Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 Security tab 'failures' impact

Author  Topic 

Soulweaver
Starting Member

18 Posts

Posted - 2004-10-25 : 07:07:23
Greetings

Our auditors have a request that we should enable the 'login failure' functionality of SQL Server in our production environment.

We run SQL 2000 SP2+Slammer (Due to go SP3+818 soon).

What Impact would this change have on the performance on my box? I am not particularly worried about the size of the sql logs or event viewer logs as I'm fairly optimistic about the number of 'login failures' on our production box.

Has anyone had any experience with enabling this feature (server/properties/security/audit level) and the impact it had in their environments?

feedback would be appreciated

-----------------------
Black Holes exist where God divided by Zero
-----------------------

derrickleggett
Pointy Haired Yak DBA

4184 Posts

Posted - 2004-10-25 : 07:11:56
I have it enabled. There really isn't a performance decrease from it that I can see. There shouldn't be as nothing should be "failing" to login in your production environment.

MeanOldDBA
derrickleggett@hotmail.com

When life gives you a lemon, fire the DBA.
Go to Top of Page

Kristen
Test

22859 Posts

Posted - 2004-10-25 : 08:01:41
We have it enabled. The logs go balistic if the server is open and people [with port scanners] are trying to login as SA/ADMIN and one other [the name of which I forget]. But then the log size does alert you to needing to do something about the problem!

Krsiten
Go to Top of Page

Soulweaver
Starting Member

18 Posts

Posted - 2004-10-25 : 08:36:50
This server is nice and internal, with no outside access at all, so that is lovely. I got permission to implement it in our PPE, if they're happy with the impact we'll take it to prod.

Thanks Kristen and Derrick

btw, do u guys do anything other than read and reply to these ;)) you must have a well automated auto monitored SQL environment <g>

-----------------------
Black Holes exist where God divided by Zero
-----------------------
Go to Top of Page

Kristen
Test

22859 Posts

Posted - 2004-10-25 : 08:44:02
"This server is nice and internal, with no outside access at all, so that is lovely"

Until something internal gets a virus, and starts relaying hacking requests from teh outside world ... :-(

"you must have a well automated auto monitored SQL environment"

All my pigs are fed and ready to fly ...

Kristen
Go to Top of Page
   

- Advertisement -