BR><BR>They also want their service to run as a local admin account on the machine.<BR><BR>I can't say I'm overly psyched about any of those terms.<BR><BR>IMHO an SQL Server should be very secure ...

"The attackers also use sqlps.exe to create a new account that they add to the sysadmin role, enabling them to take full control of the SQL server ... use a strong admin password that can't ...