2

As part of a security policy, the company I work for has given me the task of changing the sa's and SQL Server Agent service accounts' passwords for several instances.

What's the possible impact of doing this? Is there anything in particular I should watch out for? Is there any whitepaper, guide or even blog post about this kind of task? What kind of 'backup' plan should I have in place in case anything goes wrong?

Any guidance is appreciated.

1
  • I would personally say you that do not use random passwords your passwords should be in the way , its unique and other shouldnt grab it.
    – user7685
    Commented Mar 27, 2012 at 4:39

2 Answers 2

4

Well for security reason you should not be letting anyone use the "sa" account. If you do then obviously changing that password will break whatever is using it. I try to set this password to a random password, rename it (only SQL 2005 and above allow this), and then disable it. I have not found anything so far that explicitly requires the "sa" account to function, my own admin account suffices.

With regards to the service account this should not cause any problems. Again as long as no other resource or service is using the same account.

The only backup plan I can suggest is having the old password handy to reset the accounts back to in the event something breaks.

2
  • You are right, nobody but the DBAs have access to the sa account, and even we don't actually use it.
    – ivanmp
    Commented Feb 9, 2012 at 0:41
  • I would suggest setting the password to a random guid and then disable it then.
    – user507
    Commented Feb 9, 2012 at 1:17
1

In addition, one should always use the Sql Server Configuration Manager to change any accounts and passwords Sql Server uses. As per MSDN, Config Manager makes sure registry permissions and the like are updated when an account is changed. What's more, no restart is required if Config Manager is being used.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.