SQL Server Audit Action Group: FAILED_DATABASE_AUTHENTICATION_GROUP

Available in New to:
Database
Audit
Specification
Server
Audit
Specification
2012 2016
• • •

This group tracks logon attempts to a contained database that fail. To track successful logon attempts, see SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID Description
24299 Database login failed

 

Upcoming Webinars
  • Understanding Broken Object Level Authorization: The Quiet Access Control Failure Undermining Today’s Apps
  • Identity as the Kill Chain: Stopping Lateral Movement Across AD, Cloud, and AI
  • Patching 3rd Party Apps on PCs Managed by Intune
Additional Resources
    Audit Policy
    •Server Audit Specification
    •Database Audit Specification
    •Audit Action Groups
    •Audit Actions
    •Audit Policy Wizard
     
     
    User name:
    Password:
      / Forgot?
      Register
    January 2026
    Patch Tuesday
    "Patch Tuesday - Starting 2026 with a Bang; 3 Zero Days " - sponsored by LOGbinder and Supercharger
    .
    Tweet
    Follow @randyfsmith
    About | Newsletter | Contact Ultimate IT Security is a division of Monterey Technology Group, Inc. ©2006-2026 Monterey Technology Group, Inc. All rights reserved.
    Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.
    Terms of Use | Privacy |
    Cookies help us deliver the best experience on our website. By using our website, you agree to the use of cookies.