"Ryan" <ry********@hot mail.com> wrote in message
news:78******** *************** **@posting.goog le.com...
We have an old database & server that is supposed to be used for
reference only. Access to this is minimal and read-only.
What I need to do is find out what a specific user did on a certain
day. I know which user it was and I know the day, but I need to prove
if they did anything on the server (fantastic if I can tell what they
actually did). I'd like to be able to tell if they had logged on as
well.
We suspect that they looked up some confidential information on
someone they shouldn't have. I need to do this for a HR investigation.
Running SQL 6.5
Any help would be appreciated.
Unless you had some sort of trace running, or unless your application logs
all access, then I don't think there's any way to find out. Assuming that
you configured the server to log all logins, then you should be able to see
the connection recorded in the SQL Server error log, but there is no way to
know what the person actually did without more information (from an
application log, for example).
If the database is read-only, then there would be no transaction log records
(although since there's no supported way to view them, you would have to go
to Microsoft for help), and SELECT statements are not logged anyway.
Simon