BR><BR>They also want their service to run as a local admin account on the machine.<BR><BR>I can't say I'm overly psyched about any of those terms.<BR><BR>IMHO an SQL Server should be very secure ...

SECURE your systems administrator log-in account with a non-NULL password. BLOCK port 1433 at your Internet gateways and/or assign SQL Server to listen on an alternate port. If port 1433 needs to ...

"The attackers also use sqlps.exe to create a new account that they add to the sysadmin role, enabling them to take full control of the SQL server ... use a strong admin password that can't ...