During the installation of SQL Server, you are prompted to select an authentication mode. Regardless of the choice, a [sa] account will be created. If you are using Windows Authentication, the account will be be left in a disabled state. On the other hand, if you are using Mixed Mode Authentication, you are asked for a password and the [sa] account will be left in an enabled state. Because the sa account is well known and often targeted by malicious users, do not enable the [sa] account unless your application … Continue reading Protecting the [sa] Account