how to determine who changed user permissions?

I have a problem administering my sql server security, I suspect there are
several users with excessive permissions and they themselves are granting and
modifying permissions for other users, the problem is that I am not running
in C2 Audit mode, is there any other way to check which users have modified
permissions for other users in, lets say the last month or so?i-DLT wrote:
> I have a problem administering my sql server security, I suspect
> there are several users with excessive permissions and they
> themselves are granting and modifying permissions for other users,
> the problem is that I am not running in C2 Audit mode, is there any
> other way to check which users have modified permissions for other
> users in, lets say the last month or so?
Better to check which users have rights that they should not have and
remove those rights. You might check the fixed administrator role (and
other fixed server roles) and see who is a member. You could also use
sp_helprotect to see who granted permissions to various objects.
--
David Gugick
Quest Software
www.imceda.com
www.quest.com