Looking at system processes, I see 'sa' is the login for XE_TIMER_EVENT, LAZYWRITER_SLEEP, REQUEST_FOR_DEADLOCK_SEARCH etc. What account would these run under if 'sa' is disabled ??
I am going to change the 'sa' password on a production server for now, but considering disabling 'sa', if I can do it without breaking anything.