Sorry to belabor this, but it is not the SA password that is needed. What is need is a DB user with READ only privileges to report the data.
Crystal Reports has it.
Updox can make changes to the tables (add records, read patient names)
Just let us semi-literate techies do the same as Crystal Reports does.

Roger
(Nephrology)
Do the right thing. The rest doesn?t matter. Cold or warm. Tired or well-rested. Despised or honored. ? --Marcus Aurelius --