How can I monitor failed login attempts in SQL Server 2000?
Sadly, failed login error reporting is disabled by default (gasp!). I don’t know why Microsoft has it setup that way, but it is. Pop into SQL Enterprise Manager, choose your server, go to properties, go to the Security tab and enable it. Once this has been activated, you’ll start seeing them show up in your log files. A note of caution, the errors are notoriously brief and don’t provide the amount of information that I would want if I was performing forensics on the server. Steven Andres, Security Expert Return to SQL login and permissions FAQs 2.
