Security

[Tony L]

Is there a way to get my Database to only open for users of the workgroup I
created. I created a database and a workgroup, but some people are able to
log in as an Admin without even joining the group.

 

[Rick Brandt]

Is there a way to get my Database to only open for users of the
workgroup I created. I created a database and a workgroup, but some
people are able to log in as an Admin without even joining the group.

Then you missed a step in setting up security. When done properly it behaves
just like you are requesting it to.

When they open the file using a workgroup that does not ask them for a user name
and password then they must be creating a session as the user "Admin" who is a
member of the group "Users". Neither of those entities should have permissions
to open your file. The fact that they get in means that those entities DO have
permissions that you should have removed.

Also make sure that "Admin" is not still the owner of the database. Owners have
rights above and beyond the permission settings you give to them.

 

[Tony L]

Then you missed a step in setting up security. When done properly it behaves
just like you are requesting it to.

When they open the file using a workgroup that does not ask them for a user name
and password then they must be creating a session as the user "Admin" who is a
member of the group "Users". Neither of those entities should have permissions
to open your file. The fact that they get in means that those entities DO have
permissions that you should have removed.

Also make sure that "Admin" is not still the owner of the database. Owners have
rights above and beyond the permission settings you give to them.

I removed open/run access from the "users" group and people not in the group
still are getting into the database as "admin". Is there a way to remove the
admin account. I tried deleting it and gave me the can not perform this
action prompt. Also, how do I change ownership of the database?

Thanks for your help in advanced

 

[Joan Wild]

I removed open/run access from the "users" group and people not in the
group
still are getting into the database as "admin". Is there a way to remove
the
admin account. I tried deleting it and gave me the can not perform this
action prompt. Also, how do I change ownership of the database?

They are opening as Admin because that user likely still owns the database.
It's important that you create a new workgroup and then create a new user to
be the owner and a member of the Admins Group. Then you remove Admin from
Admins. You cannot delete the Admin user.

You need to follow some detailed steps to ensure things work properly. You
need to log in as the new user you create, then create a new mdb and import
all the objects and then start removing/assigning permissions.

See www.jmwild.com/AccessSecurity.htm for a list of the steps.

 

[Tony L]

Good Afternoon/Morning Joan,

I happen to come across a post that you answered on 2-28 and followed the
steps that makes the database open with the security group I created and it's
working great! Thanks to both you and Rick for helping me with this problem,
I'm am very grateful!!!

Best Wishes,

Tony