Results 1 to 15 of 15
  1. #1
    Join Date
    Aug 2008
    Posts
    13

    Unanswered: Password security accounts and copying MDB file

    hello

    I have a database file M.mdb, which has usernames and pasword protection for users and different level of access. When I copy this file to another computer all these setting are gone or at least password and username are not asked for? How come.

    when setting this protection i had some problems with opening due to unknown password and then I noticed that all things work after delleting several files in MS Access directory or windows directory, dont know any more.

    I would like that the protection is together with the file so if anyone unauthorised copies the file also the protection goes with it.

    Best regards, Klemen

  2. #2
    Join Date
    Apr 2004
    Location
    metro Detroit
    Posts
    634
    How is the security implemented?

  3. #3
    Join Date
    Nov 2007
    Location
    Adelaide, South Australia
    Posts
    4,049
    password and username are not asked for? How come.
    The MDW should go with the database if users are required to login like that.

    I would like that the protection is together with the file so if anyone unauthorised copies the file also the protection goes with it.
    Normally, if you don't take the MDW file, people can't get ANY access to it... Whoever set up the security in the database didn't understand Access user-level security and has tried to secure the ADMIN user with a password instead of taking away the permissions from it.
    Owner and Manager of
    CypherBYTE, Microsoft Access Development Specialists.
    Microsoft Access MCP.
    And all around nice guy!


    "Heck it's something understood by accountants ... so it can't be 'that' difficult..." -- Healdem
    "...teach a man to code and he'll be frustrated for life! " -- georgev

  4. #4
    Join Date
    Aug 2008
    Posts
    13
    Thanks for your help. I am no expert, learned everything by myself and help on forums like this.


    first I did: :tools/security/accounts for users and groups
    I setup user accounts and groups
    (like peter, mark, frank, groups: writing, editing, reading)

    then i did: :tools/security/permissions for users and groups
    I setup separate permissions for each group similar to their names and i assigned names/users to different groups.

    After seting this up, I opened under each user name and setup password in :tools/security/accounts for ussers and groups unders secong folder - change of password

    THis way I think I should have password protection for acces to databse and permisions specific for each group?
    Am I wrong?

    When I transfered the file to another computer, there was no password asking at openeing.


    ANd then, after reading your post I tried to use:
    ::tools/security/wizzard for security on user level
    and there are completely new groups of permisions, I have to write usernames and passwords again,... I succeded to make user for writing and editing, but not the administrator equvivalent, so not able to do any changes any more.

    Please for some more help on this issue,

    TNX

  5. #5
    Join Date
    Nov 2007
    Location
    Adelaide, South Australia
    Posts
    4,049
    THis way I think I should have password protection for acces to databse and permisions specific for each group?
    Am I wrong?
    Nope. So far so good, but you need to also create an admin user that is not called admin, so that you can log into it and get design access. This has to be done BEFORE you remove permissions from the user called Admin.

    When I transfered the file to another computer, there was no password asking at openeing.
    As I said, the MDW file has to go with the database or Access will not have the extra users and automatically logs in as Admin. This is why you remove permissions from this special user. You open the database with a shortcut that specifies the workgroup file and Access prompts for a username and password.

    ANd then, after reading your post I tried to use:
    ::tools/security/wizzard
    OMG, I hope you had a good read up about it before running it....... this is not something you just want to go and use without a bit of understanding... and a GOOD BACKUP....

    I succeded to make user for writing and editing, but not the administrator equvivalent, so not able to do any changes any more.
    Otherwise this happens.

    I pray you have a backup of your database. If it's any comfort, I made the same mistake when I first looked at User Level Security, but I at least had the sense to do it on a copy of the database file... I hope you did too :\
    Owner and Manager of
    CypherBYTE, Microsoft Access Development Specialists.
    Microsoft Access MCP.
    And all around nice guy!


    "Heck it's something understood by accountants ... so it can't be 'that' difficult..." -- Healdem
    "...teach a man to code and he'll be frustrated for life! " -- georgev

  6. #6
    Join Date
    Aug 2008
    Posts
    13
    hello
    Thanks for your patience.

    I looked things on another computer and I noticed that there are no username and accounts info on them, so I guess this is connetcted to MDW file, which i didint copy on that computer.
    As far as admin permissions, I already created one user with all administrative permissions, and took away all permisions from "admin". I have to trie it on another computer if it works.
    Where do I get MDW file? under windows or access directory? File searchs doesnt seem to find it....

    And yes, I do always make a copy of file and rename it before I start playing arround with protection. - done mistakes before but on very starting stage, so no harm made, just cheap lesson for future

    Best regards,K

  7. #7
    Join Date
    Nov 2007
    Location
    Adelaide, South Australia
    Posts
    4,049
    Glad to hear you didn't lock yourself out of your database.

    What version of Access is it?
    Owner and Manager of
    CypherBYTE, Microsoft Access Development Specialists.
    Microsoft Access MCP.
    And all around nice guy!


    "Heck it's something understood by accountants ... so it can't be 'that' difficult..." -- Healdem
    "...teach a man to code and he'll be frustrated for life! " -- georgev

  8. #8
    Join Date
    Aug 2008
    Posts
    13
    Access 2002.
    the MDW file I found it only in cases I used the wizzard for protection. But using the wizzard is really messyy, becouse there are completely different groups than created in "ussername and groups" tool.

  9. #9
    Join Date
    Nov 2007
    Location
    Adelaide, South Australia
    Posts
    4,049
    So you found the MDW?

    It's either in C:\Program Files\Common Files\System or C:\Documents and Settings\<username>\Application Data\Microsoft\Access.
    Owner and Manager of
    CypherBYTE, Microsoft Access Development Specialists.
    Microsoft Access MCP.
    And all around nice guy!


    "Heck it's something understood by accountants ... so it can't be 'that' difficult..." -- Healdem
    "...teach a man to code and he'll be frustrated for life! " -- georgev

  10. #10
    Join Date
    Nov 2004
    Location
    out on a limb
    Posts
    13,692
    Provided Answers: 59
    when implenting Access workgroup security you have to associate (or join) a workgroups file. you can do this within Access itself (meaning that Access will try to open that security file when it starts up.
    you can also fdo this by specifying a workgroup file that a specific Access application should use when it starts up in a short cut.... have a google for Access command line switches

    personally I don't mind which version is used, as a belt and braces I normally put in some code that makes certain the specified user is a member of the required user group for the application. IE Im not prepared to accept that the Access security is good enough, the user must be a member oif the applications own usergroup(s) before the applciation will run. this stops people connecting to the application with suspect user privileges. I actively assign no or very limited privileges to anyone accessing the application with a username of "admin"

    always always make backups before tinkering with Access security
    I'd rather be riding on the Tiger 800 or the Norton

  11. #11
    Join Date
    Aug 2008
    Posts
    13
    On Computer1 where I created database file, usernames, set their passwords, permissions, created username with all permissions including administrative and took away all permisssions from admin I found the mdw files in directory as you said::\Documents and Settings\<username>\Application Data\Microsoft\Access.

    I copied all files from access directory together with protected mdb file to computer2. I can open mdb as it wasn protected, and there are no usernames that i created on computer1.

    It seem logicaly aranged to create accounts permissions, password and so on, but i just dont manage to make it workable. I guess I dont have the wright logics.

    Is there any tutorial, usermanual where I could read more about setting this things? I would really need straight forward guidlines: step1 do this; step2 do that; step3 go there; step4 press enter; step5 VOILA

    THank both of you for all help.

  12. #12
    Join Date
    Nov 2007
    Location
    Adelaide, South Australia
    Posts
    4,049
    Maybe you have multiple versions of Access installed and you are taking the wrong MDW file? Was there one in C:\Program Files\Common Files\System?

    Check the date of the MDW file to be sure you are taking the right one.

    If you copy the system.mdw file from your development computer and "overwrite" the destination computer's same file, the usernames and passwords should work. Just rename the system.mdw file on the target computer so that you can recover the standard system.mdw file if you need to.

    However, if you restrict the permissions of the admin user to modify objects, when you transport just the database alone, say, to a new computer, the database should be protected. If it's not, then something is wrong with the way you've set your permissions for your Access objects.
    Owner and Manager of
    CypherBYTE, Microsoft Access Development Specialists.
    Microsoft Access MCP.
    And all around nice guy!


    "Heck it's something understood by accountants ... so it can't be 'that' difficult..." -- Healdem
    "...teach a man to code and he'll be frustrated for life! " -- georgev

  13. #13
    Join Date
    Oct 2004
    Location
    Melbourne, Australia
    Posts
    201
    I undertstood that in the absence of a specific .mdw file (same name as the database) Access looks for a file called System.mdw stored somewhere in the Access area. If the original ,mdw file is missing, can this be used to gain entry to the database and later be copied to form a new .mdw file ?

  14. #14
    Join Date
    Aug 2008
    Posts
    13
    Well, now I partially solved prpblem. I guess it is the job computer, perhaps multiple versions pof access,installed before. WHen I set usernames and passsword on my home computer I was able to manually comyp .mdw files, transfer them to another computer and it worked. The file is system.mdw and is found under user/aplicationdata/windows/access. The file "filename".mdw wasn found.


    BUT, I am still working on database copy protectioin. Even if I take all permission from admin user the file can be copied and opened on computer without *.mdw file.

    Also tried with database password and it seems the same.

    WIll have to work on it.

    Thanks for all hel till now.

  15. #15
    Join Date
    Nov 2007
    Location
    Adelaide, South Australia
    Posts
    4,049
    I am still working on database copy protectioin. Even if I take all permission from admin user the file can be copied and opened on computer without *.mdw file.
    Then you haven't taken away enough rights from the Admin user.
    Owner and Manager of
    CypherBYTE, Microsoft Access Development Specialists.
    Microsoft Access MCP.
    And all around nice guy!


    "Heck it's something understood by accountants ... so it can't be 'that' difficult..." -- Healdem
    "...teach a man to code and he'll be frustrated for life! " -- georgev

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •