SQL Server Audit Action Group: SERVER_OPERATION_GROUP

Available in		New to:
Database Audit Specification	Server Audit Specification	2012	2016
	•		*

This group tracks server operations such as those involving: bulk administration, alter connection, alter resources, alter server state, alter server settings, view server state, external access assembly, unsafe assembly, alter resource governor.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID	Description
24029	Issued a bulk administration command
24030	Issued an alter connection command
24031	Issued an alter resources command
24032	Issued an alter server state command
24033	Issued an alter server settings command
24034	Issued a view server state command
24035	Issued an external access assembly command
24036	Issued an unsafe assembly command
24037	Issued an alter resource governor command
24333	Issued a create external resource pool command *
24334	Issued a change external resource pool command *
24335	Issued a delete external resource pool command *

Upcoming Webinars

Breaking Free from AD Tech Debt: Securing the Path to Modernization
“3 Persistent Privileged Access Methods in Active Directory: How Attackers Stick the Landing with AdminSdHolder, SIDHistory, DCShado”

Additional Resources

Audit Policy

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard

User name:
Password:
	/ Forgot?
	Register

September 2025 Patch Tuesday	"Patch Tuesday - Two Zero Days This Month " - sponsored by Supercharger for Windows Event Collection

Follow @randyfsmith

About | Newsletter | Contact

Ultimate IT Security is a division of Monterey Technology Group, Inc. ©2006-2025 Monterey Technology Group, Inc. All rights reserved.
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.