I have a production database on our local server. Currently there are two many logins to the database, about 20, half of them are windows authenticated and the other rest are SQL Server authenticated. I would really like to keep the logins minimum, so that I know who has accesses the database while also maintain security, but also want to keep safety factor, like keep one windows authenticated user so the we have access to the db in case no one has password. My question are
What is the recommended security level of production server? Should it be Windows authenticated only or SQL Server authenticated?
How many logins should one keep? one or more?
Should the default
salogin be disabled, since it can be a security threat?
Any other security risk, I need to be aware of? Our application as well as database both sits on the same local server.