Results 1 to 7 of 7
  1. #1
    Star Lounger
    Join Date
    Feb 2001
    Location
    South Carolina, USA
    Posts
    66
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Secure or NOT???

    I have a database that I have secured through the access security wizard. Everyone has a user name and password. If they click on the database icon, it will require them to enter their password. If they activate access and from the opening dialog box, click on the program -- it takes them straight into the program with all rights. What did I not do? I created a workgroup and it is in the same folder as the database and even created the path to read the mdw file. If I remove the system.mdw then they would have to enter a password when they activate access and they would not rights to create a new database or use another existing one that does not require a password. I am lost!!!

    Any help would be greatly appreciated.

    Deborah

  2. #2
    4 Star Lounger
    Join Date
    May 2003
    Location
    Austin
    Posts
    401
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Secure or NOT???

    Did you open it in 'exclusive' mode first-then create the password?
    Did you also create UserGroups and assign 'certain' rights to these groups?
    The basis for security in any network system is based on rights or permissions, which are assigned to users or usergroups. It's not enough to merely create users without creating the groups they belong to. Then assign what they can (or better yet CAN NOT) do.
    <img src=/S/electric.gif border=0 alt=electric width=15 height=15>

  3. #3
    Star Lounger
    Join Date
    Feb 2001
    Location
    South Carolina, USA
    Posts
    66
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Secure or NOT???

    I went through the security wizard. Created groups and added users to the groups. I also limited the amount of actions that each group can perform. I don't know about the exclusive option. What should I do mow?

    Thanks for your assistance.
    Deborah

  4. #4
    Star Lounger
    Join Date
    Feb 2001
    Location
    South Carolina, USA
    Posts
    66
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Secure or NOT???

    I don't have a password set for the entire database. I only have passwords for the users.

    thanks

  5. #5
    4 Star Lounger
    Join Date
    May 2003
    Location
    Austin
    Posts
    401
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Secure or NOT???

    After you assign the groups and then the users to those groups, you should be able to lock down the database.

    If you are sure that no one is using it, click
    File/OpenDatabase
    in the Open Dialog/browser box click the checkbox that says 'exclusive
    (it's directly under the Open/Cancel/Advanced button array)

    at Tools/security/
    Reset the password
    Then close

    If you've done it correctly, this should lock down your database.

    A quick way to verify that it's currently in use is to look for a file with the extension .ldb in it's directory location.

    If you open MS explorer, and go to the directory that houses your database (e.g. T:/Data/Database) and see your database with another similar file that has the .ldb extension...it's open by someone) Right click on that and go to properties. This will show you the culprit....probably.

    As for bypassing that quickstart menu, which I believe you're referring to, someone here could probably help you with limiting the number displayed in that menu. There doesn't appear to be anything to set in Tools/options.
    'Sorry I can help more with that.

    It only holds about 4 previous listings, so, you can get them to remove it by requesting they open different files until your file is removed by sequential order.

    <img src=/S/wink.gif border=0 alt=wink width=15 height=15>

  6. #6
    DaveShmave
    Guest

    Re: Secure or NOT???

    Hi Deborah,

    First, is this Access 97 or Access 2000? Second, does the default User 'Admin' have any permissions?

    If there are permissions assigned to the 'Admin' User (Open Database, et al.) and especially if we're talking Access 2000, there is a security hole that allows a user to either double click on the database file in Windows Explorer or simply open MS-Access and then open the supposedly secured database without being prompted for a user name or password.

    Also, make sure you remove the 'Admins' Group from the default 'Admin' User account.

    For a truely secure database, the default 'Admin' User should have no rights (Group or User Level)! So I'd check that first. And then secondly, remove the 'Admins' Group from the 'Admin' User. Got that? It can be confusing.

    Post back with any other questions.

    HTH

    Dave

  7. #7
    2 Star Lounger
    Join Date
    Dec 2000
    Posts
    188
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Secure or NOT??? Security FAQ

    Hi Deborah,

    Check out the Security FAQ (Version 2.41) from Microsoft October, 2000 - By Mary Chipman, Andy Baron, Chris Bell, Michael Kaplan, Paul Litwin, and Rudy Torrico. It covers Access 2.0 to 2000! While the security wizard is nice, I would give the Security FAQ a good read over a couple of times.

    Especially check out changing the Owner of a Database as part of your security plan, this will help (help, not totally prevent) keep the database more secure depending on the permissions you set. Changing the owner is a good way to prevent a hacker from trying to logon to it from VB or VBA in Excel, Access, Word, VB itself etc.

    <A target="_blank" HREF=http://support.microsoft.com/support/kb/articles/Q165/0/09.asp>Access Security Frequently Asked Questions</A>
    That's <A target="_blank" HREF=http://support.microsoft.com/support/kb/articles/Q165/0/09.asp>http://support.microsoft.com/support/kb/ar...s/Q165/0/09.asp</A>

    ***ALSO worth checking out is Securing the database using a Secure Workgroup file, while setting it up in such a way as to not have to have your end users Logon. ON PAGE 9 (I use that method quite frequently)***

    Respectfully,

    TomG

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •