Thanks for everyone below two query has used to Track who has done ? what has done?
thanks for every one.................especially **JohnM.**
SELECT * FROM ::fn_trace_getinfo(default)
kindly run the first query to get the C:/programmefile/...trc files and paste to second query and run the second query then u can get the details if u know which time it happens..... i think it may help .......check it
SELECT top 15
loginname,
textdata,
RoleName,
TargetLoginName,
starttime,
e.name as EventName,
hostname,
applicationname,
servername,
databasename,
objectName,
e.category_id,
cat.name,
duration,
eventclass,
eventsubclass,
loginsid,
endtime,
spid
FROM ::fn_trace_gettable('C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL
\LOG\log_4192.trc',0)
INNER JOIN sys.trace_events e
ON eventclass = trace_event_id
INNER JOIN sys.trace_categories AS cat
ON e.category_id = cat.category_id
where e.name='Audit Add Login to Server Role Event'
order by starttime desc
↧