Log SQL Server Password change

Question

I have a recent unfortunate event. I host a business partner's SQLServer 2005 server, and the "sa" password was mysteriously changed (nobody wants to take responsibility on it). So I was wondering, is there a way I can configure SQL Server 2005 to log all password changes?

I know that could be achieved with Windows Server 2003, Windows Server 2008 or similar. But the thing is, I am running on Windows XP Pro (I know I should not be doing this, but my business partner claims she doesn't have the budget to buy a full fledge Windows Server OS).

Thanks a lot!

Answer 1

Do they have enough money to recreate the database from scratch once you loose data for the second time? Seriously, you should simply the Windows event viewer to see the last access. SA typically will show an event in the the security log.

Answer 2

Some ideas...

1. Using SQL profiler, Audit Login Change Password Event Class
2. DDL triggers, specifying ALTER USER DDL event
3. Rename "sa", create a dummy "sa" account

Anyone with rights to change sa passord will be able to undo or switch off any auditing though

Answer 3

Try using command prompt to change lost sql password.

Osql –S yourservername –E

1> EXEC sp_password NULL, 'yourpassword', 'sa'

2> GO

This article is given 4 methods to change ms sql server password, that could be helpful.