SQL Server Audit Action Group: SERVER_PRINCIPAL_CHANGE_GROUP

Available in		New to:
Database Audit Specification	Server Audit Specification	2012	2016
	•

This group tracks the creation modification or deletion of server principles which include logins and server roles.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID	Description
24075	Issued a create server principal command
24076	Issued a delete server principal command
24077	Issued a change server principal credentials command
24078	Issued a disable server principal command
24079	Issued a change server principal default database command
24080	Issued an enable server principal command
24081	Issued a change server principal default language command
24082	Issued a change server principal password expiration command
24083	Issued a change server principal password policy command
24084	Issued a change server principal name command
24288	Issued a create user-defined server role command
24289	Issued a change user-defined server role command
24290	Issued a delete user-defined server role command

Upcoming Webinars

Top 5 Security Tasks to Automate with PowerShell
Maze Ransomware Deep Dive: Using Threat Research Reports and MITRE ATT&CK to Turn Analysis into Action with Maze as an Example
Ethical Hacking 101: Perform Your Own Privilege Elevation and Lateral Movements with Metasploit

Additional Resources

Audit Policy

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard

SERVER_PRINCIPAL_CHANGE_GROUP

User name:
Password:
	/ Forgot?
	Register

September 2020 Patch Tuesday	"Patch Tuesday: Critical Browser and Exchange Vulnerabilities " - sponsored by LOGbinder

Follow @randyfsmith

Home

Follow @randyfsmith

About | Newsletter | Contact

Ultimate Windows Security is a division of Monterey Technology Group, Inc. ©2006-2020 Monterey Technology Group, Inc. All rights reserved.
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.