Bob, thanks for the reply 1st of all.

So I disabled SA account and made my own account which has only 'public' as a server role. and I set the user mapped to the databases I want them to go to.

I logged in using a SQL client on my cell phone actually. I was on a different network and was not using windows authentication. I tried to access my databse and it allowed me. I tried a different database(which was setup by someone else I think, cuz someone else set this whole computer sql up I should mention.) and it said not enabled for GUEST ACCOUNT.

So I assume it is allowing guest account somehow, but in MSSM when I look up users, I do not see any account labeled as guest!