Here we have set up a rule that if anyone else other than a DBA wants to login to the server (Not just DB) they have to notify us why they want to log on. They are absolutely not allowed to log on to the SQL Server instance... 🙂