+ Reply to Thread
Results 1 to 7 of 7

Disabling SA account

  1. Disabling SA account

    Is there any way - 'SA' account can be disabled in SQL Server 2000 ?

    Base on a recent audit we are replacing SA account with a new sql login
    account.

    In 2005, is there any way we can change the ownership of the system database
    (master, model and tempdb) to a new sql login other than SA.

    Thanks for your input!

    --
    P Samuel

    Message posted via SQLMonster.com
    http://www.sqlmonster.com/Uwe/Forums...erver/200806/1


  2. Re: Disabling SA account

    You cannot disable the sa account. I don't believe you can change the
    ownership of SQL Server system databases.

    --
    Tom

    ----------------------------------------------------
    Thomas A. Moreau, BSc, PhD, MCSE, MCDBA, MCITP, MCTS
    SQL Server MVP
    Toronto, ON Canada
    https://mvp.support.microsoft.com/profile/Tom.Moreau


    "Sam via SQLMonster.com" wrote in message
    news:85163b2d2a568@uwe...
    Is there any way - 'SA' account can be disabled in SQL Server 2000 ?

    Base on a recent audit we are replacing SA account with a new sql login
    account.

    In 2005, is there any way we can change the ownership of the system database
    (master, model and tempdb) to a new sql login other than SA.

    Thanks for your input!

    --
    P Samuel

    Message posted via SQLMonster.com
    http://www.sqlmonster.com/Uwe/Forums...erver/200806/1



  3. Re: Disabling SA account

    Sam,

    Msg 15109, Level 16, State 1, Line 1
    Cannot change the owner of the master, model, tempdb or distribution
    database.

    Although you cannot get rid of 'sa' as far as I know, you can give it a
    password that nobody knows. (In SQL Server 2005 you can also disable login
    for the sa account.)

    RLF


    "Sam via SQLMonster.com" wrote in message
    news:85163b2d2a568@uwe...
    > Is there any way - 'SA' account can be disabled in SQL Server 2000 ?
    >
    > Base on a recent audit we are replacing SA account with a new sql login
    > account.
    >
    > In 2005, is there any way we can change the ownership of the system
    > database
    > (master, model and tempdb) to a new sql login other than SA.
    >
    > Thanks for your input!
    >
    > --
    > P Samuel
    >
    > Message posted via SQLMonster.com
    > http://www.sqlmonster.com/Uwe/Forums...erver/200806/1
    >




  4. Re: Disabling SA account

    You can also rename the sa account - security by obscurity.

    --
    Tom

    ----------------------------------------------------
    Thomas A. Moreau, BSc, PhD, MCSE, MCDBA, MCITP, MCTS
    SQL Server MVP
    Toronto, ON Canada
    https://mvp.support.microsoft.com/profile/Tom.Moreau


    "Russell Fields" wrote in message
    news:uAijJCPxIHA.1768@TK2MSFTNGP03.phx.gbl...
    Sam,

    Msg 15109, Level 16, State 1, Line 1
    Cannot change the owner of the master, model, tempdb or distribution
    database.

    Although you cannot get rid of 'sa' as far as I know, you can give it a
    password that nobody knows. (In SQL Server 2005 you can also disable login
    for the sa account.)

    RLF


    "Sam via SQLMonster.com" wrote in message
    news:85163b2d2a568@uwe...
    > Is there any way - 'SA' account can be disabled in SQL Server 2000 ?
    >
    > Base on a recent audit we are replacing SA account with a new sql login
    > account.
    >
    > In 2005, is there any way we can change the ownership of the system
    > database
    > (master, model and tempdb) to a new sql login other than SA.
    >
    > Thanks for your input!
    >
    > --
    > P Samuel
    >
    > Message posted via SQLMonster.com
    > http://www.sqlmonster.com/Uwe/Forums...erver/200806/1
    >





  5. Re: Disabling SA account

    Tom,

    Right you are, on 2005. But then the master, model, and tempdb databases
    are owned by the new name. (So the secret is not so obscure after all.)

    RLF

    "Tom Moreau" wrote in message
    news:eo3CrqXxIHA.516@TK2MSFTNGP04.phx.gbl...
    > You can also rename the sa account - security by obscurity.
    >
    > --
    > Tom
    >
    > ----------------------------------------------------
    > Thomas A. Moreau, BSc, PhD, MCSE, MCDBA, MCITP, MCTS
    > SQL Server MVP
    > Toronto, ON Canada
    > https://mvp.support.microsoft.com/profile/Tom.Moreau
    >
    >
    > "Russell Fields" wrote in message
    > news:uAijJCPxIHA.1768@TK2MSFTNGP03.phx.gbl...
    > Sam,
    >
    > Msg 15109, Level 16, State 1, Line 1
    > Cannot change the owner of the master, model, tempdb or distribution
    > database.
    >
    > Although you cannot get rid of 'sa' as far as I know, you can give it a
    > password that nobody knows. (In SQL Server 2005 you can also disable
    > login
    > for the sa account.)
    >
    > RLF
    >
    >
    > "Sam via SQLMonster.com" wrote in message
    > news:85163b2d2a568@uwe...
    >> Is there any way - 'SA' account can be disabled in SQL Server 2000 ?
    >>
    >> Base on a recent audit we are replacing SA account with a new sql login
    >> account.
    >>
    >> In 2005, is there any way we can change the ownership of the system
    >> database
    >> (master, model and tempdb) to a new sql login other than SA.
    >>
    >> Thanks for your input!
    >>
    >> --
    >> P Samuel
    >>
    >> Message posted via SQLMonster.com
    >> http://www.sqlmonster.com/Uwe/Forums...erver/200806/1
    >>

    >
    >
    >




  6. Re: Disabling SA account

    True, but the benefit here is that they would have to know in advance the
    new name in order to do a dictionary attack on that login. By default, they
    would attack sa.

    --
    Tom

    ----------------------------------------------------
    Thomas A. Moreau, BSc, PhD, MCSE, MCDBA, MCITP, MCTS
    SQL Server MVP
    Toronto, ON Canada
    https://mvp.support.microsoft.com/profile/Tom.Moreau


    "Russell Fields" wrote in message
    news:ODKhmbcxIHA.2360@TK2MSFTNGP05.phx.gbl...
    Tom,

    Right you are, on 2005. But then the master, model, and tempdb databases
    are owned by the new name. (So the secret is not so obscure after all.)

    RLF

    "Tom Moreau" wrote in message
    news:eo3CrqXxIHA.516@TK2MSFTNGP04.phx.gbl...
    > You can also rename the sa account - security by obscurity.
    >
    > --
    > Tom
    >
    > ----------------------------------------------------
    > Thomas A. Moreau, BSc, PhD, MCSE, MCDBA, MCITP, MCTS
    > SQL Server MVP
    > Toronto, ON Canada
    > https://mvp.support.microsoft.com/profile/Tom.Moreau
    >
    >
    > "Russell Fields" wrote in message
    > news:uAijJCPxIHA.1768@TK2MSFTNGP03.phx.gbl...
    > Sam,
    >
    > Msg 15109, Level 16, State 1, Line 1
    > Cannot change the owner of the master, model, tempdb or distribution
    > database.
    >
    > Although you cannot get rid of 'sa' as far as I know, you can give it a
    > password that nobody knows. (In SQL Server 2005 you can also disable
    > login
    > for the sa account.)
    >
    > RLF
    >
    >
    > "Sam via SQLMonster.com" wrote in message
    > news:85163b2d2a568@uwe...
    >> Is there any way - 'SA' account can be disabled in SQL Server 2000 ?
    >>
    >> Base on a recent audit we are replacing SA account with a new sql login
    >> account.
    >>
    >> In 2005, is there any way we can change the ownership of the system
    >> database
    >> (master, model and tempdb) to a new sql login other than SA.
    >>
    >> Thanks for your input!
    >>
    >> --
    >> P Samuel
    >>
    >> Message posted via SQLMonster.com
    >> http://www.sqlmonster.com/Uwe/Forums...erver/200806/1
    >>

    >
    >
    >




  7. Re: Disabling SA account

    Absolutely correct. - RLF
    "Tom Moreau" wrote in message
    news:O9%239hlcyIHA.2208@TK2MSFTNGP04.phx.gbl...
    > True, but the benefit here is that they would have to know in advance the
    > new name in order to do a dictionary attack on that login. By default,
    > they
    > would attack sa.
    >
    > --
    > Tom
    >
    > ----------------------------------------------------
    > Thomas A. Moreau, BSc, PhD, MCSE, MCDBA, MCITP, MCTS
    > SQL Server MVP
    > Toronto, ON Canada
    > https://mvp.support.microsoft.com/profile/Tom.Moreau
    >
    >
    > "Russell Fields" wrote in message
    > news:ODKhmbcxIHA.2360@TK2MSFTNGP05.phx.gbl...
    > Tom,
    >
    > Right you are, on 2005. But then the master, model, and tempdb databases
    > are owned by the new name. (So the secret is not so obscure after all.)
    >
    > RLF
    >
    > "Tom Moreau" wrote in message
    > news:eo3CrqXxIHA.516@TK2MSFTNGP04.phx.gbl...
    >> You can also rename the sa account - security by obscurity.
    >>
    >> --
    >> Tom
    >>
    >> ----------------------------------------------------
    >> Thomas A. Moreau, BSc, PhD, MCSE, MCDBA, MCITP, MCTS
    >> SQL Server MVP
    >> Toronto, ON Canada
    >> https://mvp.support.microsoft.com/profile/Tom.Moreau
    >>
    >>
    >> "Russell Fields" wrote in message
    >> news:uAijJCPxIHA.1768@TK2MSFTNGP03.phx.gbl...
    >> Sam,
    >>
    >> Msg 15109, Level 16, State 1, Line 1
    >> Cannot change the owner of the master, model, tempdb or distribution
    >> database.
    >>
    >> Although you cannot get rid of 'sa' as far as I know, you can give it a
    >> password that nobody knows. (In SQL Server 2005 you can also disable
    >> login
    >> for the sa account.)
    >>
    >> RLF
    >>
    >>
    >> "Sam via SQLMonster.com" wrote in message
    >> news:85163b2d2a568@uwe...
    >>> Is there any way - 'SA' account can be disabled in SQL Server 2000 ?
    >>>
    >>> Base on a recent audit we are replacing SA account with a new sql login
    >>> account.
    >>>
    >>> In 2005, is there any way we can change the ownership of the system
    >>> database
    >>> (master, model and tempdb) to a new sql login other than SA.
    >>>
    >>> Thanks for your input!
    >>>
    >>> --
    >>> P Samuel
    >>>
    >>> Message posted via SQLMonster.com
    >>> http://www.sqlmonster.com/Uwe/Forums...erver/200806/1
    >>>

    >>
    >>
    >>

    >
    >




+ Reply to Thread