In SQL 2005, you can also rename the 'sa' account. So if you renamed it to, say 'ss2k5guru', and someone tried to login as 'sa' they would receive the error that the login failed and not that there is no 'sa' account.