Home / server / Questions / 323737
Accepted
Andy Evans
Asked: 2011-10-22 10:11:39 +0800 CST

Best practices - Is it better to delete unused SQL accounts or just disabled them?

  • 772

In an enterprise environment, is it better to delete limited access SQL accounts, or simply disable them?

sql-server-2008 user-accounts

2 Answers

  1. Best Answer

    If you aren't going to be using them anymore, delete them. Disabling them will have the effect of them not being accessible but if you are truly done with them, keeping your security dialog clean and master database clean of unused/unneeded logins makes sense.

    Perhaps disable them for a week or so and make sure no jobs, no processes, no apps, etc. are using them you can then remove them to clean them up...

    • 5

  2. It does not really matter. SQL Server 2008 is not like SQL Server 2000 where schema/roles meant trouble.

    • 0