SQL Server Audit Log Event ID 24375

SourceSQL Server (LOGbinder SQL)
Action GroupDATABASE_OBJECT_PERMISSION_CHANGE_GROUP
Windows Security Log
Category
 • Subcategory
Object Access
 • Application Generated
Type Failure

24375: Command to change permission failed (action_id D, DWC, G, GWG, R, RWC, RWG; class_type DC, EL)

This is an event from SQL Server audit event from LOGbinder SQL generated by Action Group  DATABASE_OBJECT_PERMISSION_CHANGE_GROUP.

On this page

Attempt to change permission on a database object failed

Free Security Log Resources by Randy

Description Fields in 24375

Field Description
Occurred When event was reported by SQL Server.
Authorization result If the command passed authorization checks.
Session ID ID of the session on which the event occurred.
User User
Server Server
Database Database affected by the event.
Target object  
  ID Target object ID
  Name Target object name
  Permission bitmask Target object permission bitmask
Statement Transact-SQL statement

Supercharger Enterprise


 

Where Does This Event Come From?

This Event Is Produced By

Which Integrates with Your SIEM

Examples of 24375

Command to change permission failed
Attempt to change permission on a database object failed
Action Group: DATABASE_OBJECT_PERMISSION_CHANGE_GROUP
Occurred: 5/12/2018 3:42:21.0000000 AM
Authorization result: Access denied
Session ID: 146
User: LAB\tuser
Server: LAB-SQL-13\SQLSERVER2017
Database: master
Target Object
  ID: n/a
  Name: n/a
  Permission bitmask: System.Byte[]
Statement: REVOKE GRANT OPTION FOR ALTER; ON DATABASE SCOPED CREDENTIAL :: AppCred; FROM [xtest] ;

For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24375

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection

 

Upcoming Webinars
    Additional Resources

      Go To Event ID:

      Security Log
      Quick Reference
      Chart
      Download now!