SQL password change logging??

[DebiJo]

Is there a log that will track password changes in SQL? We have windows auditing turned on. I've looked in those logs as well as the SQL logs and I'm not seeing anything. Any ideas?

Thanks,
Debi

 

[SQLBill]

I don't believe there is a 'builtin' logger for password changes.

Suggestions:

Use Profiler, create a trace that just tracks the use of sp_password.

Create an UPDATE trigger on the sysxlogins table in the Master database (making changes to the master database is not always a good thing, but it is a possibility).

-SQLBill

 

[mrdenny]

You could write your own version of sp_password which does some additional logging before and after calling sp_password. Then tell your users to use this new procedure, and revoke there access to exec sp_password.

Denny

--Anything is possible. All it takes is a little research. (Me)