Rename SA? (SQL 2000)
-
Good day,
Does anyone know if it is possible to rename the sa login account? If so, how? The reason I ask is that the app we are implementing requires us to use "mixed" security and I would like to change the sa account name if possible to prevent anyone from easily attempting a brute force attack on it.
Thanks for any replies.
Enrique Pasos
Application/Database
Support Manager
-
No, just set a long password with odd characters such as $ or other (especially the ALT+number stuff). Brute force and dictionary will be less likely to get thru. I am sure there is a way to potentially change the actually login name but it will harm the box since it would require system table changes.
-
I guess that's what we will do. Thanks for the help!
E
-
One night, there was this box with SQL 2000 loaded on it that was going to be formatted the next day. The other DBA said "yeah, you can rename the SA account", I said "no way", and the hack was on.
I disremember the details (got the script buried at work under a folder named "Don't Do This"), but by hacking the MASTER db system tables (after going through the hassle of enabling such tactics), we could indeed rename the login account titled "SA" (to "foo", naturally). We were able to rename it back. We were also able to delete it. We then closed the various work windows and walked away, refusing to aknowledge that we had ever done anything so blamed stupid and foolish.
So yes, it's possible, and maybe safe as it's just renaming a label column in a system table--but it's playing with Nitroglycerin in an ammo dump, and I never told you I did it.
Ogukuo
-
And remember, if you do so Microsoft won't support it should you have a problem on that server.
K. Brian Kelley
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1
K. Brian Kelley
@kbriankelley
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply