I was going through few SQL related forum and surpise to see many DBA faced problem knowing "sa" password.i dont have much idea about big Enterprise level application and organization,but just wondering if some application is accessing than isn't it somewhere in the application there must be a sa or atleast when app tries to make connection to DB it can be traced or these type of application hides sa password somewhere deep in the core of earth