Login modification Tracking

Question

Hi,
     In my environment One application user had Read access in a database, but all of sudden the access is revoked. I don't know how it happened. Other than me no one has Admin access in the server.. Is there any way to track when the
change happened?

Answer 1

-- Try this code....
DECLARE @FileName
VARCHAR(MAX) 
SELECT @FileName
= SUBSTRING(path,
0, LEN(path)-CHARINDEX('\',
REVERSE(path))+1) +
'\Log.trc' 
FROM sys.traces  
WHERE is_default
= 1; 
SELECT  
     o.name,  
     o.OBJECT_ID, 
     o.create_date,
     gt.NTUserName, 
     gt.HostName, 
     gt.SPID, 
     gt.DatabaseName, 
     gt.TEXTData
FROM sys.fn_trace_gettable(
@FileName,
DEFAULT ) AS
gt 
JOIN tempdb.sys.objects
AS o  
     ON gt.ObjectID
= o.OBJECT_ID 
WHERE gt.DatabaseID
= 2
  AND gt.EventClass
= 46 -- (Object:Created Event from sys.trace_events) 
  AND o.create_date
>= DATEADD(ms, -100,
gt.StartTime)  
  AND o.create_date <=
DATEADD(ms,
100, gt.StartTime)
Raju Rasagounder Sr MSSQL DBA