Create basic user for one database

10 Mar 2009 5:56 PM

css

We have several databases split on our network, with the front end on each
machine & the back end on the server.

I have created individual users with passwords & assigned them to groups,
usually the default 'Users' groups, so that I can specify at a group level
what each individual has access to in each database.

Now we are creating a new database & management would like to have a generic
user called 'Service' with no password. This user needs to be able to log in
to this one particular database and run a query that will create a temp file,
then it will merge the data with a Word template. All is done, except for
setting up the security.

I tried to create a new user called 'Service', and remove it from all of the
groups. I got a message saying that I could not remove it from the default
User's group. Not sure what to do now; this user is only authorized to open
just this one database from any pc. By it being in the 'User' group, they can
open anything without a password.

Any ideas?

Thanks,
Connie

13 Mar 2009 12:34 PM

jacksonmacd

The 'Admin' account and 'Users' group are common to every installation
of Access in the world. If you remove all permissions from 'admin' and
assign the correct permissions to the Users group, then *any* instance
of Access can open the database without joining a special workgroup or
by supplying a userID and password to the Access session. It's the
method that I would use if I wanted to allow people to use the
database without supplying a password.

Using 'Users' for anything other than this "freely-accessible" access
level is the wrong approach. Accounts can never be deleted from the
Users group.

If you are determined to use a 'Service' account, then the easiest way
to do that is to create a special Windows shortcut (.lnk file) and
supply the workgroup, MDB filename, username, and password all as
parameters in the shortcut's Target.

My advice would be to re-visit all the other databases, create a new
group with the same permissions as you are currently using for Users,
assign all the accounts to that group, and remove permissions from the
Users group.

On Tue, 10 Mar 2009 10:56:02 -0700, css
<c**@discussions.microsoft.com> wrote:

Show quoteHide quote

>We have several databases split on our network, with the front end on each
>machine & the back end on the server.
>
>I have created individual users with passwords & assigned them to groups,
>usually the default 'Users' groups, so that I can specify at a group level
>what each individual has access to in each database.
>
>Now we are creating a new database & management would like to have a generic
>user called 'Service' with no password. This user needs to be able to log in
>to this one particular database and run a query that will create a temp file,
>then it will merge the data with a Word template. All is done, except for
>setting up the security.
>
>I tried to create a new user called 'Service', and remove it from all of the
>groups. I got a message saying that I could not remove it from the default
>User's group. Not sure what to do now; this user is only authorized to open
>just this one database from any pc. By it being in the 'User' group, they can
>open anything without a password.
>
>Any ideas?
>
>Thanks,
>Connie

--
jackmacMACdon***@telusTELUS.net
remove uppercase letters for true email
http://www.geocities.com/jacksonmacd/ for info on MS Access security