| Event Id | 15485 |
| Source | MSSQLServer |
| Description | Revoked login access from %s. |
| Event Information | According To Microsoft: sp_revokelogin removes the login entries from Microsoft SQL Server for a Microsoft Windows NT user or group created with sp_grantlogin or sp_denylogin. sp_revokelogin has successfully deleted the login entries from the sysxlogins table. sp_revokelogin does not explicitly prevent Windows NT users from connecting to SQL Server, but prevents Windows NT users from doing so through their Windows NT user accounts. However, Windows NT users can still connect if they are members of a Windows NT group that has been granted access to SQL Server using the sp_grantlogin stored procedure. |
| Reference Links | Microsoft product: SQL Server Version: 2000.80.760.0 Event Source: MSSQLServer Event ID: 15485 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.