Enable or disable the System Administration (SA) user name in an Access project (ADP)

Security  Avoid using the built-in system administrator (sa) logon account. Instead, make system administrators members of the sysadmin fixed server role, and have them use their own accounts to log on. Use sa only when there is no other way to log on. To prevent unauthorized access through the sa logon account, you should assign that account a strong, unique password.

ShowEnable the SA user name

If your Microsoft Access project is connected to a locally installed SQL Server 7.0 (or later) database or a Microsoft SQL Server 2000 Desktop Engine (formerly called MSDE) with Microsoft Windows Authentication implemented, you can enable the system administrator (SA) user name with a blank password so that other users can access the application. Enabling the SA user name will also allow the System Administrator to change the SA password for additional security.

 Note    In order for the Enable system administrator (SA) user name check box to be enabled, the following must be true:

  • The Access project must be connected to a SQL Server 7.0 (or later) database or a Microsoft SQL Server 2000 Desktop Engine (formerly called MSDE).
  • The SQL Server database must be running on a Windows Server platform.
  • The SQL Server must be running on the same computer as the Access project.
  • The current Windows user must be an Administrator for the computer.
  • The current SQL Server user must be a member of the System Administrator role.
  1. Open an Access project file or switch to the Database window (Database window: In Access 2003 and earlier, the window that appears when a database or project is opened. It displays shortcuts for creating new database objects and opening existing objects. In later versions, it is replaced by the Navigation Pane.) for the open project.
  2. On the View menu, click Server Properties.
  3. Select the Enable system administrator (SA) user name check box.
  4. Click OK in the message box.

When this option is selected, the following actions take place.

  • The Access project is disconnected from the SQL Server database. This closes all open designers (such as the View Designer).
  • The login mode is changed to mixed mode security (both SQL Server security and Windows Authentication are implemented).
  • Access stops and starts the database service.
  • The connection to the Access project is changed to use the SA user name with no password.
  • The Access project is then reconnected to the database.

Notes

  • It is strongly recommended that the SA password be changed by using the Set Login Password command (on the Tools menu, point to Security).
  • If a connection to the Access project fails, a standard SQL Server login dialog box is displayed so that the user name or password can be corrected.

ShowDisable the SA user name

  1. Open a Microsoft Access project file or switch to the Database window (Database window: In Access 2003 and earlier, the window that appears when a database or project is opened. It displays shortcuts for creating new database objects and opening existing objects. In later versions, it is replaced by the Navigation Pane.) for the open project.
  2. On the View menu, click Server Properties.
  3. Clear the Enable system administrator (SA) user name check box.

When this option is cleared, the following actions take place.

  • The Access project is disconnected from the SQL Server database which closes all open designers (such as the View Designer). See the Microsoft Developer Network Web site for more information on designers.
  • The login mode is changed to Microsoft Windows Authentication only.
  • Access stops and starts the database service.
  • The connection to the Access project is changed to use Trusted Security. See the Microsoft Developer Network Web site for more information on Trusted Security.
  • The Access project is then reconnected to the database.
 
 
Applies to:
Access 2003