What exactly do you mean by "protect"? If
you don't trust your sa - fire him. Otherwise, create a separate instance
of SQL Server and don't allow the guy into the sysadmin role.
-- Tom
--------------------------------------------------------------- Thomas
A. Moreau, BSc, PhD, MCSE, MCDBA SQL Server MVP Columnist, SQL Server
Professional Toronto, ON Canada www.pinnaclepublishing.com/sql