a001280a@.phx.gbl...
>Is there any way to see in Enterprise Manager a history of
>connections (also via Enterprise Manager) to a db? I'm
>trying to track down connections to our db that were done
>by a consultant remotely through Enterprise Manager via
>the Internet. The consultant had direct access and didn't
>need to log onto our domain.
>Thanks.
>
>.
>|||In the SQL Error log (In Enterprise Manager this will be in the Management
subfolder for a server)
--
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Brian" <anonymous@.discussions.microsoft.com> wrote in message
news:660601c3b377$eb660e00$a601280a@.phx.gbl...
OK, so if I have SQL login auditing set to All where would
I see the events? In the server event log or somewhere in
Enterprise Manager?
>--Original Message--
>Not unless you had SQL login auditing set to All or are
auditing security
>events on the server, in which case you should be able to
see logons in the
>NT Security event log
>--
>HTH
>Jasper Smith (SQL Server MVP)
>I support PASS - the definitive, global
>community for SQL Server professionals -
>http://www.sqlpass.org
>"Brian" <anonymous@.discussions.microsoft.com> wrote in
message
>news:09f301c3b372$868347a0$a001280a@.phx.gbl...
>Is there any way to see in Enterprise Manager a history of
>connections (also via Enterprise Manager) to a db? I'm
>trying to track down connections to our db that were done
>by a consultant remotely through Enterprise Manager via
>the Internet. The consultant had direct access and didn't
>need to log onto our domain.
>Thanks.
>
>.
>|||Jasper,
Thanks for your responses. It didn't help me out, but I
had SQL login auditing set to Success (not All). When I
changed it to Success, I get this in the error
log "Configuration option 'show advanced options' changed
from 1 to 1. Run the RECONFIGURE statement to install..",
so I'm thinking something else is going on I have to
resolve.
I still need to catch our consultant connecting to the
server without first checking with us (which they are
supposed to do).
Brian
>--Original Message--
>In the SQL Error log (In Enterprise Manager this will be
in the Management
>subfolder for a server)
>--
>HTH
>Jasper Smith (SQL Server MVP)
>I support PASS - the definitive, global
>community for SQL Server professionals -
>http://www.sqlpass.org
>"Brian" <anonymous@.discussions.microsoft.com> wrote in
message
>news:660601c3b377$eb660e00$a601280a@.phx.gbl...
>OK, so if I have SQL login auditing set to All where would
>I see the events? In the server event log or somewhere in
>Enterprise Manager?
>>--Original Message--
>>Not unless you had SQL login auditing set to All or are
>auditing security
>>events on the server, in which case you should be able to
>see logons in the
>>NT Security event log
>>--
>>HTH
>>Jasper Smith (SQL Server MVP)
>>I support PASS - the definitive, global
>>community for SQL Server professionals -
>>http://www.sqlpass.org
>>"Brian" <anonymous@.discussions.microsoft.com> wrote in
>message
>>news:09f301c3b372$868347a0$a001280a@.phx.gbl...
>>Is there any way to see in Enterprise Manager a history
of
>>connections (also via Enterprise Manager) to a db? I'm
>>trying to track down connections to our db that were done
>>by a consultant remotely through Enterprise Manager via
>>the Internet. The consultant had direct access and
didn't
>>need to log onto our domain.
>>Thanks.
>>
>>.
>
>.
>|||Yes, I should have mentioned, it's one of the options that requires a SQL
Service restart (don't know how practical that is for you). Another option
would be to use a server side trace capturing the audit login and logout
events. If they have a specific login, you can filter on that also.
--
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
<anonymous@.discussions.microsoft.com> wrote in message
news:122401c3b37a$6ed460a0$a501280a@.phx.gbl...
Jasper,
Thanks for your responses. It didn't help me out, but I
had SQL login auditing set to Success (not All). When I
changed it to Success, I get this in the error
log "Configuration option 'show advanced options' changed
from 1 to 1. Run the RECONFIGURE statement to install..",
so I'm thinking something else is going on I have to
resolve.
I still need to catch our consultant connecting to the
server without first checking with us (which they are
supposed to do).
Brian
>--Original Message--
>In the SQL Error log (In Enterprise Manager this will be
in the Management
>subfolder for a server)
>--
>HTH
>Jasper Smith (SQL Server MVP)
>I support PASS - the definitive, global
>community for SQL Server professionals -
>http://www.sqlpass.org
>"Brian" <anonymous@.discussions.microsoft.com> wrote in
message
>news:660601c3b377$eb660e00$a601280a@.phx.gbl...
>OK, so if I have SQL login auditing set to All where would
>I see the events? In the server event log or somewhere in
>Enterprise Manager?
>>--Original Message--
>>Not unless you had SQL login auditing set to All or are
>auditing security
>>events on the server, in which case you should be able to
>see logons in the
>>NT Security event log
>>--
>>HTH
>>Jasper Smith (SQL Server MVP)
>>I support PASS - the definitive, global
>>community for SQL Server professionals -
>>http://www.sqlpass.org
>>"Brian" <anonymous@.discussions.microsoft.com> wrote in
>message
>>news:09f301c3b372$868347a0$a001280a@.phx.gbl...
>>Is there any way to see in Enterprise Manager a history
of
>>connections (also via Enterprise Manager) to a db? I'm
>>trying to track down connections to our db that were done
>>by a consultant remotely through Enterprise Manager via
>>the Internet. The consultant had direct access and
didn't
>>need to log onto our domain.
>>Thanks.
>>
>>.
>
>.
>