Hi Hal
In my next article I chat about 3rd party software (like Crystral Reports 8.5) that insist on using the SA account and then retain its use (can be a right pain to alter). Auditing of security accounts is another issue as well, you do it once and forever dread the reauditing process (esp for global and local groups). I would be interested to hear about your paper level auditing and any script you use to easy the task but still remain "document friendly".
Cheers
Chris.
Chris Kempster
www.chriskempster.com
Author of "SQL Server Backup, Recovery & Troubleshooting"
Author of "SQL Server 2k for the Oracle DBA"