• Steve Jones - Editor (5/27/2008)


    If you're really concerned, give it a long, one-time password that you don't write down. Randomly bang on 20 keys to get it.

    Don't rename it or delete it. You'll get into trouble later. If you can go to Windows auth only, still set a strong password for SA. Never know when someone will change it back.

    You could also go the extra mile, and mark it as disabled for logins, and deny it access to the DB engine.

    ----------------------------------------------------------------------------------
    Your lack of planning does not constitute an emergency on my part...unless you're my manager...or a director and above...or a really loud-spoken end-user..All right - what was my emergency again?