Re: access deny the sa account

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Andrea Montanari (andrea.sqlDMO_at_virgilio.it)
Date: 11/02/04 

Date: Tue, 2 Nov 2004 13:06:14 +0100

hi Thomas
"Thomas Tsang" <thomast@hkc.net> ha scritto nel messaggio
news:OdxjCVKwEHA.1308@TK2MSFTNGP09.phx.gbl
> After install msde and create another user with system admin
> authority, is it possible to disable the account sa to access the
> system for security reason?
>
> I have tried using sp_denylogin / sp_revokelogin but both failure.
> Thanks in advance for any suggestion

sp_denylogin and sp_revokelogin only work with Windows NT users/groups and
not with SQL Server logins.
anyway, you can not disable "sa" login..
I know folks that renamed it directly in sysxlogins system table, but this
is not very polite :D , nor is supported..
the standard way to "disable" it is to assign it a random generated 128
chars password, so that no one knows it.. 

-- 
Andrea Montanari (Microsoft MVP - SQL Server)
http://www.asql.biz/DbaMgr.shtm        http://italy.mvps.org
DbaMgr2k ver 0.9.1  -  DbaMgr ver 0.55.1
(my vb6+sql-dmo little try to provide MS MSDE 1.0 and MSDE 2000 a visual
interface)
--------- remove DMO to reply

Relevant Pages

  • Re: Distributor SQLSERVERAgent Account
    ... accounts and SQL Server logins. ... a domain user account if you are to replicate from one ... >running SQL Server Agent as LocalSystem and sa? ...
    (microsoft.public.sqlserver.replication)
  • Re: not associated with a trusted sql connection
    ... That's because your asp.net application is running on local asp.net account. ... Either use username/password when connecting to sql server ... to the sql server logins. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: Error 15401 using sp_grantlogin (not addressed by current KB articles)
    ... Restarting Windows 2000 resolved the problem for this particular account, ... confused when it sees a duplicate SID. ... > One way to get SQL Server to agree with the renamed NT ... > Preview (to ensure the script was created), ...
    (microsoft.public.sqlserver.security)
  • Re: SharePoint V3 Install Error
    ... But it our case it had to do with Group Policies that forbid the account of ... WSS FAQ:www.wssv3faq.com/wss.collutions.com ... Event Source: WindowsSharePointServices3Search ... whatever you are installing WSS as sufficient rights to the SQL Server ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: sbs 2003 network slow why?
    ... Issue: Local Account Password Test ... SQL Server and/or MSDE authentication mode is set to Windows Only. ... The Everyone group does not have more than Read access to the SQL Server and/or MSDE registry keys. ... BUILTIN\Administrators group should not be part of sysadmin role. ...
    (microsoft.public.windows.server.sbs)