Disabling Admin Account

[Rick]

In one of my books, they recommend removing all access to
the admin account after creating a new admin account. I
believe this is to plug a problem if someone downloads your
database, they would be able to read the data using their
admin account.

I believe I have followed the correct steps. I have
created a newadmin id and given it all rights to the
database and my product table. I have also removed rights
to read from the product able from the admin account.

This all works fine (with both logins) when I test it
through MS Access. However, when I publish my database and
connect to it with the newadmin account, I get an error
message saying that I do not have read permissions on the
product table. I have the ASP page dump out the connection
string, and sure enough, I am connected via my newadmin
user id and password. If I go back into ACCESS and add
read access to the Product table, republish the web, and
then connect (once again using the newadmin user id and
password), I can now read the table.

I am totally confused at this point. Have I missed an
important step in how to implement a new admin account or
how to better secure my database.

TIA for any assistance.

Rick

 

[Douglas J. Steele]

See whether the Security FAQ helps.

http://support.microsoft.com/support/access/content/secfaq.asp

 

[Rick]

i've already printed it out and have scanned through it.
No luck yet, but the contents didn't seem to address the
problem I've encountered.

 

[Paul Overway]

Are you using the same workgroup file you created when you secured your
database?

 

[TC]

Rick, Access security is such a tricky beast, that you really do have to
follow a "cookbook" approach, doing each step in the cookbook precisely,
with no additions, deletions or deviations! To that end, I recommend that
you start again, with an unsecured copy of your database, and follow the
steps in the FAQ precisely.

http://support.microsoft.com/support/access/content/secfaq.asp


HTH,
TC