Users cannot change their password

[MikeB]

I have the database secured with Access Security. Users attempt to change their password from the Tools, Security, Users and Group Accounts menu. They get an error message stating they do not have sufficient permissions to use the SECURED.MDW object. The message tells them to see their system administrator or the person who created the object to give them the appropriate permissions. I tried to allow them tho change their password through code, but with the same result. Of course, I can chage my password. I am a member of the Admins group. Any ideas how to fix this?

 

[Joan Wild]

What Windows permissions do they have on the folder where the secured.mdw
is?

--
Joan Wild
Microsoft Access MVP

I have the database secured with Access Security. Users attempt to change

their password from the Tools, Security, Users and Group Accounts menu.
They get an error message stating they do not have sufficient permissions to
use the SECURED.MDW object. The message tells them to see their system
administrator or the person who created the object to give them the
appropriate permissions. I tried to allow them tho change their password
through code, but with the same result. Of course, I can chage my password.
I am a member of the Admins group. Any ideas how to fix this?

 

[MikeB]

We are running Windows 2000 Server. On my computer I obtained user permissions on the network share as follows. I right clicked the folder, selected properties on the pop-up menu, selected the Security tab, selected Advanced, selected a user, then selected View/Edit to display permissions. I repeated this for a few users to make sure they all had the same permissions. They have the following permissions checked in the Allow column

Transverse Folder/Execute File, List Folder/Dread Data, Read Attributes, Read Extended Attributes, Create Files/Write Data, Create Folders/ Append Data, Write Attributes, Write Extended Attributes, Delete, Read Permissions

They do not have the following permissions checked in the Allow column

Delete Subfolders and Files, Change Permissions, Take Ownership

None of the permissions are checked in the Deny column

I have the ability to change permissions for each user

I noticed the group, Everyone, also has access. Repeating the process above, I found Everyone has all permissions checked in the Allow column, but they are "greyed" out. A note indicates these permissions are inherited from the parent object. I do not have permissions to make changes for tihs group.

 

[Joan Wild]

Also check their permissions on the secured.mdw file. I believe you can
select 'Inherit permissions from parent' somewhere, and also apply to
existing. It's possible that the file doesn't have the same permissions as
the folder.


--
Joan Wild
Microsoft Access MVP

We are running Windows 2000 Server. On my computer I obtained user

permissions on the network share as follows. I right clicked the folder,
selected properties on the pop-up menu, selected the Security tab, selected
Advanced, selected a user, then selected View/Edit to display permissions. I
repeated this for a few users to make sure they all had the same
permissions. They have the following permissions checked in the Allow
column:

Transverse Folder/Execute File, List Folder/Dread Data, Read Attributes,

Read Extended Attributes, Create Files/Write Data, Create Folders/ Append
Data, Write Attributes, Write Extended Attributes, Delete, Read Permissions.

They do not have the following permissions checked in the Allow column:

Delete Subfolders and Files, Change Permissions, Take Ownership.

None of the permissions are checked in the Deny column.

I have the ability to change permissions for each user.

I noticed the group, Everyone, also has access. Repeating the process

above, I found Everyone has all permissions checked in the Allow column, but
they are "greyed" out. A note indicates these permissions are inherited
from the parent object. I do not have permissions to make changes for tihs
group.

 

[MikeB]

Same permissions as described in previous, except that permissions are inherited. I will experiment and give the Delete Folder/file permission to see if this solves the problem.

 

[MikeB]

Worked with our IT folks. Configured my permissions the same as the other users. The only remaining difference is that I am a member of Admins group within Access. I can change my pw. If I log into Access as another user, but on the network as me, I cannot change the pw. This has to be an Access security issue that I cannot seem to resolve. If I put the user in the Admins group, they can change their pw. They are all members of the Users group and that group has no permissions. They are members of the group, Full Data Users, which has various permissions on the different objects, but not administer permissions on any object. Any other thoughts?

 

[Joan Wild]

Sorry Mike, I'm at a loss. I haven't seen this issue related to Access
security, although your description suggests that is the case.

I've never had a problem with users changing their password.

Did you attempt to secure the mdw file? (you shouldn't), or change
permissions on any msys objects?

--
Joan Wild
Microsoft Access MVP

Worked with our IT folks. Configured my permissions the same as the other

users. The only remaining difference is that I am a member of Admins group
within Access. I can change my pw. If I log into Access as another user,
but on the network as me, I cannot change the pw. This has to be an Access
security issue that I cannot seem to resolve. If I put the user in the
Admins group, they can change their pw. They are all members of the Users
group and that group has no permissions. They are members of the group,
Full Data Users, which has various permissions on the different objects, but
not administer permissions on any object. Any other thoughts?