After renaming SA account,still it there in profiler trace?

Question

question

cstephen asked Jan 22, '15

After renaming SA account,still it there in profiler trace?

Dear Amigos, We are having basic doubt!!!! After installing the sql server with Mixed mode authentication,We renamed SA user with different name due to security attacks.While taking sql server profile trace most of the times login name shows as 'SA'. we not able predict why it is still there? Is There any Hacking happend in my server. Even when we look at running processes through sp_who, we see that 'sa' is still being used in various background operations Ex: trace in sql server: Event class Binary Data login name Lock:Acquired oxo.. Sa Regards, Stephen

security profiler trace sa

1

10 |1200

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Grant Fritchey ♦♦ commented · Feb 02, 2015 at 11:50 AM

This web site runs off of votes. Can you please indicate all helpful answers below by clicking on the thumbs up next to those answers. If any one answer lead to a solution, please indicate that by clicking on the check mark next to that one answer.

0 ·

Answer 1 · 2015-01-27T21:46:17Z

H_G_H answered Jan 27, '15

Try this ALTER LOGIN sa DISABLE; GO ALTER LOGIN sa WITH NAME = [SQLGuru]; GO Good Luck

1

10 |1200

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

cstephen commented · Jan 28, 2015 at 01:42 PM

Hi, We renamed SA Login with different name.but profiler trace it showing login name as 'SA'.But we are not sure whether sa login has disabled? And my basic question is? Suppose i Disabled sa login.How can i renamed?

0 ·

Answer 2 · 2015-01-28T19:41:23Z

H_G_H answered Jan 28, '15

ALTER LOGIN sa DISABLE; GO ALTER LOGIN sa WITH NAME = SQLGuru; GO ALTER LOGIN SQLGURU ENABLE ; GO

10 |1200

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

question