Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

SQL Server Auditing

Posted on 2012-03-30
1
Medium Priority
?
205 Views
Last Modified: 2012-04-09
Currently Running SQL Server 2008R2
I have a few production Databases
I need to set up auditing to track all changes to these servers and all databases on these servers.
For Example Altered Procedures or dropped indexes or changed passwords plus all other major changes
I need to make sure that it is lightweight since I do not want our production environment to suffer. What type of audit can I set up which is not too taxing on the system?
Or will auditing always have a negative impact on the production environment?
0
Comment
Question by:VitaminD
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 25

Accepted Solution

by:
jogos earned 1500 total points
ID: 37790068
Best way is to limit permissions to only a few. Channel the db-changes so they get 'authored' before applied. And so you also can have the possibility to get your db-changes in version control.  You must restore db of last week, no problem and you still have the scripts to do the db-changes which were done since then.

Then you still can 'audit' with DDL-triggers, they don't bother normal usage of your database
See at
http://msdn.microsoft.com/en-us/library/bb522542.aspx
http://msdn.microsoft.com/en-us/library/bb522542.aspx 
http://www.mssqltips.com/sqlservertip/2085/sql-server-ddl-triggers-to-track-all-database-changes/

Or 'Auditing'
http://www.appsecinc.com/presentations/Security_Auditing_MSSQL.pdf
http://msdn.microsoft.com/en-us/library/cc280386(v=sql.105).aspx
0

Featured Post

Tech or Treat!

Submit an article about your scariest tech experience—and the solution—and you’ll be automatically entered to win one of 4 fantastic tech gadgets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As more and more people are shifting to the latest .Net frameworks, the windows presentation framework is gaining importance by the day. Many people are now turning to WPF controls to provide a rich user experience. I have been using WPF controls fo…
Entering time in Microsoft Access can be difficult. An input mask often bothers users more than helping them and won't catch all typing errors. This article shows how to create a textbox for 24-hour time input with full validation politely catching …
This is Part 3 in a 3-part series on Experts Exchange to discuss error handling in VBA code written for Excel. Part 1 of this series discussed basic error handling code using VBA. http://www.experts-exchange.com/videos/1478/Excel-Error-Handlin…
Video by: ITPro.TV
In this episode Don builds upon the troubleshooting techniques by demonstrating how to properly monitor a vSphere deployment to detect problems before they occur. He begins the show using tools found within the vSphere suite as ends the show demonst…

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question