|
|
|
|
Access 97/2000 Security Step by Step
- Go to Start, Run and
type wrkgadm.exe This will open the workgroup administrator and show
you the workgroup you are currently joined to by default (write down the
path; you’ll need it later).
- Click on Create and
enter a Name, Organization, and Workgroup ID. Write down the exact
strings you use; you’ll need these should you ever need to recreate the
workgroup.
- Choose a suitable
location and name for your new workgroup file. Do not give it the
same name as the standard workgroup (system.mdw). Once you click on
OK, you’ll be presented with a dialog to confirm the information.
- Once you’ve confirmed
the information, the workgroup will be created and you’ll be joined by
default to this new workgroup. Click Exit.
- Open Access, canceling
the startup dialog box.
- Go to Tools, Security,
User and Group Accounts.
- On the Users tab click
on New to create a new user (one that will own all objects and have full
permissions on your database). Enter the name and PID for this user
(suggest you write down this information).
- Add the Admins Group
to this user.
- Choose the Admin user
in the dropdown list and remove them from the Admins Group.
- Go to the Change Logon
Password tab and enter a password for the Admin user. Click on OK.
- Close Access.
- Open Access and log in
as the user you created in step 7 (the password will be blank).
Cancel the startup dialog box.
- Go to Tools, Security,
User and Group Accounts. Click on the Change Logon Password tab and
enter a password for this user. Click on OK.
At this point, you can
either use the security wizard or secure it manually. If you
are using Access 97, use the wizard. If you are using version 2000,
do not use the security wizard - secure it manually.
Using the Wizard:
- Open the database you
want to secure. Go to Tools, Security, User Level Security Wizard.
- Choose all objects and
click on OK.
- Choose a suitable
location and name for your secure mdb and click on Save.
- The wizard will create
the new secure mdb, and your original mdb will not be changed.
You’ll get a confirmation message when it is completed. Your new
user will be the owner of the secure mdb and all its objects. The
Users Group will have no permission on anything.
- When the wizard is
completed, close the database window. Open your new secure mdb.
- Go to Tools, Security,
User and Group Permissions.
- Click on the List
Groups option, and then select the Users Group in the list.
- Beside Object Type
choose Database, and uncheck the Open/Run permission, and click OK.
- Proceed to Final
Steps, below.
Secure it manually:
- Create a new database,
choosing a suitable location and name.
- Go to File, Get
External Data, Import
- Locate your database.
Click on each tab and click Select All. If your database has custom
menus and/or import/export specs, click on Options and ensure you include
those. Click OK.
- Go to Tools, Security,
User and Group Permissions.
- Click on the List
Groups options, and then select the Users Group in the list.
- Beside Object Type
choose Database, and uncheck all permissions.
- Choose Object Type
Tables, select all items under Object Name. Click on Read Design
once to remove all permissions and click on Apply. Repeat for the
Object Type Queries.
- Choose Object Type
Forms, select all items under Object Name. Click on Read Design and
on Open/Run to remove all permissions and click on Apply. Repeat for
the Object Type Reports.
- Choose Object Type
Macros, select all items under Object Name. Click on Open/Run once
to remove all permissions and click on Apply.
- Choose Object Type
Modules, select all items under Object Name. Click on Read Design
once to remove all permissions and click on Apply. (note Modules are only
available in 97, not 2000)
- Proceed to Final
Steps, below.
Final Steps
- Close Access.
- Go to Start, Run and
type wrkgadm.exe This will open the workgroup administrator and show
that you are still joined by default to your secure mdw.
- Click on Join and
locate the original workgroup you were joined to (you wrote down the
path).
- Create a desktop
shortcut that has the following as the target:
“path to msaccess.exe” “path to mdb” /wrkgrp “path to secure mdw”
This will ensure that you are joined to the standard system.mdw for
all sessions of Access. When you want to use your secure database,
you’ll start it using the desktop shortcut.
As a final test, open Windows Explorer, locate your secure mdb and
double-click it. You should not be able to open the database at all.
Not Done Yet
So far you have ensured
that only by using the secured mdw can someone open your secure database.
You haven’t created any groups or users other than the one.
- Open your database
using the shortcut, and login with the username/password you created.
Go to Tools, Security, User and Group Accounts.
- Click on the Groups
tab and create the groups you need. Be sure you write down the names
and PIDs you enter.
- Close the dialog.
- Go to Tools, Security,
User and Group Permissions.
- Click on the Groups
option beside List.
- Select a group that
you want to apply permissions to.
- Go through all the
objects in your database assigning the appropriate permissions to this
group. Repeat for other groups you have created. Ensure that
you don’t assign any permissions to the Users Group.
- You do not need to
assign permissions to individual users. Although it’s possible, it
isn’t necessary and will make administration harder.
- Go to Tools, Security,
User and Group Accounts.
- Click on the Users tab
and create users.
- Once you've created a
user, you can
assign them membership in one or more groups. That user will
automatically inherit the permissions assigned to the group.
|
|