Major Security Issues - Please Help

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hey all,
I am trying to re-secure a database that i took over from someone. I am having major issues, so i need major help. I have tried to do the security wizard, but there are some things that aren't quite working, so here are the questions i have:
1. first off, how do i clear out all the security so i can start over again
2. for the users group, it gives all teh permissions that i could give to them, but i am not quite understanding what is entailed in each. For example, what priveleges does the Administer right give them, etc etc...
3. What would keep any user from going in and running the security wizard to allow themselves access??
Thanks for all teh help,
 
Jason said:
Hey all,
I am trying to re-secure a database that i took over from someone.
I am having major issues, so i need major help. I have tried to do
the security wizard, but there are some things that aren't quite
working, so here are the questions i have:
Click to expand...

It would help if you told us the version of Access.
1. first off, how do i clear out all the security so i can start
over again
Click to expand...

You log into the database as a member of the Admins group. Give all
permissions to all objects (including the database object) to the Users
Group. Close Access. Reopen Access using the standard workgroup. Create a
new database and import all objects from your database.
2. for the users group, it gives all teh permissions that i could
give to them, but i am not quite understanding what is entailed in
each.
Click to expand...

You should not give permissions to the Users Group at all - this group
should have zero permissions. This is because the Users Group in every
workgroup is the same. Any permissions you give this group, would allow
anyone with Access to open your secure database.
3. What would keep any user from going in and running the security
wizard to allow themselves access??
Click to expand...

Exactly. The first step in securing a database is to create a new
workgroup.

Study the Security FAQ
http://support.microsoft.com/?id=207793

Also see www.jmwild.com\AccessSecurity.htm
 
I am running access 2000. Should i go and delete all
previous users except the Admin (i dont' think i could
delete that anyway)?
 
I'm not clear whether you modified the system.mdw that ships with Access, or
created a new workgroup.

Follow the steps to unsecure your database. Rejoin system.mdw as your
default (using wrkgadm.exe). You should be able to open your database with
no login prompt and have full permission to everything.

If you created a new workgroup, you can now safely delete it. If you
didn't, then yes remove the users you created, and put Admin back in the
Admins group.

Do not use the security wizard in 2000. Follow the steps outlined at
www.jmwild.com/AccessSecurity
 
Back
Top