Take the 2-minute tour ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

I am having problems trying to audit a third party app with a SQLServer backend.

The app manages users and user access via a SQL table, using a single SQL login to access the databases.

I am trying to audit this by using the Host PID much like Windows Task Manager associates a PID and Owner for every process.

Here is what I have attempted and tried

  • I was able to figure out how to extract the app.exe PID.
  • I cannot figure out how to get the Windows Owner associated to that PID.
  • I have tried using xp_cmdshell to query the Windows tasklist and even wrote a .Net console app which gets called by SQL to collect the information but every time I try to extract the Owner it is blank.

Any thoughts on how I can get the Owner?

share|improve this question
    
We went through this same exercise... as that 3rd-party app vendor; single SQL login, Windows apps, need to audit the user that's logged in. We ended up modifying the software to collect the data we need. –  Jon Seigel Sep 7 '12 at 21:49
    
If the app is run from the users desktop (as opposed to a web app for example) then you could use the hostname to identify which workstation the connection is coming from. –  Kenneth Fisher Jul 1 '13 at 20:00

1 Answer 1

I assume your app is doing the user/password check as you said it manages the users. With extended events you can audit the login and every needed field.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.