Sql-server – SQL Server : Is it necessary to disable SA user for security issues

Securitysql server

We have a website that will published in national grade with millions of users with Microsoft Sql Server database.

I need to know is it necessary to disable SA login for security issues like DOS attacks ?

Thank you and sorry if question have problems <3.

Best Answer

Renaming or disabling sa account is just part of the story.

There is no drawback if you disable sa account.

It means if you have databases whose owners are sa, there isn't a problem.

System databases like master, or tempDb require that sa be the database owner.

If you try to change the owner of system databases you will receive 15109 error.

Similar situation is with SQL Server Agent jobs, owned by sa. They won't fail, either.

IMO good practice is to have at least one account enabled with sysadmin role.

Related Solutions

Sql-server – User Rights – Database Security

To move logins and users from the source server, I use the following solution. This script helps completelly transfer logins with user permissions (see description on the top of the script how t use it and to specify the databases and logins).

Sql-server – User in multiple windows groups mapped to sql logins

If I am understanding your question correctly, then yes the user will be able to run both applications with database connection issues.

If User1 is part of Windows Groups Group1 and Group2, and Group1 is mapped as a SQL Server login, as well as Group2 is mapped to a different SQL Server login. ~~And if Group1 is mapped to a database user in Database1 and Group2 is mapped as a database user in Database2, then User1 should have access to both Database1 and Database2.~~ And if Group1 and Group2 are both mapped to TheOnlyDatabase, then the user will have the accumulations of both database users' permissions.

This will return only one of the database users (as expected):

select user_name() as database_user_name

This will return 1 for both queries if the users is a member of both Windows Groups:

select is_member('Domain\Group1') as member_of_group_1

select is_member('Domain\Group2') as member_of_group_2

Best Answer

Related Solutions

Sql-server – User Rights – Database Security

Sql-server – User in multiple windows groups mapped to sql logins

Related Question