I am looking into some backup issues on an old Sql 2000 server and I've narrowed it down to the fact that the Sql Agent account was changed.

The big question that I have is whether or not I can tell when this was changed and by whom it was changed?

Thanks!

link|improve this question
feedback

2 Answers

up vote 1 down vote accepted

The Windows NT logs are the primary place to find when the account was first used - the eventlog comes with a find/filter option. However, it may have rolled depending on the configuration.

Check the SQL logs too - if the last restart was some time ago, it might give you a clue as to when.

If SQL Server is running under a domain account, it would be worth checking AD - many organisations put reference numbers against new accounts etc. Also have a trawl of any incident/request management system you might have.

link|improve this answer
feedback

Event Logs can help (specifically the Security log) but only if audit policy for Account management has been set by the administrator.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.