What should I check before disabling the sa account

Hi,

I need to disable the sa account (audit requirements) on a production server that I am not familiar with. What should I check on before I disable it so I dont mess up production

Thanks

Ron

June 18th, 2015 5:30pm

Needles in haystacks, I'm afraid.

There is not much you can see on the server itself. But there may be some application out there that connects with sa.

I would send out a mail to the stakeholders for this server that you will disable sa on Thursday next week at 7:00, and they should make sure that their application does not connect as sa. They should also keep on eye on their applications on Thursday morning.

Free Windows Admin Tool Kit Click here and download it now
June 18th, 2015 5:57pm

Are there any applications use  a 'sa' account connection to the database? :-)
June 18th, 2015 11:52pm

1) Sa account is db owner of database..

So what Dinesh ? What are you trying to say ? Do you know which database and even if it is owner and you disable it nothing will happen.Plus I dont see environment where SA is owner of user DB

I would follow mail process as Erland suggested and will specifically write in mail that as a security practice we would disable SA

Free Windows Admin Tool Kit Click here and download it now
June 19th, 2015 12:45am

Need check If SA is owner of any database ..
June 19th, 2015 12:50am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics