Could drop user sa?

Question

Dear Sir/Madam

As we know user sa is default user that have

sid=0x01

is_disabled=0

principal_id=1

on sys.server_principals table.

Could we drop it to protect from attacker?

Srean

Regard Thank

Answer 1

Dropping the "sa" (system administrator) account in SQL Server is generally not recommended as it can lead to potential issues with accessing and managing the database. The "sa" account is a default, built-in account with elevated privileges and is often used for administrative tasks.

1- Disabling the sa account is a common practice. You can do this by setting the account to “disabled” status.

2- Alternatively, rename the sa account to something less predictable. This makes it harder for attackers to guess the account name. ** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful **

Answer 2

On one hand it's impossible to delete the SysAdmin account "sa" and on the other it don't make sense.

If you think you can get it more safe, you can rename the "sa" account: https://blog.sqlauthority.com/2019/12/22/can-admin-rename-sa-account-in-sql-server-interview-question-of-the-week-256/