Home All Groups Group Topic Archive Search About

MS Access Security Help

Author
9 Jul 2005 8:36 PM
Bob
Can anyone point me in the right direction for good information / resources
in setting up the security in a MS Access 2000 database file?  I have found
out that security is one of the most complicated or confusing issues of MS
Access.

I have a single mde file that I will use.  I want to be able to distribute
it without allowing any user to get to the database window.  Everytime I use
the Security wizard I either cause it to deny access or it prompts me for a
password.  Which I do not want the end users to put in a password. I know how
to use the cmd line switches.  It is just the MDW file and setting up the
user permissions that is the big problem.

Any links to resources on the Net or purchasing books is much appreciated. 
I think I am looking for a step step walk through.

Seriously Unsecured,

Bob

Author
9 Jul 2005 10:01 PM
Jeff Conrad
This should just about cover everything you need Bob:

http://home.bendbroadband.com/conradsystems/accessjunkie/resources.html#Security

(Watch out for any line wrapping on the link)

Study everything and practice on dummy databases until
you really have it mastered.

Show quote
news:74BC05EB-D29C-4BFB-B695-F7C6000F5FE5@microsoft.com...

> Can anyone point me in the right direction for good information / resources
> in setting up the security in a MS Access 2000 database file?  I have found
> out that security is one of the most complicated or confusing issues of MS
> Access.
>
> I have a single mde file that I will use.  I want to be able to distribute
> it without allowing any user to get to the database window.  Everytime I use
> the Security wizard I either cause it to deny access or it prompts me for a
> password.  Which I do not want the end users to put in a password. I know how
> to use the cmd line switches.  It is just the MDW file and setting up the
> user permissions that is the big problem.
>
> Any links to resources on the Net or purchasing books is much appreciated.
> I think I am looking for a step step walk through.
>
> Seriously Unsecured,
>
> Bob
Author
9 Jul 2005 10:43 PM
Bob
Thanks I will start studying.

Bob

Show quote
"Jeff Conrad" wrote:

> This should just about cover everything you need Bob:
>
> http://home.bendbroadband.com/conradsystems/accessjunkie/resources.html#Security
>
> (Watch out for any line wrapping on the link)
>
> Study everything and practice on dummy databases until
> you really have it mastered.
>
> --
> Jeff Conrad
> Access Junkie - MVP
> http://home.bendbroadband.com/conradsystems/accessjunkie.html
> http://www.access.qbuilt.com/html/articles.html
>
> "Bob" wrote in message:
> news:74BC05EB-D29C-4BFB-B695-F7C6000F5FE5@microsoft.com...
>
> > Can anyone point me in the right direction for good information / resources
> > in setting up the security in a MS Access 2000 database file?  I have found
> > out that security is one of the most complicated or confusing issues of MS
> > Access.
> >
> > I have a single mde file that I will use.  I want to be able to distribute
> > it without allowing any user to get to the database window.  Everytime I use
> > the Security wizard I either cause it to deny access or it prompts me for a
> > password.  Which I do not want the end users to put in a password. I know how
> > to use the cmd line switches.  It is just the MDW file and setting up the
> > user permissions that is the big problem.
> >
> > Any links to resources on the Net or purchasing books is much appreciated.
> > I think I am looking for a step step walk through.
> >
> > Seriously Unsecured,
> >
> > Bob
>
>
>
Author
13 Jul 2005 4:27 AM
Chris Mills
I observe that "Jeff Conrad MVP", not only posts on his web-site how to break
mde's, but is also associated with a company which offers to directly break
mde's.

I think it is unbecoming of Jeff, and certainly unbecoming of an MVP, to post
"How-To's" on breaking MS-Access security, at the same time as purporting to
give advice on how to secure one.

In particular, Jeff failed to advise Bob that, according to Jeff, Bob's mde is
made pointless by Jeff's own mouth and company associations.

Concerned,
Chris Mills

"Jeff Conrad" <je***@ernstbrothers.com> wrote in message
news:eY3lTHNhFHA.3608@TK2MSFTNGP12.phx.gbl...
> This should just about cover everything you need Bob:
>
>
http://home.bendbroadband.com/conradsystems/accessjunkie/resources.html#Security
Show quote
>
> (Watch out for any line wrapping on the link)
>
> Study everything and practice on dummy databases until
> you really have it mastered.
>
> --
> Jeff Conrad
> Access Junkie - MVP
Author
13 Jul 2005 1:01 PM
TC
Personally I can not see anything ethically all that wrong with
decompiling MDEs. (Not that I am necessarily convinced by QB's claims
in that regard.) MDEs were created (afaik) for efficiency reasons (ie.
no decompiled state), not security. It's just that they have become a
convenient means of code security, given the absence of decompilers.
Decompiling an MDE seems, to me, to be a lesser offence that releasing
a general purpose "desecure mdb" tool - which afaik, Jeff has not
proposed to do.

Not wishing to start an argument here; just my 2c.

TC
Author
13 Jul 2005 7:08 PM
Chris Mills
Are you not aware that reverse engineering is universally illegal? Pick up the
nearest License Agreement you can find.

TC says hacking is OK !
Author
14 Jul 2005 6:59 AM
TC
I'm not interested in childish exchanges.

TC
Author
14 Jul 2005 5:46 PM
Chris Mills
Precisely.
Show quote
"TC" <aatcbbtcc***@yahoo.com> wrote in message
news:1121324384.389612.151900@z14g2000cwz.googlegroups.com...
> I'm not interested in childish exchanges.
>
> TC
>
Author
15 Jul 2005 11:48 AM
Lynn Trapp
> Are you not aware that reverse engineering is universally illegal? Pick up
> the
> nearest License Agreement you can find.

hmmmmmmmm... Let's see. If a company owns a database and all the source code
behind it, and they lose (because of accident or corruption or any other
reason) the development version, and they hire a company like QBuilt to
reverse engineer the database so they can have a new development copy, I
would not think that is illegal. I don't know much about QBuilt, but I would
dare to say that that is the kind of service they are offering.

Author
15 Jul 2005 4:00 PM
Chris Mills
Yes that is a 0.001% usage. Or less. Sheesh.

Show quote
"Lynn Trapp" <ltrapp_NOSPAM@ltcomputerdesigns.com> wrote in message
Author
15 Jul 2005 4:04 PM
Lynn Trapp
> Yes that is a 0.001% usage. Or less. Sheesh.
>

And just how do you know that?

Author
15 Jul 2005 4:10 PM
Chris Mills
Wanna give your estimate? ;-)

Show quote
"Lynn Trapp" <ltrapp_NOSPAM@ltcomputerdesigns.com> wrote in message
news:edlSkbViFHA.1948@TK2MSFTNGP12.phx.gbl...
> > Yes that is a 0.001% usage. Or less. Sheesh.
> >
>
> And just how do you know that?
>
> --
> Lynn Trapp
> MS Access MVP
> www.ltcomputerdesigns.com
> Access Security: www.ltcomputerdesigns.com/Security.htm
> Jeff Conrad's Access Junkie List:
> http://home.bendbroadband.com/conradsystems/accessjunkie.html
>
>
Author
15 Jul 2005 4:24 PM
Lynn Trapp
> Wanna give your estimate? ;-)

I have none, as I'm not interested in that kind of thing. However, I would
suggest that you could be in danger of libel by writing things suggesting
that those companies are doing something illegal, unless you have some
proof.

Author
15 Jul 2005 7:07 AM
Chris Mills
I have lodged a formal complaint with Microsoft about Jeff Conrad's site (not
about Jeff Conrad exactly).

Who knows if Microsoft will take any notice. I am posting this just so's
no-one thinks I am doing "dirtys". I might or might not post the full text of
my complaint to Microsoft, but it seems inappropriate at the moment (it was
not written as an "open letter").

Probably the first time any such complaint has been attempted. And some people
accuse me of not being serious.

My concern is security in the overall sense. I await with interest Microsoft
reply, if any. The silence in this so-named newsgroup about matters of
security is, well, "crushing".

Chris Mills
Access Developer
Author
15 Jul 2005 1:23 PM
Jan Il
"Chris Mills" <phad_nospam@cleardotnet.nz> wrote in message
news:uyBsvuQiFHA.3608@TK2MSFTNGP12.phx.gbl...

<snipped>

> ......... And some people accuse me of not being serious.

ROFL!!!!

Jan :)
Author
15 Jul 2005 5:46 PM
Tony Toews
"Chris Mills" <phad_nospam@cleardotnet.nz> wrote:

>I observe that "Jeff Conrad MVP", not only posts on his web-site how to break
>mde's, but is also associated with a company which offers to directly break
>mde's.

Big deal.  AFAIK those utilities only get back the forms and reports
with controls.  No code though.  In my solutions code is about 90% of
the solution so that's of no concern to me.

Tony
--
Tony Toews, Microsoft Access MVP
   Please respond only in the newsgroups so that others can
read the entire thread of messages.
   Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Author
15 Jul 2005 5:47 PM
Tony Toews
"Chris Mills" <phad_nospam@cleardotnet.nz> wrote:

>I observe that "Jeff Conrad MVP", not only posts on his web-site how to break
>mde's, but is also associated with a company which offers to directly break
>mde's.

Also I've posted links to one or two of those web sites at least once
or twice.

Tony
--
Tony Toews, Microsoft Access MVP
   Please respond only in the newsgroups so that others can
read the entire thread of messages.
   Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Author
15 Jul 2005 6:40 PM
Lynn Trapp
> Also I've posted links to one or two of those web sites at least once
> or twice.


Me too. As far as I'm concerned, it's a try at your own risk suggestion for
someone who is stuck.

Author
16 Jul 2005 6:25 AM
Chris Mills
> Also I've posted links to one or two of those web sites at least once
> or twice.
>
What, UL password retrieval for £5.99 as well?

Regards
Chris
Author
18 Jul 2005 2:03 AM
Tony Toews
"Chris Mills" <phad_nospam@cleardotnet.nz> wrote:

>> Also I've posted links to one or two of those web sites at least once
>> or twice.
>>
>What, UL password retrieval for £5.99 as well?

No.  The free utility to unlock the controls on forms and reports in
MDEs.

Tony
--
Tony Toews, Microsoft Access MVP
   Please respond only in the newsgroups so that others can
read the entire thread of messages.
   Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Author
18 Jul 2005 3:39 AM
Chris Mills
Thankyou for that.
Chris
Author
2 Oct 2007 9:29 PM
Amy
I have a DB that I need to add a field to a form but it is locked. I could
really use this utility, can you tell me where to get it? Ironically, I have
access to the tables and queries but not the forms and reports. Despite what
the paranoid security guy thinks, people are not hacking and destroying their
own databases!



Show quote
"Tony Toews" wrote:
>
> No.  The free utility to unlock the controls on forms and reports in
> MDEs.
>
> Tony
> --
> Tony Toews, Microsoft Access MVP
>    Please respond only in the newsgroups so that others can
> read the entire thread of messages.
>    Microsoft Access Links, Hints, Tips & Accounting Systems at
> http://www.granite.ab.ca/accsmstr.htm
>
Author
10 Jul 2005 12:20 AM
Joan Wild
"Bob" <B**@discussions.microsoft.com> wrote in message
news:74BC05EB-D29C-4BFB-B695-F7C6000F5FE5@microsoft.com...
> Which I do not want the end users to put in a password.

You can secure your database without requiring a login, providing you need
only two levels of security - you and the users.

See www.jmwild.com/secureNoLogin.htm



--
Joan Wild
Microsoft Access MVP
Author
10 Jul 2005 1:23 AM
Bob
Thanks for the tips

Show quote
"Joan Wild" wrote:

> "Bob" <B**@discussions.microsoft.com> wrote in message
> news:74BC05EB-D29C-4BFB-B695-F7C6000F5FE5@microsoft.com...
> > Which I do not want the end users to put in a password.
>
> You can secure your database without requiring a login, providing you need
> only two levels of security - you and the users.
>
> See www.jmwild.com/secureNoLogin.htm
>
>
>
> --
> Joan Wild
> Microsoft Access MVP
>
>
>

AddThis Social Bookmark Button