Security, Networks and FE/BE

[monkeytunes]

Hey there buddays...

I have a rather large database that is split into a frontend and a backend.

The backend resides on a shared drive while the frontend is on individual users (about 5 or 6) desktops. I can't do any administration on the shared drive, i.e. I can't hide the backend from users, nor can I change any read-write permissions.

The powers-that-be have decided that security should be implemented. I've implemented Access Security before, as well as some of the password management schemes presented on these boards, but what I've never done is try to secure a database that is split, used by multiple people and where the backend is on a server.

If anybody knows of/has some step-by-step instructions as to how to secure a database with these parameters (1. split, 2. multiple users with frontends on their own machines, 3. backend on a shared drive which is administered by the monolithic and unforgiving IT department), I'd be muchos appreciative.

 

[monkeytunes]

Bumpy Bumperson

Just a litte bump action. Anybody have any ideas?

 

[monkeytunes]

Bump

Just another bump. C'mon, somebody's got to have some tips, right? ...right?


...right?

 

[bikeman77]

FE/BE security question

Make a backup of both fe and be.
Make another backup.
Read the Security FAQ.
Read it again.
Start the security wizard in the fe. Follow its directions to create a new workgroup - NEVER, NEVER, NEVER EVER use system.mdw as your workgroup. Once the fe is secured, start the security wizard on the be and use the same workgroup as the fe. That way you'll only have to administer 1 set of user/group permissions.
Once the fe is secured, you will need to distribute new copies. Make sure that the old copies are deleted. You don't want users holding on to an unsecured copy.

I can get security set up properly on the FE no problem. When I start the security wizard on the BE, the wizard wants to overwrite the workgroup file or create a new one. Do I use the workgroup administrator for this? Can I join the BE to the FE workgroup?

Related to this, is there a way to have customized FE's for each user and still maintain security integrity?

Thanks so much for the help.