SQL Server Audit Log Event ID 24078
24078: Issued a disable server principal command (action_id LGDA)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A command to disable a server principal was issued
Free Security Log Resources by Randy
Field | Description |
Occurred | When event was reported by SQL Server |
Authorization result | If the command passed authorization checks |
Session ID | ID of the session on which the event occurred |
User | |
Server | |
Target object | |
| ID | Target object ID |
| Name | Target object name |
| Type | Target object type |
Statement | Transact-SQL statement |
Supercharger Free Edition
Centrally manage WEC subscriptions.
Free.
This Event Is Produced By
Which Integrates with Your SIEM
Issued a disable server principal command
A command to disable a server principal was issued
Action Group: SERVER_PRINCIPAL_CHANGE_GROUP
Occurred: 8/22/2013 6:07:50.0000000 PM
Authorization result: Access allowed
Session ID: 67
User: LB\Administrator
Server: DEV3
Target Object
ID: 273
Name: TestLogin2
Type: SQL login
Statement: ALTER LOGIN [TestLogin2] DISABLE
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24078
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection