June 4, 2009 at 2:32 pm
Hello,
I want to disable windows authentication so nobody then SA can administrate the server.
What about that ?
June 4, 2009 at 3:30 pm
you cannot disable windows authentication, only sql authentication, which then precludes using the 'sa' account.
closest you can come to it is set up a domain account, use EM to alter the services to run under that account, then remove the builtin\administrators account (or at least reduce its privileges.)
Its actually not best practice to log on with the sa account. Set up a windows group, put DBAs only in that group, and grant that group access with sysadmin privileges.
---------------------------------------------------------------------
June 4, 2009 at 5:17 pm
george sibbald (6/4/2009)
you cannot disable windows authentication, only sql authentication, which then precludes using the 'sa' account.closest you can come to it is set up a domain account, use EM to alter the services to run under that account, then remove the builtin\administrators account (or at least reduce its privileges.)
Its actually not best practice to log on with the sa account. Set up a windows group, put DBAs only in that group, and grant that group access with sysadmin privileges.
thanks.
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply