打开 trace properties -> event selection 选项卡,选中 show all events 和 show all columns, 在 security audit 下选择 Audit Login Change Password Event
使用了properties 跟踪到的内容,当数据库密码给修改时有这两个动作 Configuration option 'show advanced options' changed from 0 to 1. Run the RECONFIGURE statement to install. Configuration option 'xp_cmdshell' changed from 1 to 1. Run the RECONFIGURE statement to install. 为什么老是会自动运行这两个动作的? 我已经给服务器设置了IP限制.
查看维护计划是在半夜时提示sa密码错误.也就是半夜给改的密码.
电脑也没中毒.是最近才出现的,是不是微软的补丁出问题了.
在 security audit 下选择 Audit Login Change Password Event
Configuration option 'show advanced options' changed from 0 to 1. Run the RECONFIGURE statement to install.
Configuration option 'xp_cmdshell' changed from 1 to 1. Run the RECONFIGURE statement to install.
为什么老是会自动运行这两个动作的?
我已经给服务器设置了IP限制.