Is Access Security Broken in Windows 98?

ghudson

Registered User.
Local time
Today, 12:42
Joined
Jun 8, 2002
Messages
6,194
Security posts - merged

Hi I've noticed totally different behavior with my secured databases in 98 and in XP.

In XP Access Security works. In 98 it is broken.

For example today I secured a database. I went to another computer running 98 and Access 2002 that was joined to the default workgroup file system.mdw . They still had full access to the database and were not even asked to enter a login. Once I joined the correct workgroup file the security was implemented though. (In XP if I go back to the Default workgroup file the security is still maintained.)

So strange. Where is the security if it is totally ignored on 98 operatings systems? Someone can just make a copy of the database and have full access in 98 despite the database being secured.

Peter.

Hi I've noticed totally different behavior with my secured databases in 98 and in XP.

In XP Access Security works. In 98 it is broken.

For example today I secured a database. I went to another computer running 98 and Access 2002 that was joined to the default workgroup file system.mdw . They still had full access to the database and were not even asked to enter a login. Once I joined the correct workgroup file the security was implemented though. (In XP if I go back to the Default workgroup file the security is still maintained.)

So strange. Where is the security if it is totally ignored on 98 operatings systems? Someone can just make a copy of the database and have full access in 98 despite the database being secured.

Peter.

Then your db is not really [correctly] secured. You should get the same result by copying the database to another computer and the user should be able to open the db without using your workgroup file. Sounds like you have joined your computer to your custom workgroup file [or worse, you have modified the default "System.mdw" file on your computer with your new security settings. Search around the forum for you problem has been asked and answered in many other threads.

ghudson is correct. The behavior you describe occurs whenever you connect to a DB using the default SYSTEM.MDW file. I have answered this question beaucoup times, so look up posts on "Security" where I have contributed comments.

To understand why this occurs, you need to know one more thing: The name of your workgroup is a registry function. You would see the same behavior when you move the .MDB to an XP machine but never join the correct workgroup on that machine. (Because, of course, the registry entry isn't changed until you JOIN the workgroup.)

Your database is not properly secured. Take a look at the Security FAQ document. Search the kb or you may find a link from here.

Why are you double posting?

At least Pat gave you the same answers as your first posting recieved...
http://www.access-programmers.co.uk/forums/showthread.php?t=107458
 
Last edited by a moderator:
Hi GHudson,

Very informative, so much for Microsoft's security :eek:

I think you have just found a hole so big, I wonder if Microsoft knows? Bet they do not even want to know? Since they do not support 98 anymore.

Got an old Windows 98 machine at home, going to try it with some of my secured databases (well not so secure now!!!!).:cool:

Robert88
 
Robert88 said:
Hi GHudson,

Very informative, so much for Microsoft's security :eek:

I think you have just found a hole so big, I wonder if Microsoft knows? Bet they do not even want to know? Since they do not support 98 anymore.

Got an old Windows 98 machine at home, going to try it with some of my secured databases (well not so secure now!!!!).:cool:

Robert88
It is not a hole. You have mistakenly altered the default System.mdw file on your computer. By default, all access db files are joined to the System.mdw file. That is why your users are opening up your db for their System.mdw file does not have the user permissions that you have added to your System.mdw file. Most folks do not realize that all Access db are secured for they are joined to the System.mdw file by default. That is another reason that you should created a new Workgroup.mdw file for your custom secured databases and use a custom shortcut to force your secured db to be opened with your custom workgroup file. Then if a user tries to open your db, they will get a user permission error if the db is correctly secured.

Access security is a tough subject and it is not easy to work with until you understand how it works. Once you do, you will like using it.
 
Hi GHudson,

One issue I pondered over was that I use Windows NTFS in order to also secure files generated on the Windows NT File System, allowing Windows NT File Security.

I have not tested this issue with Windows 98 yet but surely you cannot open NTFS files under Windows 98 which I beleive are FAT16 or 32, been a while since I turned on the old beast as been working with XP and before that 2000 and before that NT. 98 was a long time ago but occasionally I get a question or two about it.:o

I have had the pleasure of reading "Microsoft Access Database Protection and security", by Gary Robinson.

Thoroughly enjoyed it :p and could read it another few time to re-enforce ideas in it. It's not a big book but it methodically steps through all sorts of security issues for Microsoft Access. It was the best $25 AUS on ebay secondhand I ever spent for Microsoft Development references.

Robert88
 
Last edited:
You will not be able to use Windows NTFS on a Windows 98 computer.

I once tried to hook up an external USB backup drive what was using NTFS and the Windows ME computer could not recognize it.
 

Users who are viewing this thread

Back
Top Bottom