Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 General SQL Server Forums
 New to SQL Server Administration
 Need help Auditing transaction log

Author  Topic 

devadmin
Starting Member

1 Post

Posted - 2012-05-15 : 21:15:45
Hello fellow SQLTeam members.

I have encountered the situation where i need to find out which of our DBA's disabled an SQL job. We start the jobs using MS SQL Server Management Studio in the Job Activity Monitor. You can right click on the job and specify "Disabled"

What i'm looking for is to how to find out a logon id which has disabled the job since all of DBA use their logon to start the studio. This information should be somewhere but it's not easy to find.

Can anybody please pinpoint me to direction where i can at least do some research on this topic.

Your help is greatly apreciated.

Lumbago
Norsk Yak Master

3271 Posts

Posted - 2012-05-16 : 06:08:15
I don't think you'll find this anywhere unless you actively added an ALL SERVER trigger beforehand that captures this event. The only place I can think of where you might find relevant information is in the servers security-log.

- Lumbago
My blog-> http://thefirstsql.com/2011/07/08/how-to-find-gaps-in-identity-columns-at-the-speed-of-light/
Go to Top of Page

ovc
Starting Member

35 Posts

Posted - 2012-05-19 : 13:35:52
Hi

you are looking for an event class sp starting looking like this.

EXEC msdb.dbo.sp_update_job @job_id=N'dd149496-49f1-402b-bc05-d857349a7374',
@enabled=0

Off course the job_id would differs in your case.

Depending on the trace file size and the periode you are searching for, I would import the trace file in a table in SQL Server and then I would perform a search after "sp_update_job" and "@enabled=0"
Go to Top of Page

ovc
Starting Member

35 Posts

Posted - 2012-05-19 : 13:38:52
this was just assuming that you were taking a profiler trace at that point with the appropriate data.
If this data is not available, from what i know, there is no other way finding out who did this.
Go to Top of Page
   

- Advertisement -