Access 2002/2003 Security Step by Step

The wizard is much improved in 2002/2003.  There is one thing you need to decide first.  The wizard will automatically create a username that matches the windows username you are currently logged in as.  It is this user that will own all objects in the database and have full control.  If you want a different username, then do the following first.  Otherwise proceed to step 16. 

  1. Open Access, but not any database.
  2. Go to Tools, Security, Workgroup Administrator.  It will show you the workgroup you are currently joined to by default (write down the path, you’ll need it later).
  3. Click on Create and enter a Name, Organization, and Workgroup ID.  Write down the exact strings you use; you’ll need these should you ever need to recreate the workgroup.
  4. Choose a suitable location and name for your new workgroup file.  Do not give it the same name as the standard workgroup (system.mdw).  Once you click on OK, you’ll be presented with a dialog to confirm the information.
  5. Once you’ve confirmed the information, the workgroup will be created and you’ll be joined by default to this new workgroup.  Click OK.
  6. Go to Tools, Security, User and Group Accounts.
  7. On the Users tab click on New to create a new user (one that will own all objects and have full permissions on your database).  Enter the name and PID for this user (suggest you write down this information).
  8. Add the Admins Group to this user.
  9. Choose the Admin user in the dropdown list and remove them from the Admins Group.
  10. Go to the Change Logon Password tab and enter a password for the Admin user.  Click on OK.
  11. Close Access.
  12. Open your unsecured database in Access.  When prompted for a username, enter the user you created at step 7.  The password will be blank.
  13. Go to Tools, Security, User and Group Accounts.  Click on the Change Password tab and set a password for this user.
  14. Go to Tools, Security, User Level Security Wizard.
  15. Choose Modify the current workgroup information file and click Next.  Proceed to step 22.
  16. Open your unsecured database in Access.
  17. Go to Tools, Security, User Level Security Wizard.
  18. Choose Create a new workgroup information file and click Next.
  19. Click on Browse, and choose a suitable location and name for your workgroup file.  Do not give it the same name as the standard workgroup (system.mdw). 
  20. You can change the WID and/or name and/or company, or accept what the wizard suggests.
  21. It is recommended that you choose the option ‘I want to create a shortcut to open my secured database’.  The other option will join you by default to your new workgroup.  This would mean you would have to login for all your databases.  Click Next.
  22. The next page asks what objects you want to secure.  By default they are all selected.  Click on Next.
  23. The next step offers 7 optional groups for your database.  You can select any/all of them, depending on your needs. 
  24. The next dialog asks if the Users Group should have any permissions.  Most commonly you would choose ‘No, the Users group should not have any permissions’.  If you choose ‘Yes’, then you are saying that some objects should not be secure.  The Users Group is common to all workgroups, so anyone in the world with Access would have the permissions you assign to the Users Group.
  25. The next step is where you create users.  By default it will have created one user (and this will be the user that will own all objects in the database and will be a member of the Admins Group).  It is recommended that you select this user and enter a password for them.
  26. Click on Add New user and enter a username and password for each user.  You can edit the PID if you wish, and then click on Add This User to the List.
  27. At the next step you can either choose a group and assign users or choose a user and assign the groups they are in.
  28. The next step asks for a location for the backup copy of your unsecured database.  Click on Browse and choose a suitable location and name (the default is the same location but with a bak extension).
  29. Click on Finish.  A One-Step Security Wizard report will be displayed.  Print this report.  If you ever need to recreate the workgroup file, you’ll need the information.
  30. You’ll get a message suggesting you save the report as a snapshot.
  31. The next message reminds you to close Access.
  32. Use the desktop shortcut created to open your secure database.

If you followed steps 1-15, it is recommended you do the following:

  1. Open Access and go to Tools, Security, Workgroup Administrator.  This will show that you are still joined by default to your secure mdw.
  2. Click on Join and rejoin the standard system.mdw that ships with Access (you wrote down the path).
  3. Create a desktop shortcut that has the following as the target:

“path to msaccess.exe” “path to mdb” /wrkgrp “path to secure mdw”

This will ensure that you are joined to the standard system.mdw for all sessions of Access.  When you want to use your secure database, you’ll start it using the desktop shortcut. 

As a final test, open Windows Explorer, locate your secure mdb and double-click it.  You should not be able to open the database at all.

 
     

Home | Access Tips | Clients | Links

Copyright 2004 - Joan Wild