建立DLL触发器只允许sa账户本地登录

--建立DLL触发器只允许sa账户本地登录
CREATE TRIGGER SA_LoginIP_Check
ON ALL SERVER WITH EXECUTE AS 'sa'
FOR LOGON
AS
BEGIN
DECLARE @ip nvarchar(max)
DECLARE @loginName nvarchar(max)
SELECT @ip=EVENTDATA().value
('(/EVENT_INSTANCE/ClientHost)[1]','nvarchar(max)')
SELECT @loginName=EVENTDATA().value
('(/EVENT_INSTANCE/LoginName)[1]','nvarchar(max)')
--这里可根据@ip 及@loginname 来自定义登录规则,以下则为只允许sa本机登录的例子
IF @loginName='sa'
BEGIN
IF @ip<>'<local machine>'
ROLLBACK
END
END