Azure SQL Database sa Connections?

I was using a query on one of my local SQL Servers where I wanted to know what logins were connected to my databases. I actually ended up running the query against my Azure SQL Database and had some very interesting results.

 SELECT login_name ,COUNT(session_id) AS session_count
FROM sys.dm_exec_sessions
GROUP BY login_name; 

azuresessions

Over a hundred sa connections and logins starting with DB210/XXXX. I wouldn’t say that I was worried but more so intrigued. I then ended up on an official Microsoft forum where an employee actually said that this was normal. The sa user most definitely is not us (as the user / customer). The most powerful access we have would be the server admin account or the AD admin account.

The DB210 login is very intriguing. This is always logging in under multiple program names.

SELECT * FROM sys.dm_exec_sessions
WHERE login_name LIKE 'DB%'
AND Host_name IS NOT NULL

dmvazure

The DMV collector and backup services (program names) is quite obvious what they are but the TdService is actually threat detection services. Regardless of whether or not you have enabled this feature this service connects to the database to confirm if the feature is enabled or not so don’t be alarmed by this login.

However, can you notice an oddity with the above? Why do I have multiple TdService program names? This is soon to be under investigation with Microsoft.

 

 

4 thoughts on “Azure SQL Database sa Connections?

  1. Pingback: Dew Drop - February 8, 2018 (#2661) - Morning Dew

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s