Learn Microsoft Access Advanced Programming Techniques, Tips and Tricks.

SHARE PREVIOUS VERSION DATABASE

Share a previous-version secured database across several versions of Microsoft Access.

With one exception, the issues involved when sharing a secured database across more than one version of Microsoft Access are the same as the issues for sharing an unsecured database across more than one version.

The one exception concerns how to handle the workgroup information file that is used with the secured database. You have two choices:

  1. Tell users who will be upgrading to Microsoft Access 2000 to join the appropriate workgroup information file with the oldest version of Microsoft Access that will be sharing the secured database.

    Microsoft Access 2000 can use workgroup information files that have been created with previous versions, but previous versions can only use workgroup information files that have been created with Microsoft Access 2000 or a previous version.

    Important: If users will be sharing a secured database from Microsoft Access 95 or 97, you should compact the current workgroup information file with Microsoft Access 2000 before using it. Compacting the file by using Microsoft Access 2000 does not change the file format, so the file can continue to be used by any Microsoft Access 95 or 97 users who are not upgrading.

  2. If the shared database is Microsoft Access version 2.0, convert the workgroup information file that will be used with the secured database and then tell only users who are upgrading to Microsoft Access 2000 to join the converted workgroup information file. All users who are not upgrading from version 2.0, must continue to use the workgroup information file produced with that version.
Share:

CONVERT OLDVERSION WORKGROUP FILE

Convert a workgroup information file from a previous version of Microsoft Access.

To take advantage of security and performance improvements, you should re-create the Workgroup Information File as described below:

  1. Create a new workgroup information file, making sure to enter the exact, case-sensitive name, company name, and workgroup ID that was used to create the original file. Failure to re-enter the exact entries that were used to create the original file will create an invalid Admins group.
  2. Re-create any group accounts, making sure to enter the exact, case-sensitive user name and PID for each user.
  3. Tell other Microsoft Access 2000 users in the workgroup to use the workgroup Administrator to join the new workgroup information file.

    Click Next to see how to Share a previous-version secured database across several versions of Microsoft Access.

    Goto Main

Share:

CONVERT MSACCESS OLD VERSIONS

Convert a Microsoft Access 95 or 97 secured database.

When upgrading from Microsoft Access 95 or 97, you need to convert your secured database, but you don't need to convert the Workgroup Information File to use it with Microsoft Access 2000. However, you should compact the Workgroup Information File before using it.

  1. Convert the secured database.
  2. Compact the secured database.
  3. Exit Microsoft Access.
  4. Before compacting the Workgroup Information File (typically named System.mdw) that was used with the secured database, temporarily join another Workgroup Information File.
  5. Start Microsoft Access without opening a database.
  6. Compact the Workgroup Information File that was used with the secured database.
  7. Tell users to join the compacted workgroup information file before opening the secured database.
Share:

RUN PERMISSIONS PROPERTY

RunPermissions Property

You can use the RunPermissions property in a multi-user environment with a secure workgroup to override the existing user permissions. This allows you to view a query or run an append, delete, make-table or update query that you will be able to run. For example, as a user, you have read-only permission for queries, while the owner of the queries has read/write permissions. If the owner sets the RunPermissions property to specify the owner's permissions, you can run an append query to add records to a table.

Setting:

The RunPermissions property uses the following settings:

  1. Setting Description
  2. Owner's: All users are allowed the owner's permissions to view or run the query.
  3. User's (Default): Users have only their own permissions to view or run the query.

You can set this property by using the query's property sheet.

You can also set the RunPermissions property in SQL view of the Query window by using the WITH OWNERACCESS OPTION declaration in the SQL statement.

Share:

DEFAULT PERMISSIONS FOR NEW QUERY

Change default permissions for all new queries.

You can change the default permissions that allow others to view data returned from queries or in the case of action queries, to run the queries, even if they are otherwise restricted from viewing the underlying table or query.

Changing the default permissions affects only new queries.

  1. On the Tools menu, click Options
  2. Click the Table/Queries tab.
  3. Click the Run Permissions option you want to use.

If you select Owner's:, all users have the query owner's permission to view or run the query.

Only the query owner can save changes to the query.

Only the query owner can change the ownership of the query.

If you select User's, the permissions that are defined for that classification of users are in effect instead and any user with Administer permissions for the query can save changes to the query, or change its ownership.

Click Next to see how to set Run Permissions Property of Queries.

Goto Main

Share:

PERMIT TO VIEW RUN QUERY

Permit others to view or run my query but not change data or query design.

In a secure workgroup, you can assign others permission to view the data your query returns, or in the case of an action query, to run the query, even if they are otherwise restricted from viewing the query's underlying table or query.

  1. Open the query in Design view. Select the query by clicking anywhere in query Design view outside the design grid and the field lists.
  2. Click Properties on the toolbar to display the query's property sheet.
  3. Set the Run Permissions property to Owner's.

The following are true for this setting:

  • All users have the query owner's permission to view or run the query.
  • Only the query owner can save changes to the query.
  • Only the query owner can change the ownership of the query.

Note: You can also set default permissions for all new queries. Click Options on Tools menu. Click the Tables/Queries tab, and then click the Run Permissions option you want to use.

Share:

TRANSFER OWNERSHIP OF DATABASE

Transfer ownership of an entire database to another administrator

Start Microsoft Access by using a secure workgroup that contains the user account that you want to own the database and its objects.

  1. Log on by using that account.
  2. Create a new blank database.
  3. Import all of the objects from the database that has the ownership you want to change into the new database.

Note: To import a database, you must have Open/Run permission for the database and Read Design permission for its objects. To import Tables you must also have Read Data permission. If you have permissions for some tables, queries, forms, reports and macros but not others, Microsoft Access imports only those objects for which you have permissions.

Share:

VIEW OR TRANSFER OWNERSHIP

View or transfer ownership of individual Tables, Queries, Forms, Reports and Macros in a secure database.

If you have Administer permission for a Table, Query, Form, Report or Macro, you can change the ownership of the object to another user or group.

  1. Open the database.
  2. On the Tools menu, click Security, and then click User and Group Permissions.
  3. On the Change Owner tab, Microsoft Access displays a list of the tables, queries, forms, reports and macros that are currently displayed in the Database window and the current owner of those objects.
  4. Click an object type in the Object Type box, or use the existing object type.
  5. From the Object list, click one or more objects with ownership that you want to change. To select more than one object, either hold down CTRL and click the objects, or drag through the ones you want to select.
  6. In the New Owner box, click the user or group account that you want to be the new owner of the object or objects.
  7. Click the Change Owner button.

Note: If you change ownership of a table, query, form, report or macro to a group account, all users who belong to the group automatically receive the permissions associated with ownership of the object.

Share:

ASSIGN DEFAULT PERMISSIONS

Assign default permissions for new Tables, Queries, Forms, Reports and Macros.

  1. Open the database that contains the Tables, Queries, Forms, Reports and Macros.
  2. On the Tools menu, click Security and then click User and Group Permissions.
  3. On the Permissions tab, click Users or Groups, and then click the user or group that has the permissions you want to assign in the User/Group Name box.
  4. Click the type of object in the Object Type box and click in the Object Name list.

    The selection varies depending on the type of object you've selected.

  5. Select the default permissions that you want to assign for that object type and then click Apply.
  6. Repeat steps 4 and 5 to assign default permissions for additional object types for the current user or group.
  7. Repeat steps 3 through 5 for any additional users or groups, and then click OK when you have finished.



Notes: Default permissions can be assigned only by an administrator account (a member of the Admins group in the workgroup in which the database that contains the object was created) or by the owner of the database. Some permissions automatically imply the selection of others. For example, the Modify Data permission for a table automatically implies the Read Data and Read Design permissions because you need these to modify the data in a table. Modify Design and Read Data imply Read Design. For macros, Read Design implies Open/Run.

Organizing user accounts into groups makes it easier to manage security. For example, rather than assigning permissions to each user for each object in your database, you can assign permissions to a few groups, and then add users to the appropriate group. When users log on to Microsoft Access, they inherit the permissions on any group to which they belong.

Click Next to see how to View or transfer ownership of objects.

Share:

ASSIGN OR REMOVE PERMISSIONS

Assign or remove permissions for a database and existing Tables, Queries, Forms, Reports and Macros

Open the database that contains the Tables, Queries, Forms, Reports and Macros that you want to secure. The workgroup information file in use when you log on must contain the user or group accounts that you want to assign permissions for at this time; however, you can assign permissions to groups and add users to those groups later.

  1. On the Tools menu, point on Security and then click User and Group Permissions.
  2. On the Permissions tab, click Users or Groups and then click the user or group that has the permissions you want to assign in the User/Group Name box.
  3. Click the type of object in the Object Type box, and then click the name of the object to assign permissions for in the Object Name box.
  4. Tip: You can select multiple objects in the Object Name box by dragging through the objects you want to select, or by holding down CTRL and clicking the objects you want.
  5. Under Permissions, select the permissions you want to assign, or clear the permissions you want to remove for the group or user, and then click Apply. Repeat steps 3 and 4 to assign or remove permissions for additional objects for the current user or group.
  6. Repeat steps 2 to 4 for any additional users or groups, and then click OK when you have finished.

Notes: Some permissions automatically imply the selection of others. For example, the Modify Data permission for a table automatically implies the Read Data and Read Design permissions because you need these to modify the data in a table. Modify Design and Read Data imply Read Design. For macros, Read Design implies Open/Run.

When you edit an object and save it, it retains its assigned permissions. However, if a object is saved with a new name by using the Save As command on the File menu, or by cutting and pasting, importing, or exporting the object, the associated permissions are lost and you have to reassign them. This is because you are creating a new object that is assigned the default permissions defined for that object type.

Hidden objects aren't displayed in the Object Name box unless you select Hidden objects on the View tab of the Options dialog box (Tools menu).

Click Next to view how to Assign default permission for new tables, queries, forms, reports and macros.

Share:

CLEAR SECURITY PASSWORD

Clear a security account password

To complete this procedure, you must be logged on as a member of the Admins group.

Start Microsoft Access by using the workgroup information file in which the user account ( and its password) is stored.

You can find out which workgroup information file is current or change workgroups by using the Workgroup Administrator.

  1. Open a database.
  2. On the Tools menu, point to Security, and then click User and Group Accounts.
  3. On the Users tab, enter the user account name in the Name box.
  4. Click Clear Password.
  5. Repeat steps 3 & 4 to clear any additional passwords, and then click OK when you have finished.

Create or Change Security Password

Click Next to see how to Assign or remove permissions for Objects.

Goto Main

Share:

CREATE OR CHANGE SECURITY PASSWORD

Create or change a security account password

A security account password is created to make sure that no other user can log on using that user name. By default, Microsoft Access assigns a blank password to the Admin user account, and to any new user accounts you create in your workgroup.

Start Microsoft Access by using the workgroup the user account is stored in, and log on using the name of the account for which you want to create or change the password.

You can find out which workgroup is current or change workgroups by using the Workgroup Administrator.

  1. Open a database
  2. On the Tools menu, point to Security, and then click User and Group Accounts.
  3. On the Change Logon Password tab, leave the Old Password box blank if a password hasn't been defined previously for this account. Otherwise, type the current password in the Old Password box.
  4. Type the new password in the New Password box.
  5. A password can range from 1 to 20 characters, and can include any characters except ASCII character 0 (Null). Passwords are case-sensitive.
  6. Retype the password in the Verify box, and then click OK.

Caution: You can't recover your password if you forget it, so be sure to store it in a safe place. If you forget your password, a user logged on with an administrator account (a member of the Admins group in the workgroup in which the account and password were created) must clear the password before you can log on.

Click Next to see how to Clear a security account password.

Goto Main

Share:

DELETE MSACCESS SECURITY GROUP ACCOUNT

Delete a security group account

To complete this procedure, you must be logged on as a member of the Admins group.

Note: The Admins and Users group accounts can't be deleted.

  1. Start Microsoft Access by using the workgroup that contains the account you want to delete. You can find out which workgroup is current or change workgroups by using the Workgroup Administrator.
  2. Open a database.
  3. On the Tools menu, point to Security, and then click User And Group Accounts.
  4. On the Groups tab, enter the group you want to delete in the Name box, and then click Delete.
  5. Click Yes to delete the group account.

Repeat steps 4 and 5 if you want to delete additional group accounts.

Click Next to see how to Create or change a security account password.

Delete MS-Access Security User Account.

Goto Main

Share:

DELETE MSACCESS SECURITY USER ACCOUNT

Delete a Microsoft Access security user account

To complete this procedure, you must be logged on as a member of the Admins group.

Note: The Admin user account can't be deleted.

  1. Open a database.
  2. On the Tools menu, point to Security, and then click User And Group Accounts.
  3. On the Users tab, enter a user in the Name box, and then click Delete.
  4. Click Yes to delete the user account.

Repeat steps 3 and 4, if you want to delete additional user accounts, and then click OK when you have finished.

Click Next to see how to Delete a Security Group Account.

Goto Main

Share:

REMOVE USERS FROM SECURITY GROUPS

Remove Users from Microsoft Access Security Groups

To complete this procedure, you must be logged on as a member of the Admins group.

Notes : You can't remove users from the default Users group. Microsoft Access automatically adds all users to the Users group. To remove any user account from the Users group, you must delete the account.

There must be at least one user in the predefined Admins group at all times.

  1. Start Microsoft Access by using the workgroup containing the user and group accounts.
  2. You can find out which workgroup is current or change workgroups by using the Workgroup Administrator.
  3. Open a database.
  4. On the Tools menu, point to Security, and then click User And Group Accounts.
  5. On the Users tab, enter the user you want to remove in the Name box.
  6. In the Member Of box, click the group you want to remove the user from, and then click Remove.
  7. Repeat step 5 to remove this user from any other groups. Repeat steps 4 and 5 to remove other users from groups.
Share:

ADD USERS TO SECURITY GROUPS

Add users to security groups

To complete this procedure, you must be logged on as a member of the Admins group.

  1. Open a database.
  2. On the Tools menu, point to Security and then click on User and Group Accounts.
  3. On the Users tab, enter in the Name box the user name you want to add to a group.
  4. In the Available Groups box, click the group you want to add the user to, and then click Add. The selected group is displayed in the Member of list.

Repeat step 4 if you want to add this user to any other groups.

Repeat steps 3 and 4 to add other users to groups.

Share:

MSACCESS SECURITY GROUP ACCOUNT

Create a security group account

As part of securing a database, you can create group accounts in your Microsoft access workgroup that you use to assign a common set of permissions to multiple users.

To complete this procedure, you must be logged on as a member of the Admins group. Start Microsoft Access by using the workgroup in which you want to use the account.

Important : The accounts you create for users must be stored in the workgroup information file that those users will use. If you are using a different workgroup to create the database, change your workgroup before creating the accounts. You can change workgroups by using the Workgroup administrator.

  1. Open a database.
  2. On the Tools menu, point to Security, and then click User and Group Accounts.
  3. On the Groups tab, click New.
  4. In the New User/Group dialog box, type the name of the new account and a personal ID (PID).

    Group names can range from 1 to 20 characters, and can include alphabetic characters, accented characters, numbers, spaces and symbols, with the following exceptions:

    • The characters ' \ [ ] " | <> + = ; , . ? *
    • Leading spaces
    • Control characters (ASCII 10 through ASCII 31)

    Caution: Be sure to write down the exact account name and PID, including whether letters are uppercase or lowercase and keep them in a secure place. If you have to re-create an account that has been deleted or created in a different workgroup, you must supply the same name and PID entries. If you forget or lose these entries, you can't recover them.

  5. Click OK to create the new group account.

Note: A user account name cannot be same as an existing group account name.

To create more Group Accounts repeat steps 3 to 5 above.

Click Next to see how to add users to security groups.

Go to Main

Share:

CREATE MSACCESS USER ACCOUNT

Create a security user account

  1. Start Microsoft Access and Open a Database. On the Tools menu point to Security, and then click User and Group Accounts.
  2. Click New button on the Users tab of User and Group Accounts dialog box and enter a User-Name and a unique Personal ID (PID) in the New User/Group dialog box and then click OK.

    User name can range from 1 to 20 characters, and can include alphabetic characters, accented characters, numbers, spaces and symbols, with the following exceptions:

    • The characters "\ [ ] : | < > + = ; , . ? *
    • Leading spaces
    • Control characters (ASCII 10 through ASCII 31)

    Caution: Be sure to write down the exact account name and PID, including whether letters are uppercase or lowercase, and keep them in a secure place.

    If you ever have to re-create an account that has been deleted or created in a different workgroup, you must supply the same name and PID entries.

    If you forget or lose these entries, you can't recover them.

    Notes: The PID entered is not a password.

    Microsoft Access uses the PID and the user name as seeds for an encryption algorithm to generate a secure identifier for the user account. The new name will appear in the user name box.

  3. Click on the Admins group name in "Available Group" List and then click on Add>> button to join yourself to the Admins Group.

    Notes: The procedure is same for creating user account for others, but you need to join them into Group Accounts that you create to join users to different workgroup, like Data Entry Group, Supervisors Group, Managers Group or whatever group to share your database and each group with specific access rights.

  4. Now that you have created your own Administrator account, exit Microsoft Access then start it again.
  5. This time, log on with your new Administrator account.

    You have not yet set a password for your new Administrator account so leave password box empty on the log on dialog box.

  6. Select Tools menu, point to Security, select User and Group Account. Select change Log on password tab. Type a new password in the new password box.
  7. Verify the password. Leave the old password box empty.

We have removed the default Admin user from the Admins Group as part of the safety measure. It is equally important that you remove all permissions of all Objects for Users Group by selecting the object type (Database, Tables, Queries, Forms, Reports, Macros) and de-selecting the permissions check-boxes after highlighting the objects in the Object Name List. This step is very important because all users are the members of the Users Group (Users Group itself cannot be removed like we removed Admins Group for Admin user account) even if we remove the permissions of all objects for that particular user account he will inherit the Group level permissions from the Users Group and user level or other group level permission setting will have no effect.

Create Group Accounts and assign permissions for Objects at User Group Level and Add users to the Group (Like Data Entry Group, Supervisor Group, Manager Group etc.) and not necessary to assign permissions at user level every time you add a new user, if already assigned them at the Group Level. Only you need to add the user to specific Group or Groups.

  • Set Open/Run only permissions to Forms, Reports, Macros for User Groups.
  • You may assign Ownership for those Tables that get over-written while running Make-Table Queries, as part of the data processing tasks, they can safely over-written without access-right problems.

Notes:

The workgroup information file contains only the user name, Workgroup Names, Personal IDs and passwords..

The permissions setting information is stored along with the database.

When you create a new database see that you remove all permissions of the Users Group Account before assigning permissions for your Users or User Groups.

Click Next to see how to create a security User Group Account.

Goto Main

Share:

MICROSOFT ACCESS SECURITY

Securing Your Database

Microsoft Access allows you to implement security on your database objects as you need it. By default, security is completely invisible to both the designers and the users of an Access database. As per your requirements, you can secure individual objects, so that most users can't modify a particular object. If you are extremely concerned about security, you can use Access to remove all but a few ways to retrieve data from your tables. In networked applications, a well-designed security system can help make the application more maintainable by eliminating many sources of potential disaster.

Security Concepts

To understand Access security, you'll need to grasp four basic security concepts: users and groups have permissions on objects.

  • An Access user represents a single person who uses an Access application. Users are distinguished by their user name, password, and a unique secret identifier called the Personal Identifier (PID). To use a secured Access application, a user has to type in her user name and password to be able to get to any objects.
  • An Access group is a collection of users. You can use groups to represent parts of your organization, such as Development and Accounting, or simply security levels, such as High and Low. Often you'll find that assigning users to groups, and permissions directly to those groups, makes a security system more maintainable.
  • An access permission is the right to perform a single operation on an object. For example, a user can be granted read data permission on a table, allowing that user to retrieve data from that table. Both users and groups can be assigned permissions.
  • An access security object is any one of the main database container objects (Table, Query, Form, Report, Macro or Module) or a database itself.

Because both users and groups can have permission, you may have to check several places to determine a user's actual permissions. The user's actual permissions are the least restrictive combination of the user's own permissions (called explicit permissions) and the permissions of all groups the user belongs to (called implicit permissions). So if Mary does not have permission to open the Accounting form, but she's a member of the Supervisors group that does have permission to open that form, she will be able to open the form.

Creating a Microsoft Access Workgroup Information File

When you install Microsoft Access, the Setup program automatically creates a Microsoft Access workgroup information file System.mdw that is identified by the name and organization information you specify. Because this information is often easy to determine, it's possible for unauthorized users to create another version of this workgroup information file and consequently assume the irrevocable permissions of an administrator account (a member of the Admins group) in the workgroup defined by that workgroup information file. To prevent this, create a new workgroup information file, and specify a workgroup ID (WID). Only someone who knows the WID will be able to create a copy of the workgroup information file.

Procedures explained on this Document assumes that you have Microsoft Access 2000 installed in your machine. Other versions of Microsoft Access also use the same procedures but the location of Workgroup Administrator (Wrkgadm.exe) and default workgroup information file (system.mdw) may differ.

  1. Exit Microsoft Access (Access2000 or earlier versions)
  2. To start the Workgroup Administrator, open the language folder (C:\Program Files\Microsoft Office\Office\1033 is for US English), then double-click Wrkgadm.exe. Workgroup Administrator image is given below:
  3. Select the Create Option to create a new Workgroup Information File.
  4. Select the Join... Option to join a Workgroup Information File you have created earlier.

Alternatively, you can use Microsoft Access Workgroup Administrator shortcut in the \Program Files\Microsoft Office\Office folder.

To run Workgroup Administrator in Microsoft Office 2003 :
  1. Start Microsoft Access 2003
  2. Select Tools menu, point on Security, click Workgroup Administrator option.
  3. In the Workgroup Administrator dialog box, click Create.
  4. In the Workgroup Owner Information dialog box, type your name and organization, and then type any combination of up to 20 characters for the workgroup ID.

    Caution: Be sure to write down the exact name, organization, and workgroup ID , including whether letters are uppercase or lowercase (for all three entries) , and keep them in a secure place. If you have to re-create the workgroup information file (if your existing workgroup information file is corrupted or lost by accidentally deleting it) , you must supply exactly the same name, organization, and workgroup ID. If you forget or lose these entries, you can't recover them and might lose access to your databases.

  5. Type a new name for the new workgroup information file, and then click OK.

By default, the workgroup information file is saved in the language folder (C:\Program Files\Microsoft Office\Office\1033, for U.S. English). To save in a different location, type a new path or click Browse to specify the new path). The new workgroup information file is used the next time you start Microsoft Access. Any user and group accounts or passwords that you create are saved in the new workgroup information file.

To have others join the workgroup defined by your new Workgroup Information File, copy the file to a shared folder and then have each user run the Workgroup Administrator (wrkgadm.exe) as explained above on their own PC to join the common workgroup information file.

To Join a Microsoft Access Workgroup using Workgroup Administrator.

  1. Follow steps 1 & 2 as explained above, depending on the Access Version (Access2000 and earlier or Access2003).
  2. In the Workgroup Administrator dialog box, click Join.
  3. li>Type the path and name of the Workgroup Information File that defines the Microsoft Access workgroup you want to join and click OK, or click the Browse button to find the Workgroup Information File on disk, click Open then click OK to close the dialog control.

Next time you start Microsoft Access, it uses the User and Group Accounts and Passwords stored in the workgroup information file for the workgroup you have joined.

Log on to a Microsoft Access workgroup

Activate the Logon dialog box

Until you activate the logon procedure for a workgroup, Microsoft Access automatically logs on all users at startup using the predefined Admin user account and the log on dialog box is not displayed.

You need to set a password for the default Admin user account to activate the logon dialog box so that your users can enter their user name and password to open and work with your secured databases.

  1. Start Microsoft Access.
  2. On the Tools menu, point to Security, and then click User and Group Accounts.
  3. Click the Users tab, and make sure that the predefined Admin user account is highlighted in the Name box.
  4. Click the Change Logon Password tab click the New Password box, and type the new password. Don't type anything in the Old Password box.

    To maintain the security of your password, Microsoft Access displays asterisks (*) as you type. Passwords can be from 1 to 20 characters, and can include any characters except ASCII character 0 (null). Passwords are case-sensitive.

  5. Verify the password by typing it again in the Verify box, and then click OK.

The Logon dialog box is displayed the next time any member of the workgroup that you joined starts Microsoft Access and opens a database. If no user accounts are currently defined for that workgroup, the Admin user is the only valid account at this point.

Note: When you secure a database, you create User Accounts in a Microsoft Access workgroup, and then assign permissions for Databases, Tables, Queries, Forms, Reports and Macros to those Accounts and to any Group Accounts to which they belong. Users log on to Microsoft Access by typing a User-name and password in the Log on Dialog Box. When Users log on to Microsoft Access by using their Accounts, they have only the permissions associated with those accounts.

Keep the following points in mind while implementing MS-Access Security:

  1. The Members of the Admins Group have full Permissions to all objects of the Database and have full authority to give or take away permissions to other Users or User Groups.
  2. The Owner of the Database (the User who created the database) have full authority (like members of the Admins Group) to give permissions or to give ownership of objects to other Users or Groups.
  3. Create an Administrator account for yourself. Click show how.
  4. Remove the default user Admin from the Admins Group.

    Caution: Before going through the procedure in step 4 above you must create a new Administratoraccount(as a member of the Admins group) for yourself otherwise you will be shutting yourself out of your workgroup information file.

  5. Remove all permissions on all objects for the Users group.

By default all users are the members of the Users group. Even if you implement Security at User Account or and other Group Account level it will have no effect if the Users group carries full permissions and the Users will inherit the permissions from the Users group.

  1. Create a security user account
  2. Create a security group account
  3. Add users to security groups
  4. Remove users from security groups
  5. Delete a security user account
  6. Delete a security group account
  7. Create or change a security account password
  8. Clear a security account password
  9. Assign or remove permissions
  10. Assign default permissions for new tables, queries, forms, reports and macros.
  11. View or transfer ownership of Objects
  12. Transfer ownership of an entire database to another administrator
  13. Permit others to view or run my query but not change data or query design.
  14. Change default permissions for all new queries.
  15. RunPermissions Property
  16. Convert a Microsoft Access 95 or 97 secured database.
  17. Convert a workgroup information file from a previous version of Microsoft Access.
  18. Share a previous-version secured database across several versions of Microsoft Access
Share:

Translate



PageRank
Your email address:

Delivered by FeedBurner

Search

Infolinks Text Ads


Blogs Directory

Popular Posts

Search This Blog

Blog Archive

Powered by Blogger.

Labels

Forms How Tos Functions MS-Access Security Reports msaccess forms Animations msaccess animation Utilities msaccess controls Access and Internet MS-Access Scurity MS-Access and Internet Queries External Links msaccess reports msaccess tips Menus and Toolbars Accesstips MsaccessLinks Process Controls Art Work Downloads msaccess How Tos Graph Charts msaccessQuery List Boxes Command Buttons Emails and Alerts Query Combo Boxes Custom Wizards DOS Commands ms-access functions msaccess functions msaccess graphs msaccess reporttricks msaccessprocess security advanced Access Security Array Custom Functions Data Macros Menus Property Report Top Values VBA msaccess email msaccess menus progressmeter Access2007 Auto-Number Command Button Copy Form Join Microsoft Numbering System Records Security Split SubForm Table Utility Variables Workgroup database msaccess wizards Access2003 Accounting Year Action Animation Attachment Binary Numbers Bookmarks Budgeting Calculation ChDir Color Palette Conditional Formatting Controls Data Filtering Data Type Defining Pages Diagram Disk Dynamic Lookup Error Handler Excel Export Expression External Field Type Fields Filter Form Instances Formatting Groups Hexadecimal Numbers Import Labels List Logo Macro Mail Merge Main Form Memo Methods Monitoring Object Reference Objects Octal Numbers Operating System Paste Primary-Key Product Rank Reading Recordset Rich Text Sequence SetFocus Summary Tab-Page Tables Time Difference Union Query User Users Water-Mark Word automatically commands function hyperlinks iSeries Date iif ms-access msaccess msaccess alerts pdf files reference restore switch text toolbar tutorial updating upload vba code

Featured Post

Function Parameter Array Passing

Last week we have explored the usage of ByVal (By Value) and ByRef (By Reference),  in the Function Parameter, to pass the value from  a Va...

Labels

Blog Archive

Recent Posts