Is there a way to password protect sql server audits? I’m creating an audit specification to record the DML statement and there are few people who have the sysadmin role in the sql server instance. I don’t want to remove their sysadmin role and in the mean time I want them to be able to disable the Sql Server audit. I want to be able to audit the database without worrying about that someone could disable the audit then make changes to the database.
True anyone in the sysadmin role can alter the audits at the server level. Be mindful of users with .dbo access at the database level as well. Take a look here for auditing information.
http://msdn.microsoft.com/en-us/library/cc280386.aspx I am pretty sure you can audit changes made to the audit. :)