SQL Server Audit Log Event ID 24170
24170: Revoke server permissions with cascade succeeded (action_id RWC class_type SR)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
Permissions to the server were revoked successfully, including cascade of permissions
Free Security Log Resources by Randy
| Field | Description |
|---|
| Occurred | When event was reported by SQL Server |
| Session ID | ID of the session on which the event occurred |
| User | |
| Server | |
| Target object | |
| | Name | Target object name |
| | Permission bitmask | Target object permission bitmask |
| Statement | Transact-SQL statement |
Supercharger Free Edition
Supercharger's built-in Xpath filters leave the noise behind.
Free.
This Event Is Produced By
Which Integrates with Your SIEM
Revoke server permissions with cascade succeeded
Permissions to the server were revoked successfully, including cascade of permissions
Action Group: SERVER_PERMISSION_CHANGE_GROUP
Occurred: 8/22/2013 6:07:50.0000000 PM
Session ID: 67
User: LB\Administrator
Server: DEV3
Target Object
Name: TestLogin1
Permission bitmask: System.Byte[]
Statement: REVOKE VIEW SERVER STATE TO [TestLogin1] CASCADE AS [sa]
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24170
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection