Database Security on Network

[Full_Williams]

Hi,

I've run through all the steps in securing my database on the network, however there seems to be a problem.

On the computer where I created the workgroup I'm asked for a username and password when going through the shortcut and when I try to open the Database through Windows explorer I get a message saying "I don't have permissions to open this database" or something like that. So that part works fine.

Now on the other users computers I've set up the shortcut and I'm asked for a username and password, so that works too.

The problem is when I use Window's Explorer to open the database at a different users machine I'm able to get in without being prompted for my username and password. So essentially anybody that has access to this network drive would be able to open the database. This also happens when I open Access and then go File->Open to open the database.

My Serurity file is called Secure.mdw and sits in the same folder as my database.

Any thoughts on where I went wrong?

Just seems strange that it's totally secured on the machine where I created the workgroup, but it's not secured on other machines.

Thanks,
Full Williams

 

[Ade F]

This may help you Full_Williams

http://www.access-programmers.co.uk...&threadid=50744&highlight=URGENT+Security+bug

Regards

Ade

 

[Full_Williams]

Thanks Ade.

I made sure all the Admin rights and User's Group rights were taken away and I'm still having the problem.

Any idea why I'm not able to enter the database through Windows Explorer on the computer where I created the database and I'm able to from other users computers?

This is killing me.

thanks,
Full Williams

 

[Full_Williams]

When I created the New Workgroup I named it Secure.mdw and placed it on the network drive. I tried rejoining the System.mdw and was able to get in w/o being asked for password info. I rejoined the Secure.mdw and I'm still getting in on the users machine when opening the database through Windows Explorer.

Another problem I'm having is that when I try to join a workgroup from just this one machine I get an error saying "Access Denied" I thought that was pretty strange.

Any thoughts on these what might be going on or what I missed?

thanks,
Full Williams

 

[Full_Williams]

So I found this on MS support site:

http://support.microsoft.com/default.aspx?scid=/support/access/content/secfaq.asp#_Toc493299709

Microsoft Access 97 and Microsoft Access 2000: The Security Wizard is supposed to remove the Open/Run permission from the Users group, but fails to do so in Access 97. In Access 2000, it appears to have removed Open/Run, but does not do so fully, and users can open a security-enhanced Access 2000 database with the default System.mdw. The fix is to create a new database while logged on as a member of the Admins group and import all of the objects


I'm going to give this a shot tomorrow when I'm at the clients site.

Full Williams

 

[Full_Williams]

Okay got this to work finally!

For those that are following this, the reason for importing all the objects into a new database is so that the Database Owner is not the Admin anymore. That did the trick for me.

I found an interesting document breaking down Access Security for those looking to fully understand it.

http://www.geocities.com/jacksonmacd/AJMAccessSecurity.pdf

Full Williams

 

[Autoeng]

If anyone copied that file down to their pc for offline viewing I would be interested in getting a copy as when I try to access it I get "Page not available".

 

[Full_Williams]

Autoeng,

You might have to copy and paste the link into your browser. If that doesn't work let me know your email address and I'll send it to you.

Full Williams

 

[Autoeng]

Tried but no luck. Sent you my email in a PM.

Thanks.

 

[Len Boorman]

If there is any problem let me know. I have a pdf copy I can email

Len B