sa user account - questions 1

[huiching]

Hi Folks,

I am newbie in Ms SQL. Could someone please what sa user account is? I believe it is the default user account when we installed SQL.

Would there be any impact if we change the password?

Thanks in advance!

 

[tlbroadbent]

sa is the default System Administrator login. The System Administrator has full SQL Server administration authority. The default password for sa is Null so it is good policy to change it immediately. There are several well documented cases of unauthorized access to SQL Servers because Administrators failed to set a password for sa.

The DBAs should setup up one or more system adminstrator logins for server and database administration. sa login should then be locked down with a secure password to prevent usage. However, the DBAs should keep track of the password in case of an emergency need.

There are possible ramifications if sa has been used to run jobs, bcp, etc. These jobs will fail when the password is changed. However, that kind of problem is easy to deal with compared to unauthorized tampering with data that has not been properly secured. Terry

http://members.home.net/tlbroadbent/prog.htm

The reason why worry kills more people than work is that more people worry than work. - Robert Frost

 

[huiching]

Hi tlbroadbent,
Thanks for the help. We are using an application which integrate with SQL for data storage. Password has been changed (like you say, for security reasons), and after that the application fails and create lots of problem.

Are these problems known? Any ways to rectify these problems?

Thanks,
ching

 

[tlbroadbent]

You need to determine the nature of the problems and the remedies. Obviously, the root problem will be failure to login. The ramifications of that failure depend on your applications - lost transactions, failed processing, lost business - all could result from the inaccessibility of the data.

If the application fails to login due to the password change, the application must be modified. I suggest creating a new SQL login with database access and appropriate permissions for the applications in question. Terry

http://members.home.net/tlbroadbent/prog.htm

The reason why worry kills more people than work is that more people worry than work. - Robert Frost

 

[huiching]

Thanks, tlbroadbent!!