Admin help

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

MaBell - 29 Oct 2004 20:53 GMT

Hi guys,

I need help. I have removed the user Admin from the Admin group in my DB
using my custom MDW. I have removed all permissions from user and admin
GROUPS and admin USERS. I (superAdmin) am the owner of the DB and all
objects. All security features work when I open my DB using my custom MDW.
But I can still open the DB using the system MDW. Is that possible? I can't
do anything to any objects but i thought the DB permissions would bar me from
opening the DB even with the system MDW. Am I missing something?

Signature

Thanks in advance,
Matt
(access 2000)

Reply to this Message

Joan Wild - 29 Oct 2004 21:15 GMT

> Hi guys,
>
> I need help. I have removed the user Admin from the Admin group in my
> DB using my custom MDW. I have removed all permissions from user and
> admin GROUPS and admin USERS.

There is a Users Group, Admins Group, and an Admin User in every mdw
created. (I can't really make sense of what you wrote above).

You need to remove permissions for the Users Group and the Admin User.
You need to ensure that neither the Users Group nor the Admin User own any
objects.
You do not need to remove permissions from the Admins Group.
You need to remove the Admin User from the Admins Group.

> I (superAdmin) am the owner of the DB
> and all objects.

Is superAdmin user a member of the Admins Group?

> All security features work when I open my DB using
> my custom MDW. But I can still open the DB using the system MDW. Is
> that possible?

How did you create your custom mdw?

> I can't do anything to any objects but i thought the
> DB permissions would bar me from opening the DB even with the system
> MDW. Am I missing something?

Your sig said Access 2000 - did you run the security wizard (you shouldn't
in 2000)?

Signature

Joan Wild
Microsoft Access MVP

Reply to this Message

MaBell - 30 Oct 2004 20:43 GMT

Hi. Thanks for responding. Let me try and make myself clearer. I know what
sounds informative to me might make no sense to someone else. As a
reference, I followed all the steps in Jack Macdonalds security steps.

1. I created a new workgroup using wrkgrp.exe and open DB with it.
2. I created password for user admin, create new user (me), added (me) to
admin group and remove admin user from admin group.
3. I login as me and create password.
4. I create AppUser group and SuperAdmin group.
5. I create new DB for which I (user) am the owner and of all objects.
6. I remove ALL permissions for the Admin Group, User group, And Admin
user.(giving SuperAdmin group all rights and AppUser Group some, and remove
all user level permissions).

Now when I log into my DB using my pc default system.mdw (silently as user
admin), I should be locked out b/c permissions are saved with the db...
right? However I can open the db. Did I miss something?

Thanks for all your help!

> > Hi guys,
> >
[quoted text clipped - 28 lines]
> Your sig said Access 2000 - did you run the security wizard (you shouldn't
> in 2000)?

Reply to this Message

Joan Wild - 31 Oct 2004 14:29 GMT

> 1. I created a new workgroup using wrkgrp.exe and open DB with it.

How are you sure you were using your new workgroup when you opened the mdb?
(It's possible you were still using system.mdw).

> 2. I created password for user admin, create new user (me), added
> (me) to admin group and remove admin user from admin group.
[quoted text clipped - 4 lines]
> user.(giving SuperAdmin group all rights and AppUser Group some, and
> remove all user level permissions).

Just an aside, it isn't necessary to remove permissions for the Admins
Group, but no harm. Did you also ensure that you removed permission on the
database object? It's not in plain view in earlier versions.

Signature

Joan Wild
Microsoft Access MVP

Reply to this Message

MaBell - 31 Oct 2004 20:20 GMT

I always check what .mdw file i use when i log in using "?dbengine.systemdb"
in the intermediate window.

I have to check but i am pretty sure only SuperAdmin group has permission to
the database object.

Thanks for your input. I will keep working on it till I figure it out.

> > 1. I created a new workgroup using wrkgrp.exe and open DB with it.
>
[quoted text clipped - 13 lines]
> Group, but no harm. Did you also ensure that you removed permission on the
> database object? It's not in plain view in earlier versions.

Reply to this Message