Restricting Access to the Database

To protect the database itself from unauthorized access, you should define logins only for those users who need access to the database. Remove any logins that are not needed.

In addition, you can prevent the Windows administrators from being able to access the database by removing the login for BUILTIN/Administrators. However, before doing so, make sure that appropriate logins exist for the database users (for example, <sapsid>admand SAPService<SAPSID>) and they work properly.

Do not delete all of the logins. If you do, you will not be able to access the database.