Connect to SQL using Windows Authentication

You need to use SQL Authentication to be able to use TCP/IP, otherwise web applications like Web Wiz Forums can not connect to the database.

If you are worried about security in mixed mode you can always do things like disabling remote connections, rename the sa account and create a fake sa account with datareader only access on the temp db.

To change the login name for the SA account run the following SQL:-

ALTER LOGIN sa WITH NAME = [username];

Change username above to the new name you want for your SA account.

If you want remote access and use a Firewall you can also use the Firewall to limit access to the SQL Server to just your own IP or IP range, or that of the web server.

In an ideal world then you would want to use trusted connections, but if you want to connect from web applications you need TCP/IP so you have to install in mixed mode.

It would be good if like in mySQL you can disable remote root connections, to do the same for SQL Server SA account.

However, if you have disabled remote connections then you shouldn't have any problem as no-one can log in externally, as an added protection rename the sa account. This should be enough security.