Recent content by bossjohnc

Yes. All machines are joined to the local AD and none are hybrid joined. However they do have linked accounts on a 'Work or School' tenant. Using their Entra ID (or 365 UPN, e-mail address, whatever you want to call it) as their primary AD login allows more seamless connectivity with Azure...

This is a bit more complicated than I gave it credit for, and the fact that it works for some may be more of a lucky quirk through misconfiguration than anything else. The data in that area of dsregcmd appears to come directly from the account section of the local AD 'Users and Computers'. Some...

Thanks, but InTune is not used, they don't have licencing for it. Nor are they Azure hybrid joined (only local domain). Integrated auth is relying on a linked account only.

After spending an unnecessary amount of time on this, I may have cracked it. Of 30 users asked, 23 were repeatedly asked (approx hourly) for MFA sign in. 7 users were never asked, other than when initially opening the DB. I was using Interactive auth, so this was the expectation. The local...

I'd add - remove the SQL admin login account as soon as you're ready to - to that list. No MFA protection on that one, go Entra only.

It will take some trial and error to get a good balance between working with linked tables and DAO (as you presumably are now) and performance. Moving to connecting direcly with ADO shouldn't be too taxing, depending on what you're doing, and will improve performance, but isn't 100% necessary in...

I totally understand the way you feel! I think my main piece of advice would be to make sure as much processing as possible is done server side before presenting the data client side. Linked tables are ok for relatively small data sets and presenting all information, but as soon as you start to...

Some of the users are having difficulty navigating to a situation where they have the 'Stay signed in?' box. It doesn't appear for ODBC authentication unfortunately. There are also various (some complex) reasons why tokens might not match and users get prompted for re-auth regardless of choosing...

Thanks for this, it's useful and interesting information. So, when you removed the hybrid join were you faced with some users having 60 min re-authentication for ODBC? How did you settle that?

I thought I'd update this with my progress so far. This is slightly removed from mainstream Access issues, but should help anyone in the same situation moving backend data to an Azure SQL instance either voluntarily or by force! In my situation, the local domain is not directly, nor hybrid...

Hi all, I've been working with Access for several decades now, and consider it an underrated product for many reasons. One of my clients is running an Access interface, something I developed many years ago and have continued to develop. It has around 30 users and is used often by most. The...

Not a bad thought... I use a 'version' table to compare server vs client and copy over a new interface if this changes so the same process would cover it. I guess I could do away with the initial linking process entirely. It was useful though, as I could make backend design changes without too...

The procedure has always run behind a splashscreen, so users know to wait. It only runs once on launch, so it's not the end of the world I suppose, but a shame this now takes so much longer.

This is happening in multiple places, different ADs with different clients and different servers (and different implementations). It seems to have been happening since update 2109 14430.20270 for Access. At this point it only seemed to affect compiled (accde) dbs. Any user with 2108 or earlier...

I'm using: strSQLConn = "ODBC;Driver={ODBC Driver 17 for SQL Server}; Server=MyServer; Database=MyDB;Trusted_Connection=Yes;" so SSO for authentication, but looks ok (and has worked for at least a decade bar some not recent tweaks for TLS) otherwise.