Lost Security

[Michael Bentfeld]

Hello,

I have an secured Access database used to request parts
transfers between our company's two plants. When I
created the database, I set it so that anyone trying to
open the database had to enter a user ID and password. A
couple of months ago, the database was transfered to a new
server on a new network. No users reported any security
or access issues. Recently I added a new user to the
database and set the appropriate permissions (using the
Security Wizard and so forth). When I set up a desktop
shortcut on that users computer and opened it, the
database opened directly, without prompting for a user ID
or password. Is there any way I can fix this problem?

Thanks in advance,

Michael

 

[Joan Wild]

I have an secured Access database used to request parts
transfers between our company's two plants. When I
created the database, I set it so that anyone trying to
open the database had to enter a user ID and password. A
couple of months ago, the database was transfered to a new
server on a new network. No users reported any security
or access issues. Recently I added a new user to the
database and set the appropriate permissions (using the
Security Wizard and so forth). When I set up a desktop
shortcut on that users computer and opened it, the
database opened directly, without prompting for a user ID
or password. Is there any way I can fix this problem?

What is in the target of the shortcut you created?

 

[Michael Bentfeld]

The target is supposed to be "C:\Program Files\Microsoft
Office\Office\MSACCESS.EXE" "H:\Massillon\EXPEDITETESTa.mdb
" /WRKGRP "H:\Massillon\Secured.mdw". However, I get an
error message saying that the name specified is
incorrect. I double-checked the information and
everything appears to be correct to the best of my
knowledge.

Thanks again,

Michael

 

[Joan Wild]

Hi Michael,

The target is supposed to be "C:\Program Files\Microsoft
Office\Office\MSACCESS.EXE" "H:\Massillon\EXPEDITETESTa.mdb
" /WRKGRP "H:\Massillon\Secured.mdw". However, I get an
error message saying that the name specified is
incorrect.

I'm not familiar with that error message, unless you are paraphrasing. What
name is it having difficulty with? Also you could use UNC pathnames instead
of relying on H: being mapped correctly.

But back to your original problem. I thought that the shortcut may have
included the /user and /pwd switches, in which case you would get no login
prompt. Since they are able to open it without the prompt, they are likely
using their system.mdw workgroup. If they can even get in using that, then
you missed a step in securing the database.

You need to follow every step in the Security FAQ available at
http://support.microsoft.com/?id=207793

I've also outlined the steps in detail at
www.jmwild.com/AccessSecurity.htm