windows is recommended authentication for SQL server.

However you must have your own reason to opt not to do so.

In SQL server only users / groups that are granted access explicitely can connect to the server.(bultin\admininistrators are added default, but you can revoke this also)

But be careful with credentials that are used by the services . Do some researches before doing so.