stating the obvious here, you should immediately remove that persons access to SQL server, and change the sa /other admin passwords.
make sure whatever application that is used to connect does not connect as a sysadmin as well.
Lowell
--
help us help you! If you post a question, make sure you include a CREATE TABLE... statement and INSERT INTO... statement into that table to give the volunteers here representative data. with your description of the problem, we can provide a tested, verifiable solution to your question! asking the question the right way gets you a tested answer the fastest way possible!