Problem in enable system audit option

Hi

When i click the enable system audit button inside the system audit i got dialog box, it contains
Auditing has been installed successfully but not yet activated. You must restart the SQL Server for the new settings to take affect!
Do you want to restart SQL Server now?
I click the yes button i got another dialog box it contains
Unable to restart remote SQL server service, insufficient permissions or service is not responding. Try restarting SQL Server manually.
Then i click the ok button i got another dialog box it contains
DB Audit’s audit procedures failed to start. Check windows application event log on the server for additional information

What's the problem, please help me.

First you need to restart SQL Server instance which you havne't done yet.
After that please check your Windows Application Event Log on the server and verify there are no DB Audit errors in the log. Look for messages that have "DB Audit" in the Source column.

: Hi

: When i click the enable system audit button inside the system audit i got
: dialog box, it contains
: Auditing has been installed successfully but not yet activated. You must
: restart the SQL Server for the new settings to take affect!
: Do you want to restart SQL Server now?
: I click the yes button i got another dialog box it contains
: Unable to restart remote SQL server service, insufficient permissions or
: service is not responding. Try restarting SQL Server manually.
: Then i click the ok button i got another dialog box it contains
: DB Audit’s audit procedures failed to start. Check windows application event
: log on the server for additional information

: What's the problem, please help me.

Hi

I got three event error messages in DB Audit source column

First one,

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:
SQL Server message 18456, state 1, severity 14
Login failed for user 'sa'.

Second one,

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:
Error #10003: Login incorrect

Third one,

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:
Error connecting to the database!.

Please give solution for this problem

Please use trusted connection when enabling the auditing. On the connection dialog in DB Audit check "Trusted connection" box, connect to the db, open up System Audit Settings dialog and then Disable and re-Enable the auditing.

: Hi

: I got three event error messages in DB Audit source column

: First one,

: The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found.
: The local computer may not have the necessary registry information or
: message DLL files to display messages from a remote computer. You may be
: able to use the /AUXSOURCE= flag to retrieve this description; see Help
: and Support for details. The following information is part of the event:
: SQL Server message 18456, state 1, severity 14
: Login failed for user 'sa'.

: Second one,

: The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found.
: The local computer may not have the necessary registry information or
: message DLL files to display messages from a remote computer. You may be
: able to use the /AUXSOURCE= flag to retrieve this description; see Help
: and Support for details. The following information is part of the event:
: Error #10003: Login incorrect

: Third one,

: The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found.
: The local computer may not have the necessary registry information or
: message DLL files to display messages from a remote computer. You may be
: able to use the /AUXSOURCE= flag to retrieve this description; see Help
: and Support for details. The following information is part of the event:
: Error connecting to the database!.

: Please give solution for this problem

Hi

I am facing the same issue. Even after applying the trusted connection setting.
Kindly suggest me the whole procedure for setting a profile till enabling it.
We are currently evaluating the DBAudit tool and during testing we are facing issues.
Waiting for your early response.

Thanks

Hi,

the procedure is described step by step in the DB Audit manual which is installed with the software.

Are you getting exactly the same issue?

	Quote:
	SQL Server message 18456, state 1, severity 14: Login failed for user 'sa'.

The fact that it says 'sa' in the message indicates that it si not using Windows Authentication. Also if you take a look at preceding messages in the Application Event Log you should find an event record in which DB Audit's indicates which login and authentication type is used by the auditing processes to connect to your database server. Please let us know if you need further help with that. Don't forget to indicate your DB Audit version.

I am using Db Audit Expert 4.0 and having following err. msg:

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:

Using 'sa' SQL-authentication login for the audit process..

I am using Db Audit Expert 4.0 and having following err. msg:

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:

Using 'sa' SQL-authentication login for the audit process..

What makes you think this is an error message? Isn't the message type set to Information?

PS. This message is recorded for auditing purposes, to provide a trail of when and how DB Audit is started.

Following are the error we are having.

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event:

[Microsoft][ODBC SQL Server Driver][SQL Server]Login failed for user 'sa'..

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event:

Audit event writer process is unable to connect to the database!.

Have you changed sa's password recently? During the audit system installation, in case you used SQL Authentication option instead of Trusted connection option, DB Audit records the login you entered in the Management Console and uses it for the auditing services. If you change your password later, you need to disable and then re-enable the auditing. This will make DB Audit to update the saved login and password. To avoid being in this situation and the need to save and maintain passwords, make sure you connect with Trusted connection option when installing the auditing DB Audit, or changing auditing configuration.

Thanks for the response, but i didn't helped me out. Let me explain you what is the actual scenario and how we are implementing DB Audit Expert. SQL Server 2K Ent. edition is installed in another box and we are installing the DB Audit utility into another box. SQL Server is set to mixed mode security. I have created a new database in SQL BOX for Audit Expert.
I am using 'sa' credentials for login to SQL SERVER thats why i didnt used trusted connection. I copied the dll as mentioned in the process. even doing all that i am that error. I hope this will help you understand our issue.

	Quote:
	I am using 'sa' credentials for login to SQL SERVER thats why i didnt used trusted connection.

For the audit installation, you do need to use Trusted connection, in other words use Windows authentication. That's it.

Later, to run reports and use other tools, you can use any login and authentication type you want, but for the installation you should use the Trusted connection option.

Just to clear that, we just want to monitor specific activities in sql server like 'failed logins'. Is it required to install DB Audit on the same box, because we are still facing exception regarding permission etc.