no, SA itu username umum, sama seperti administrator, jadi ada kesempatan orang untuk BRUTE FORCE. dengan di rename maka orang mau brute force bingung, username nya aja gak tau ;)
Jadi sangatlah bagus kalau sa di rename, dan Windows Account jangan pakai "Administrator". ----- Rudy Setyo Purnomo http://w <http://rudysetyo.com/>ww.erudeye.net Microsoft Web Platform based Hosting Provider http://www.microsoft.com/web/hosting/HostingProvider/Details/143 2011/7/8 Luki Ishwara <[email protected]> > Alasan SA sebaiknya di disable / di rename kenapa om? > > Kalau yg saya pelajari selama ini, biarkan SA tetap ada, tapi hanya satu > orang yg pegang (super administrator). > > Kalau ada yg berkepentingan butuh account, dbadmin membuatkan satu account > tambahan yg levelnya dibawah SA dan privilege nya dibatasi. > > Masih belum bisa paham kenapa SA sebaiknya di rename atau di disable. > > Celah lain yg harus ditutupi seharusnya adalah autentikasi via Windows > Authentication User pada SQL server, ini yg sebaiknya di disable. > > > Salam, > > > Luki Ishwara > www.ishwara.us > twitter.com/luish77 > "Di sekolah, orang belajar tahu. Di jalanan, orang belajar bisa" > > -----Original Message----- > From: Suherman <[email protected]> > Sender: [email protected] > Date: Thu, 7 Jul 2011 20:12:49 > To: [email protected]<[email protected]> > Reply-To: [email protected] > Subject: Re: [Mugi] [blog] Disabling and Renaming the SA Account > > _______________________________________________ > To unsubscribe from this group, send an email to: > [email protected] > Get Free 5 GB mailbox Check this http://www.mugi.or.id > > Powered by bisnismedia.com > _______________________________________________ > To unsubscribe from this group, send an email to: > [email protected] > Get Free 5 GB mailbox Check this http://www.mugi.or.id > > Powered by bisnismedia.com >
_______________________________________________ To unsubscribe from this group, send an email to: [email protected] Get Free 5 GB mailbox Check this http://www.mugi.or.id Powered by bisnismedia.com
