Home All Groups Group Topic Archive Search About
Author
5 Oct 2006 2:15 PM
Peter Ramsebner
Hi group,

i have created my own mdw, admin has password and is not in admin group. the
users group does not have the open/run permission.

It seems that all works fine, but it's possible to open the mdb with the
standard system.mdw with all permissions!

Why?

Thanks for help

Peter

Author
5 Oct 2006 3:48 PM
Keith Wilby
Hi Peter.

"Peter Ramsebner" <peter.ramseb***@telefonica.net> wrote in message
news:%23C8r5iI6GHA.1248@TK2MSFTNGP03.phx.gbl...
> Hi group,
>
> i have created my own mdw, admin has password and is not in admin group.
> the users group does not have the open/run permission.
>
> It seems that all works fine, but it's possible to open the mdb with the
> standard system.mdw with all permissions!
>
> Why?
>

Because you missed one or more steps in the securing process.  Did you
remove permissions for the users group to the *database* object?

Regards,
Keith.
www.keithwilby.com
Author
5 Oct 2006 5:25 PM
Joan Wild
Likely because the Admin user still owns all the objects.  It is essential
that you follow every step exactly or you won't have a secure mdb.  Some
resources
Security FAQ
http://support.microsoft.com/?id=207793

Security Whitepaper
http://support.microsoft.com/?id=148555

Although the whitepaper is old, it contains information to help you
understand security.

I've also outlined the detailed steps at
www.jmwild.com/AccessSecurity.htm

--
Joan Wild
Microsoft Access MVP

Peter Ramsebner wrote:
Show quoteHide quote
> Hi group,
>
> i have created my own mdw, admin has password and is not in admin
> group. the users group does not have the open/run permission.
>
> It seems that all works fine, but it's possible to open the mdb with
> the standard system.mdw with all permissions!
>
> Why?
>
> Thanks for help
>
> Peter