Take the tour ×  Does an known account name like sa, pose a
security threat to database? When using windows authentication
on SQL Server does it impose the same password policy(if it was
set to say account lockout after 5 times)?  share|improve this
question Can you improve your question? 1) Make the title a
question. 2) Can you narrow down the scope of the question? Are
you interested about brute-forcing attacks, or the vulnerablies
of known accounts. What area of security are you interested in?
–  Brian Ballsun-Stanton Jan 8 '11 at 0:36 I talk about this
more in a book that I wrote that should be published in about a
month. I put this separately as buying the book isn't part the
answer. amazon.com/Securing-SQL-Server-Protecting-Attackers/dp/…
–  mrdenny Jan 8 '11 at 0:38 @Mrdenny could you give us some
useful quotes from the book? It may help to answer your
question, and citing it as a source is quite acceptable :) – 
Brian Ballsun-Stanton Jan 10 '11 at 0:22 @Brian I'll have to
check the contract to see if