SQL Server Audit Action Group: LOGIN_CHANGE_PASSWORD_GROUP

This group tracks password changes and password resets of SQL Server logins. This group does not track password changes for Windows or Active Directory user accounts.

This is a server level audit action group only it cannot be included in database specifications.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID	Description
24004	Change own password succeeded
24005	Change own password failed
24006	Change password succeeded
24007	Change password failed
24008	Reset own password succeeded
24009	Reset own password failed
24010	Reset password succeeded
24011	Reset password failed
24012	Must change password
24013	Account unlocked

 

Upcoming Webinars Live, Hands-on Deep-Dive into LLM Hacking: Prompt Injection, Model Context Protocol and Skills AD Certificate Services: A Massive Chunk of Windows Security Functionality Finally Gets the Security Research It Deserves Linux Security: Locking Down Admin Access with SSH and Sudo Understanding Broken Object Level Authorization: The Quiet Access Control Failure Undermining Today’s Apps

Additional Resources

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard