Network Security?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello:
I followed all MS instructions on how to secure a Access database. I created
a new workgroup file, new users/passwords and new groups. I created a
shortcut on my desktop to open the secured database on our network drive.
From the local point of view, everything works perfect. However, when I go to
the network folder where I store the Access database, it seems there is no
security at all. I can open it without username/password and there is only
the default Admin user; also it uses the default System.mdw workgroup file.
Did I miss anything or it is the way to do that? Should I set restriction on
accessing the network folder, so that users who do not have the permission
will not be able to open it directly on the network?
Thanks in advance!
 
Hi Both,

I have the exact same problem, but even if i follow step by step the
security faq, istill get the same results. Any more advice?
 
Lynn,

I tried everything again and again.Still no success.After several readings
of the security faqs, i concluded that my problem probably is that I use
Access 2000. So,as the guide mentions, when i try to open the database from
the shared folder, using another pc than the original, the database opens
without pop up message asking for password and username, probably because,
according to the guide's step 10 in "1.What are the steps to secure a
database?", the application uses the default .mdw file on the specific pc and
not the one i have set up for that database. The guide suggests to create
another blank database while logged on as administrator and import all the
secured database objects. However, it does not say anything of what to do
afterwards. I tried it and the new database, while shows the same users as
the original, it is not secured. Using The Tools/Security/User and Group
Permission, i can set permission but then for every user, even if he/she is
not allowed, full access is allowed. Trying to secure the database using the
User-level Security wizard, recreates the original problem of the database
opening without security and with default user the "Admin" belonging only to
users group, and without password. Do you have any idea? have you tried to
set network security on an access database using Access 2000?Does my network
administrator need to do sth?

Sorry for the long message,

Thanks in advance
 
Geo,
You need to under some basic information about what's happening behind the
scenes. EVERY time you open an Access database, a user is logged on and
authenticated using a .mdw file. If you have an unsecured database, then
Access uses a default file called system.mdw and logs the user in as Admin.
When you secure a database you need to create a NEW .mdw file, create a NEW
Administrator user, and make sure that both the Admin User and the User's
Group have ZERO permissions to all objects in the database. You remove
permissions from the Admin user by removing that user from the Admins group.
With Access 2000, you have to manually remove permissions from the User's
Group. On the Security Page of my website there is a summarized version of
the 10 steps you need to follow. Let me suggest you try following that. Use
the following precautions -- 1. Make a backup of your original database. 2.
As you do a step from the list, write down exactly what you did. 3. If you
still encounter problems, post back with the list of things you wrote down
in step 2.

--
Lynn Trapp
MS Access MVP
www.ltcomputerdesigns.com
Access Security: www.ltcomputerdesigns.com/Security.htm
Jeff Conrad's Access Junkie List:
http://home.bendbroadband.com/conradsystems/accessjunkie.html
 
I highly recommend that you secure the database manually, rather than
using the Wizard. Furthermore, use one of the many non-Microsoft list
of steps to follow for securing a database. You can find my method
plus links to several others on the website in my signature. You
*have* missed a step somewhere.


Lynn,

I tried everything again and again.Still no success.After several readings
of the security faqs, i concluded that my problem probably is that I use
Access 2000. So,as the guide mentions, when i try to open the database from
the shared folder, using another pc than the original, the database opens
without pop up message asking for password and username, probably because,
according to the guide's step 10 in "1.What are the steps to secure a
database?", the application uses the default .mdw file on the specific pc and
not the one i have set up for that database. The guide suggests to create
another blank database while logged on as administrator and import all the
secured database objects. However, it does not say anything of what to do
afterwards. I tried it and the new database, while shows the same users as
the original, it is not secured. Using The Tools/Security/User and Group
Permission, i can set permission but then for every user, even if he/she is
not allowed, full access is allowed. Trying to secure the database using the
User-level Security wizard, recreates the original problem of the database
opening without security and with default user the "Admin" belonging only to
users group, and without password. Do you have any idea? have you tried to
set network security on an access database using Access 2000?Does my network
administrator need to do sth?

Sorry for the long message,

Thanks in advance
Click to expand...

**********************
(e-mail address removed)
remove uppercase letters for true email
http://www.geocities.com/jacksonmacd/ for info on MS Access security
 
Hi Lynn,

I am aware of the behind-the-scene-action, that's whyu i was so confused
about it. Anyway, i solved the problem. I tried what you suggested twice and
the problem continued. As i was about to send you a reply with my actions, i
thought to navigate a little more through your site. Here i must say that
your site is full of useful info and tips and i think i'm going to spend the
night over it.As i eas reading some articles, i was directed to avery useful
microsoft article named "The Workgroup Information File" at
http://msdn.microsoft.com/library/d...opg/html/deovrtheworkgroupinformationfile.asp,
that explained the process of creating manually a windows shorcut that
connected a specific database to a specific .mdw file for everybody to open
the database. So, after many trials, i managed to create a new .mdw file,
saved in a shared folder location and i connected it using the right click
properties of the database shortcut. What it is a "pain in the ass" in this
walk-around, is to find the exact location of the generic MSACCESS.exe. If
you are a member of a large corporate intranet, it is quite difficult.So, ak
your administrator to find it for you.

Lynn, you have been most helpful, thanks again and sorry about my silly
questions.
 
that explained the process of creating manually a windows shorcut that
connected a specific database to a specific .mdw file for everybody to
open
the database.
Click to expand...

I'm glad you found the answer. The security Wizard actually creates that
shortcut for you but, with Access 2000, the wizard did NOT remove all the
permissions from the Users group and, thus, left the database in an unsecure
state.

--
Lynn Trapp
MS Access MVP
www.ltcomputerdesigns.com
Access Security: www.ltcomputerdesigns.com/Security.htm
Jeff Conrad's Access Junkie List:
http://home.bendbroadband.com/conradsystems/accessjunkie.html
 
Back
Top