Saturday, February 11, 2012

access deny the sa account

After install msde and create another user with system admin authority, is
it possible to disable the account sa to access the system for security
reason?
I have tried using sp_denylogin / sp_revokelogin but both failure. Thanks
in advance for any suggestion
hi Thomas
"Thomas Tsang" <thomast@.hkc.net> ha scritto nel messaggio
news:OdxjCVKwEHA.1308@.TK2MSFTNGP09.phx.gbl
> After install msde and create another user with system admin
> authority, is it possible to disable the account sa to access the
> system for security reason?
> I have tried using sp_denylogin / sp_revokelogin but both failure.
> Thanks in advance for any suggestion
sp_denylogin and sp_revokelogin only work with Windows NT users/groups and
not with SQL Server logins.
anyway, you can not disable "sa" login..
I know folks that renamed it directly in sysxlogins system table, but this
is not very polite :D , nor is supported..
the standard way to "disable" it is to assign it a random generated 128
chars password, so that no one knows it..
Andrea Montanari (Microsoft MVP - SQL Server)
http://www.asql.biz/DbaMgr.shtmhttp://italy.mvps.org
DbaMgr2k ver 0.9.1 - DbaMgr ver 0.55.1
(my vb6+sql-dmo little try to provide MS MSDE 1.0 and MSDE 2000 a visual
interface)
-- remove DMO to reply
|||Thank for your information
"Andrea Montanari" <andrea.sqlDMO@.virgilio.it> bl
news:2upbhrF2b83gdU1@.uni-berlin.de g...
> hi Thomas
> "Thomas Tsang" <thomast@.hkc.net> ha scritto nel messaggio
> news:OdxjCVKwEHA.1308@.TK2MSFTNGP09.phx.gbl
> sp_denylogin and sp_revokelogin only work with Windows NT users/groups and
> not with SQL Server logins.
> anyway, you can not disable "sa" login..
> I know folks that renamed it directly in sysxlogins system table, but this
> is not very polite :D , nor is supported..
> the standard way to "disable" it is to assign it a random generated 128
> chars password, so that no one knows it..
> --
> Andrea Montanari (Microsoft MVP - SQL Server)
> http://www.asql.biz/DbaMgr.shtmhttp://italy.mvps.org
> DbaMgr2k ver 0.9.1 - DbaMgr ver 0.55.1
> (my vb6+sql-dmo little try to provide MS MSDE 1.0 and MSDE 2000 a visual
> interface)
> -- remove DMO to reply
>

No comments:

Post a Comment