HomeAccess Extra No 25  Special Access Security Issue November/December 2003_

 
_aadconsulting.com
      Next Issue Feb 2004

January eLetter   

 
 What's New

FreeAccess Applications Listed at MS Office Marketplace

These Access tools have been listed on the Official Microsoft Office Marketplace. To get listed a product must be considered by Microsoft as valuable and compelling to Microsoft Office customers:

Access Control Center
Integrated MS Access Project Management: Very pleased with it, it'll save me hours of messing about with workgroups and Access launching the wrong version... Money well spent!

Ezy SQL Editor and Builder
The ultimate SQL assistant: font options, find and replace, keywords assistant, parameter wizard, SQL string parsing & formatting, table and field references, insert formatted SQL Strings into modules or copy to the Clipboard, preview action queries...

123 Error Handler Wizard
Instantly add error-handling to your databases: 1. The Wizard reviews your database and identifies all procedures without error-handling, and reports the On Error... statement for all other procedures. 2. You select which procedures to add error-handling. 3. The Wizard adds error-handling to the selected procedures in one automated operation.

Ezy Documenter Premium Edition
Automatically documents and prints in a fully formatted Access report all the major objects in your Access database: tables and fields, table relations, query definitions, forms and record sources, reports and record sources, all code modules, all macros, all data access pages, and all references. The Premium Edition allows user customization of each Ezy Documenter Database Report.

Smart Form+ Wizard
SmartForm+ creates smart and lightweight Access forms.

NEW Ezy Access Launcher

Automatically opens Access files in the appropriate version. Try it

Office 2003

Office 2003 Setup May Remove Earlier Versions of Office (826319)

Supported Installation Methods for Deploying Office 2003 (828377)

FAQ About the Office Startup Assistant in Office 2003 (826318)

What the New Microsoft Office System Means for IT

The Microsoft Office System- New Tools and Solutions

New Office Developer Centre on MSDN

Overview of Smart Client Applications in the Microsoft Office System

 Special Feature: Access Security
Effective Access Security

To effectively secure an Access database you MUST demote the Admin user from the Admins group. Otherwise your database will not be secure, as Admin cannot be removed from the Users group, and anyone using the retail system.mdw logs on automatically as Admin.

Doing this is a rather convoluted process as shown below, so I have included a sample.mdw file, which is supplied without warranty or support, in this Issue's Access Security Download files, with the following accounts:

More tips, samples, articles & code on the

Access Utilities CD
New v4.0

User Name Group that User Belongs To:
Admin Users
Administrator Administrators
Users
DataEntry Users
DBOwner Administrators
Users
Admins
Group Name Users that Belong to Group:
Administrators DBOwner
Administrator
Admins DBOwner
Users DBOwner
Admin
Administrator
DataEntry
Admins
The password for DBOwner is "dbowner", and can be changed using the Access Security Wizard.
Special Issue Download Files

This Issue's Access Security Download files are listed below and include the excellent MS Access Security Manager Add-Ins for each of Access97, Access2000, and Access2002:

ACCESS Overview of How to Help Protect a Microsoft Access Database.mht
Access Security Datasheet.xls
Access Security FAQ.mht
Access2000SecurityDemo.zip
COM Add-ins and Security.htm
How To Automate a Secured Access Database Using Visual Basic.mht
Is Database Security an Oxymoron.txt
MSDN Exploring Microsoft Access Security.mht
Office 2000 Service Pack 3- The Latest in Office Security.url
SAMPLE.MDW
SECFAQ.EXE
Secmgr97.exe
smgr2000.exe
smgr2002.exe

Securing An Access Database

1. Use the Access Workgroup Administrator (AWA), wrkgadm.exe, to create a new workgroup (.mdw) file.

2. Join the new workgroup using AWA.

3. Open Access and the database to be secured.

4. Using Tools, Security, User and Group Accounts..., in the User and Group Accounts dialog:

        4.1 Create a password for Admin user.

        4.2 Create a new user account. This account will be the new
        database owner account. In sample.mdw, this owner account
        is called DBOwner. Add "DBOwner" to all groups, including the
        critical Admins group.

5. Close and re-open Access, logging on as "DbOwner", and leaving the password blank, as you have not assigned one yet.

7. In the User and Group Accounts dialog, demote the Admin user account by removing it from the Admins group. Now Admin is only a member of the Users group and will have only those permissions assigned to that group by "DBOwner".

8. Create a password for "DBOwner".

9. Close and re-open Access, logging on as "DBOwner" using the password you created in step 8.

10. You can now start to secure the objects in you database.

Special Notes:

  • A User account inherits the permissions of the Group to which it belongs.
  • In Acess2000 and later, if you are not creating an .mde, you also need to secure your code by using Password Protection in the VBA Editor.
_Downloads

VBA AND VB.NET in Access Code Samples

Microsoft Office Downloads

VBA Mega-Library 

 Code Samples

Code Samples are included in this Issue's Access Security Download files.

 Useful links

MSDN Access Starting Point

Free Tips from FMS

 Coming soon...
  • Access Copy Protector An Access application that copy protects an .mde, so that it will run only on the machine that it is installed on. 
  • Sticky Toolbar - an Access form-based Toolbar that moves with a form.
  Access KB Articles

 

161088 ACC97: Using Automation to Send a Microsoft Outlook Message

253604 ACC97: Microsoft Access Database Connectivity Fails in Active Server Pages

160875 ACC97: TransferDatabase Causes Page Fault If Object Exists

140409 ACCESS: Code Pages (Character Sets) and How They Affect Microsoft Access

285984 ACC97: "What's This" Help Is Not Visible in a Run-Time Database Created with Microsoft Office Developer Edition (ODE Tools)

170696 ACC97: "Can't Read" Error, Trying to Open MDE Containing Module

824270 ACC97:"There Is No Object in This Control" Error Message When You Open a Microsoft Access 97 Database That You Converted From a Microsoft Office Access 2003 Database

163348 ACC97: Tables That Appear to Be Checked In in VSS Are Not

246237 ACC2000: BUG Object Model Breaks Binary Compatibility

300699 ACC2002: Common Data Access Page Deployment Errors

_Back Issues

 

Download a Searchable Compendium of Issues 1-25

Visit our Link Partner:
Superior Software for Windows
Access, SQLServer and .NET Downloads

www.ssw.com.au
Top

Top

Editor: Tony D'Ambra
CONTENTS:

What's New:
Office Marketplace
Ezy Access Launcher

------------------------
Office 2003

Special Feature
Access Security

Downloads
2 New URLs

Useful Links
2 New Links

Coming soon...
Copy Protector
Sticky Toolbar

New Access KB Articles
10 new articles

Back Issues
#1-25 in a Zip

Link Partners
SSW

Free Subscription

SUBSCRIBE:
To subscribe or unsubscribe from this mailing list, select a choice from combo-box below, enter your e-mail address and click OK:


Have questions or comments?
Send them to me.

This newsletter may contain links to sites or files on the Internet which are owned and operated by third parties. AAD CONSULTING is not responsible for the content of or files from any such third-party site.

Any files are provided "as is", without warranty of any kind. AAD CONSULTING does not assume any liability for use or the consequences of use.

Access is a trademark of Microsoft Corporation.

©2001-2003
Anthony D'Ambra.
All rights reserved.

Top