Access Database connected to AD letting all users in!!!

[mnashed]

Hello everyone, I have a problem i have a access database that has been coded to connect to active directory for user authentication. What i need to do is i need to be able to set up a group so only that group has access to the particular resource. Is that possible?

Mark

 

[JerryKlmns]

Your options are:
A. Create a folder where your mdb is and grant Read Execute Delete Write permissions to the users you want
B. Password protect the mdb file
C. Create user level security for the mdb file

I would prefer the following order
[ul]
[li]A + C[/li]
[li]Just A[/li]
[li]Just C [/li]
[li]A + B[/li]
[/ul]


Option B is easy and fast opposed to option C.
Option C is stronger opposed to option B.

 

[acent]

Personally, I would take up JerryKlmns' idea of options A & B, but rather than granting user level security on that folder, I would make a group in AD and then grant that group the security clearance. Group security is easier to maintain than user security.

If the database is already reading AD, you could probably do the coding in Access to read the group memberships, though I don't know how. I would still use the folder security and not rely totally on Access.

Just a thought.

"If it's stupid but works, it isn't stupid."
-Murphy's Military Laws

 

[hwkranger]

My suggestion is that this probably isn't the right tool for the job. One of my favorite posts is:

http://weblogs.asp.net/alex_papadimoulis/archive/2005/05/25/408925.aspx

Think carefully before proceeding with what you are doing. My suggestion is that if you want to manage user groups such as this, you should be using SQL Server.

Also - consider the fact that perhaps your application should handle validation and that Access is a poor tool at best for doing this.