Re: SQL2000 SA Account

From: Jasper Smith (jasper_smith9_at_hotmail.com)
Date: 05/15/03 

Date: Thu, 15 May 2003 18:01:54 +0100

Do you use SQL authentication for anything, if not then
you can change the server to Windows only. However,
regardless of this make sure the sa login has a very strong
password and lock it away. The trouble is that anyone
who is a sysadmin can change the sa password without
knowing what it currently is so it won't do a hell of a lot of
good. As you have discovered, you can't remove the sa login
or remove it from the sysadmin role. 

-- 
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Graham Mitchell" <spam@ceicmh.org> wrote in message
news:%23j0MDDvGDHA.2852@tk2msftngp13.phx.gbl...
> We've set up each of our programmers with their own Active Directory
> SQLAdmin account, made them members of the SQL Server Admin group in AD.
The
> AD group has been added to the SQL server login IDs, and been given the
> system administrator role.
>
> What I'd like to do now is to basically turn the SA account into a 'user'
> account, with as few rights as possible (actually, I'd like to delete it,
> but you can't do that)... What's the best way to go about this...? Any
> suggestions and pointers are gratefully accepted.
>
>
> Graham
>
>

Relevant Pages

  • Re: SQL 2k5 SP2 Mirroring - SQL in Mixed mode.
    ... US\sqlservices (old SQLservice account) still member of built-in local admin ... Login: US\sqlservices ... How can I transfer the SQL logins to ... Here is SP_help_revlogin results from the Principal Server (NYSQL-3) ...
    (microsoft.public.sqlserver.clustering)
  • Secure web authentication system w/o SSL and PKI
    ... In the beginning, a user should be able to register for an account, ... minted one-time password to their email address. ... it is assumed that only both the server and the end ... I'm making the big assumption that the user's email login has not been ...
    (comp.security.misc)
  • Re: SQL account rights
    ... Please advice what is the best, suitable rights rather than domain admin ... issues, such as a server that might have IIS running on the same machine, ... applicable to SQL 2000 environment, ... files, or backups, make sure that the service account has Full ...
    (microsoft.public.sqlserver.security)
  • Re: user cant access OWA or RWW
    ... I filtered the Security log on the server using her name in the User box and unchecked Success. ... Now I see Event 533's for her account when I tried it this morning. ... There should be a couple of events during this login process. ...
    (microsoft.public.windows.server.sbs)
  • RE: MP Install issue
    ... Where in the installation are you talking about specifying the account rather ... > MPDB ERROR - CONNECTION PARAMETERS ... > SQL Server Name: servername ... > with a trusted SQL Server connection. ...
    (microsoft.public.sms.setup)