SQL Server Audit Log Event ID 24123
24123: Issued a delete database user command (action_id DR; class_type US)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A command to delete a database user was issued
Free Security Log Resources by Randy
Field |
Description |
Occurred |
When event was reported by SQL Server |
Authorization result |
If the command passed authorization checks |
Session ID |
ID of the session on which the event occurred |
User |
|
Server |
|
Database |
Database affected by the event |
Target object |
|
|
ID |
Target object ID |
|
Name |
Target object name |
|
Type |
Target object type |
Statement |
Transact-SQL statement |
Supercharger Free Edition
Your entire Windows Event Collection environment on a single pane of glass.
Free.
This Event Is Produced By
Which Integrates with Your SIEM
Issued a delete database user command
A command to delete a database user was issued
Action Group: DATABASE_PRINCIPAL_CHANGE_GROUP
Occurred: 8/22/2013 6:07:52.0000000 PM
Authorization result: Access allowed
Session ID: 67
User: LB\Administrator
Server: DEV3
Database: TestDatabase
Target Object
ID: 6
Name: TestUser2
Type: SQL user
Statement: DROP USER TestUser2
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24123
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection