access deny the sa account

After install msde and create another user with system admin authority, is
it possible to disable the account sa to access the system for security
reason?
I have tried using sp_denylogin / sp_revokelogin but both failure. Thanks
in advance for any suggestion
hi Thomas
"Thomas Tsang" <thomast@.hkc.net> ha scritto nel messaggio
news:OdxjCVKwEHA.1308@.TK2MSFTNGP09.phx.gbl
> After install msde and create another user with system admin
> authority, is it possible to disable the account sa to access the
> system for security reason?
> I have tried using sp_denylogin / sp_revokelogin but both failure.
> Thanks in advance for any suggestion
sp_denylogin and sp_revokelogin only work with Windows NT users/groups and
not with SQL Server logins.
anyway, you can not disable "sa" login..
I know folks that renamed it directly in sysxlogins system table, but this
is not very polite :D , nor is supported..
the standard way to "disable" it is to assign it a random generated 128
chars password, so that no one knows it..
Andrea Montanari (Microsoft MVP - SQL Server)
http://www.asql.biz/DbaMgr.shtmhttp://italy.mvps.org
DbaMgr2k ver 0.9.1 - DbaMgr ver 0.55.1
(my vb6+sql-dmo little try to provide MS MSDE 1.0 and MSDE 2000 a visual
interface)
-- remove DMO to reply
|||Thank for your information
"Andrea Montanari" <andrea.sqlDMO@.virgilio.it> bl
news:2upbhrF2b83gdU1@.uni-berlin.de g...
> hi Thomas
> "Thomas Tsang" <thomast@.hkc.net> ha scritto nel messaggio
> news:OdxjCVKwEHA.1308@.TK2MSFTNGP09.phx.gbl
> sp_denylogin and sp_revokelogin only work with Windows NT users/groups and
> not with SQL Server logins.
> anyway, you can not disable "sa" login..
> I know folks that renamed it directly in sysxlogins system table, but this
> is not very polite :D , nor is supported..
> the standard way to "disable" it is to assign it a random generated 128
> chars password, so that no one knows it..
> --
> Andrea Montanari (Microsoft MVP - SQL Server)
> http://www.asql.biz/DbaMgr.shtmhttp://italy.mvps.org
> DbaMgr2k ver 0.9.1 - DbaMgr ver 0.55.1
> (my vb6+sql-dmo little try to provide MS MSDE 1.0 and MSDE 2000 a visual
> interface)
> -- remove DMO to reply
>

Access deny SA Account

For security reason, does it possible to deny the account sa to access the
SQL Server 2000. I have tried using sp_denylogin or sp_revokelogin but both
failure.
Thanks in advance for any suggestion
Nope. Set a string password and make sure that no.one knows that password. Or run SQL Server in
Windows Only mode.
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Thomas Tsang" <thomast@.hkc.net> wrote in message news:%23HFvs7MwEHA.3872@.TK2MSFTNGP11.phx.gbl...
> For security reason, does it possible to deny the account sa to access the
> SQL Server 2000. I have tried using sp_denylogin or sp_revokelogin but both
> failure.
> Thanks in advance for any suggestion
>
|||Even if you run SQL Server in Windows Authentication Only mode, you still
want to set a highly complex password for the sa account. The security mode
setting is only a Windows Registry key setting and is easily switched to
Mixed Authentication mode.
Sincerely,
Anthony Thomas
"Tibor Karaszi" wrote:

> Nope. Set a string password and make sure that no.one knows that password. Or run SQL Server in
> Windows Only mode.
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
>
> "Thomas Tsang" <thomast@.hkc.net> wrote in message news:%23HFvs7MwEHA.3872@.TK2MSFTNGP11.phx.gbl...
>
>
|||I absolutely agree (this is one thing I always push in classes). Thanks for bringing that up. :-)
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"AnthonyThomas" <AnthonyThomas@.discussions.microsoft.com> wrote in message
news:FA9CF586-CC7C-4D84-B95A-46838D49B32A@.microsoft.com...[vbcol=seagreen]
> Even if you run SQL Server in Windows Authentication Only mode, you still
> want to set a highly complex password for the sa account. The security mode
> setting is only a Windows Registry key setting and is easily switched to
> Mixed Authentication mode.
> Sincerely,
>
> Anthony Thomas
>
> "Tibor Karaszi" wrote:
news:%23HFvs7MwEHA.3872@.TK2MSFTNGP11.phx.gbl...[vbcol=seagreen]

Access deny SA Account

For security reason, does it possible to deny the account sa to access the
SQL Server 2000. I have tried using sp_denylogin or sp_revokelogin but both
failure.
Thanks in advance for any suggestionNope. Set a string password and make sure that no.one knows that password. Or run SQL Server in
Windows Only mode.
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Thomas Tsang" <thomast@.hkc.net> wrote in message news:%23HFvs7MwEHA.3872@.TK2MSFTNGP11.phx.gbl...
> For security reason, does it possible to deny the account sa to access the
> SQL Server 2000. I have tried using sp_denylogin or sp_revokelogin but both
> failure.
> Thanks in advance for any suggestion
>|||Even if you run SQL Server in Windows Authentication Only mode, you still
want to set a highly complex password for the sa account. The security mode
setting is only a Windows Registry key setting and is easily switched to
Mixed Authentication mode.
Sincerely,
Anthony Thomas
"Tibor Karaszi" wrote:
> Nope. Set a string password and make sure that no.one knows that password. Or run SQL Server in
> Windows Only mode.
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
>
> "Thomas Tsang" <thomast@.hkc.net> wrote in message news:%23HFvs7MwEHA.3872@.TK2MSFTNGP11.phx.gbl...
> > For security reason, does it possible to deny the account sa to access the
> > SQL Server 2000. I have tried using sp_denylogin or sp_revokelogin but both
> > failure.
> >
> > Thanks in advance for any suggestion
> >
>
>|||I absolutely agree (this is one thing I always push in classes). Thanks for bringing that up. :-)
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"AnthonyThomas" <AnthonyThomas@.discussions.microsoft.com> wrote in message
news:FA9CF586-CC7C-4D84-B95A-46838D49B32A@.microsoft.com...
> Even if you run SQL Server in Windows Authentication Only mode, you still
> want to set a highly complex password for the sa account. The security mode
> setting is only a Windows Registry key setting and is easily switched to
> Mixed Authentication mode.
> Sincerely,
>
> Anthony Thomas
>
> "Tibor Karaszi" wrote:
> > Nope. Set a string password and make sure that no.one knows that password. Or run SQL Server in
> > Windows Only mode.
> >
> > --
> > Tibor Karaszi, SQL Server MVP
> > http://www.karaszi.com/sqlserver/default.asp
> > http://www.solidqualitylearning.com/
> >
> >
> > "Thomas Tsang" <thomast@.hkc.net> wrote in message
news:%23HFvs7MwEHA.3872@.TK2MSFTNGP11.phx.gbl...
> > > For security reason, does it possible to deny the account sa to access the
> > > SQL Server 2000. I have tried using sp_denylogin or sp_revokelogin but both
> > > failure.
> > >
> > > Thanks in advance for any suggestion
> > >
> >
> >
> >

Access deny SA Account

For security reason, does it possible to deny the account sa to access the
SQL Server 2000. I have tried using sp_denylogin or sp_revokelogin but both
failure.
Thanks in advance for any suggestionNope. Set a string password and make sure that no.one knows that password. O
r run SQL Server in
Windows Only mode.
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Thomas Tsang" <thomast@.hkc.net> wrote in message news:%23HFvs7MwEHA.3872@.TK2MSFTNGP11.phx.g
bl...
> For security reason, does it possible to deny the account sa to access the
> SQL Server 2000. I have tried using sp_denylogin or sp_revokelogin but bo
th
> failure.
> Thanks in advance for any suggestion
>|||Even if you run SQL Server in Windows Authentication Only mode, you still
want to set a highly complex password for the sa account. The security mode
setting is only a Windows Registry key setting and is easily switched to
Mixed Authentication mode.
Sincerely,
Anthony Thomas
"Tibor Karaszi" wrote:

> Nope. Set a string password and make sure that no.one knows that password.
Or run SQL Server in
> Windows Only mode.
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
>
> "Thomas Tsang" <thomast@.hkc.net> wrote in message news:%23HFvs7MwEHA.3872@.
TK2MSFTNGP11.phx.gbl...
>
>|||I absolutely agree (this is one thing I always push in classes). Thanks for
bringing that up. :-)
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"AnthonyThomas" <AnthonyThomas@.discussions.microsoft.com> wrote in message
news:FA9CF586-CC7C-4D84-B95A-46838D49B32A@.microsoft.com...[vbcol=seagreen]
> Even if you run SQL Server in Windows Authentication Only mode, you still
> want to set a highly complex password for the sa account. The security mo
de
> setting is only a Windows Registry key setting and is easily switched to
> Mixed Authentication mode.
> Sincerely,
>
> Anthony Thomas
>
> "Tibor Karaszi" wrote:
>
news:%23HFvs7MwEHA.3872@.TK2MSFTNGP11.phx.gbl...[vbcol=seagreen]