SQL Server Audit Log Event ID 24168
24168: Revoke server permissions with grant succeeded (action_id RWG class_type SR)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
Permissions to the server were revoked successfully, including ability to grant permissions
Free Security Log Resources by Randy
| Field | Description |
|---|
| Occurred | When event was reported by SQL Server |
| Session ID | ID of the session on which the event occurred |
| User | |
| Server | |
| Target object | |
| | Name | Target object name |
| | Permission bitmask | Target object permission bitmask |
| Statement | Transact-SQL statement |
Supercharger Free Edition
Supercharger's built-in Xpath filters leave the noise behind.
Free.
This Event Is Produced By
Which Integrates with Your SIEM
Revoke server permissions with grant succeeded
Permissions to the server were revoked successfully, including ability to grant permissions
Action Group: SERVER_PERMISSION_CHANGE_GROUP
Occurred: 8/22/2013 6:07:50.0000000 PM
Session ID: 67
User: LB\Administrator
Server: DEV3
Target Object
Name: TestLogin1
Permission bitmask: System.Byte[]
Statement: REVOKE GRANT OPTION FOR VIEW SERVER STATE TO [TestLogin1] CASCADE AS [sa]
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24168
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection