logs

SQL Server is running on a domain account.
Domain\test
On the SQL Server logs, in a given day I see multiple successful logon
attempts for domain\test.
Is that ok?
The SQL Server is running, so why do I see successful logon for domain\test?
Help!Hi,
Does the logs seems like below?
*************
2005-11-21 10:07:18.54 logon Login succeeded for user 'domain\test'.
Connection: Trusted.
2005-11-21 10:07:19.36 spid53 Using 'xpsqlbot.dll' version
'2000.80.2039' to execute extended stored procedure 'xp_qv'.
2005-11-21 10:07:28.30 logon Login succeeded for user 'domain\test'.
Connection: Trusted.
2005-11-21 10:07:28.31 logon Login succeeded for user 'domain\test'.
Connection: Trusted.
2005-11-21 10:07:28.33 logon Login succeeded for user 'domain\test'.
Connection: Trusted.
2005-11-21 10:07:28.97 spid55 Using 'xpstar.dll' version '2000.80.2039'
to execute extended stored procedure 'xp_sqlagent_monitor'.
2005-11-21 10:07:29.01 logon Login succeeded for user 'domain\test'.
Connection: Trusted.
2005-11-21 10:07:29.42 logon Login succeeded for user 'sa'. Connection:
Non-Trusted.
*************
If so, you may have enabled All / Success for SQL Audit. Please check topic
"Auditing SQL Server Activity" in BOL.
If not, would you please attach the log here?
Thank you for your patience and cooperation. If you have any questions or
concerns, don't hesitate to let me know. We are always here to be of
assistance!
Sincerely yours,
Michael Cheng
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.|||Hi,
as audit levet set to all it logs everything (sucess,failour,warning and
information) it should because of Auditing level is set to all please set it
to only for Failure and Warning ... or as suggested attach it for our
references.
Regards
--
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"docsql" wrote:

> SQL Server is running on a domain account.
> Domain\test
> On the SQL Server logs, in a given day I see multiple successful logon
> attempts for domain\test.
> Is that ok?
> The SQL Server is running, so why do I see successful logon for domain\tes
t?
> Help!
>
>