Ygthkb

How can I create unencrypted addresses?

Translation for threshold (figuratively)

What does @ mean in a hostname in DNS configuration?

Can a planet be tidally unlocked?

Why do we divide Permutations to get to Combinations?

How bad is a Computer Science course that doesn't teach Design Patterns?

Is Screenshot Time-tracking Common?

What is the difference between crontab -e and nano /etc/crontab?

SFDX CLI - Locked with an active writer?

Why is quixotic not Quixotic (a proper adjective)?

How do I know my password or backup information is not being shared when creating a new wallet?

What is the reason behind this musical reference to Pinocchio in the Close Encounters main theme?

Multiple null checks in Java 8

In a world with multiracial creatures, what word can be used instead of mankind?

How can I make my enemies feel real and make combat more engaging?

Coworker asking me to not bring cakes due to self control issue. What should I do?

Taking an academic pseudonym?

How can a kingdom keep the secret of a missing monarch from the public?

Does resurrection consume material components if the target isn’t willing to be resurrected?

Are all power cords made equal?

Is it ethical to apply for a job on someone's behalf?

TikZtree with asymmetric siblings

Are there any spells or magic items that allow for making of ‘logic gates or wires’?

Use intersection in field calculator

Disable and Rename sa, years after build

Does changing “sa” password require a SQL restart (in mixed mode)?Build Restore History tableDo multiple SQL Server instances increase security?Rename Availability Group and AG scriptRename SQL log and master database filerename databaseStored Procedure to Rename Table and Column namesSQL Transactional Replication - some tables frozen, but others working fineCalculate drawdown and volatility on 3 yearsIdentifiers: Reuse or RemapUpgrading SSIS Packages to 2017

1

Answers and comments at a recent popular question Does changing "sa" password require a SQL restart (in mixed mode)? indicate that renaming and disabling sa at build time is a best practice.

Any time you have a well-known account, like administrator on a Windows system or sa for SQL Server, you should take certain steps to secure it. Let's look at specifically what you should do with sa:

Set a hard to guess password.

Rename sa.

Disable sa.

Ensure that no other accounts exist named sa.

Source

But what if it has been years since the instance was built? the original DBA is long gone, I don't know what strange things they might have done. It's a production server, I can't just change make changes to the sa login and fix things as they come to light.

If I rename and disable the sa account years later, what issues might I have?

Can all the possible issues be identified and addressed, before making changes to the sa account?

sql-server best-practices

share|improve this question

asked 32 mins ago

James JenkinsJames Jenkins

1,76321938

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  testing on development is a good start..
  
  – kevinsky
  27 mins ago
  

  
  
  
  


• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  Can all the possible issues be identified and addressed, before making changes to the sa account? No, some legacy app, somewhere, that only connects once a year, could still be out there. There will always be some cleanup, afterwards.
  
  – Sean Gallardy
  19 mins ago
  

  
  
  
  

add a comment | 

1

Answers and comments at a recent popular question Does changing "sa" password require a SQL restart (in mixed mode)? indicate that renaming and disabling sa at build time is a best practice.

Any time you have a well-known account, like administrator on a Windows system or sa for SQL Server, you should take certain steps to secure it. Let's look at specifically what you should do with sa:

Set a hard to guess password.

Rename sa.

Disable sa.

Ensure that no other accounts exist named sa.

Source

But what if it has been years since the instance was built? the original DBA is long gone, I don't know what strange things they might have done. It's a production server, I can't just change make changes to the sa login and fix things as they come to light.

If I rename and disable the sa account years later, what issues might I have?

Can all the possible issues be identified and addressed, before making changes to the sa account?

sql-server best-practices

share|improve this question

asked 32 mins ago

James JenkinsJames Jenkins

1,76321938

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  testing on development is a good start..
  
  – kevinsky
  27 mins ago
  

  
  
  
  


• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  Can all the possible issues be identified and addressed, before making changes to the sa account? No, some legacy app, somewhere, that only connects once a year, could still be out there. There will always be some cleanup, afterwards.
  
  – Sean Gallardy
  19 mins ago
  

  
  
  
  

add a comment | 

Answers and comments at a recent popular question Does changing "sa" password require a SQL restart (in mixed mode)? indicate that renaming and disabling sa at build time is a best practice.

Any time you have a well-known account, like administrator on a Windows system or sa for SQL Server, you should take certain steps to secure it. Let's look at specifically what you should do with sa:

Set a hard to guess password.

Rename sa.

Disable sa.

Ensure that no other accounts exist named sa.

Source

But what if it has been years since the instance was built? the original DBA is long gone, I don't know what strange things they might have done. It's a production server, I can't just change make changes to the sa login and fix things as they come to light.

If I rename and disable the sa account years later, what issues might I have?

Can all the possible issues be identified and addressed, before making changes to the sa account?

sql-server best-practices

share|improve this question

asked 32 mins ago

James JenkinsJames Jenkins

1,76321938

share|improve this question

asked 32 mins ago

James JenkinsJames Jenkins

1,76321938

share|improve this question

asked 32 mins ago

James JenkinsJames Jenkins

1,76321938

asked 32 mins ago

James JenkinsJames Jenkins

1,76321938

asked 32 mins ago

James JenkinsJames Jenkins

1,76321938