Solved

Determine WHO deleted 5000 rows last wek

Posted on 1998-04-07
3
273 Views
Last Modified: 2012-06-21
Someone (or a stored procedure) deleted all rows in a large table last week.  The create date did not change, and a trigger on the table inserted a recored of all 5000 rows being deleted.  Can the transaction log or anything else give more details/clues about how/who did this?
0
Comment
Question by:snydero
  • 2
3 Comments
 
LVL 7

Expert Comment

by:spiridonov
ID: 1091117
You can't determine who did what from transaction log. You can try checking audit log to see at least who was logged in at the time, when delete happened. In the future you can use CURRENT_USER function in your tirigger to record the user name of person making changes.
0
 
LVL 7

Expert Comment

by:spiridonov
ID: 1091118
Unfortunatly there is no other way
0
 
LVL 2

Accepted Solution

by:
jbiswas earned 100 total points
ID: 1091119
There is no way to find this out, not even from the transaction log unless you have Microsoft look at it and they decrypt the info in the transaction log(which I doubt they will). They do have a way to decrypt the transaction log but like all other vendors they give noone the code to decrypt the tran log. This is a black box and noone with any sanity will give you a way to do this. However obviously the internal architechture can read this tran log, else how would they do replication from one server to another(Microsoft's replication schema is transaction based). However if you knew when the table got dropped, you could replay the transaction log till that point of time and recover from that disaster.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Nowadays, some of developer are too much worried about data. Who is using data, who is updating it etc. etc. Because, data is more costlier in term of money and information. So security of data is focusing concern in days. Lets' understand the Au…
Introduction SQL Server Integration Services can read XML files, that’s known by every BI developer.  (If you didn’t, don’t worry, I’m aiming this article at newcomers as well.) But how far can you go?  When does the XML Source component become …
Familiarize people with the process of retrieving data from SQL Server using an Access pass-thru query. Microsoft Access is a very powerful client/server development tool. One of the ways that you can retrieve data from a SQL Server is by using a pa…
Via a live example, show how to setup several different housekeeping processes for a SQL Server.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now