For auditing purposes, a customer will request the purpose of scripts in the tools directory:

<drive>:\Program Files\Symantec\DataLossPrevention\EnforceServer\x.x.xxxx\Protect\tools\sql

• ClearAdminLockout.sql - Used to unlock DLP Administrator account should it become locked due to multiple failed login attempts.
  
  
• ClearSystemEvents.sql - This will clear all records from the systemevents table.  Systemevents table is used as a log by DLP to record system events for troubleshooting.  These do not delete during normal operation.
  
  
• ListAccountUserAction.sql - Audit report for user account changes.
  
  
• ListUnsuccessfulLoginAttempts.sql - Audit report of failed login attempts.
  
  
• ListUserSessions.sql - Audit report of user sessions.