creating an MDW file - going wrong somehow 1

[micky500970]

Hi,

I have finished my DB project and now want to protect it by creating a workgroup file. I have put the admin user into the user group and created a new admin user. I have also removed the necessary permissions from admin and the user group. I join the newly created MDW and it works great. However, when I launched my DB from another computer you get in straight away, not even asked for a password. I understand that their version of access points to the system.mdw file but I have removed any admin permissions from my MDW file, does the system.mdw over-rule my custom MDW file?

Any advice on where i am going wrong would be appreciated

Mick

 

[MoLaker]

You've missed a step somewhere. But, assuming you gave the user ADMIN a password and have removed the user ADMIN from the ADMINS group and removed all appropriate permissions from ADMIN and the USERS group, chances are the user ADMIN is still the DB owner. You can change ownership of the objects in the database, but I don't think you can change ownership of the database with the security tool. Possibly the DB owner is overriding all other security settings.

To change the owner to your new admin user, create a new empty DB while logged in as this new administrator. This will make your new administrator the DB owner of this new DB. Then import all the objects from your original database into this new one. Recheck permissions for ADMIN and the USERS workgroup and you should be good to go.

 

[FancyPrairie]

I don't think you have your database secured correctly. I don't join workgroups, rather I create a new workgroup for each of my databases and store the new mdw file on the server where everyone has access to it. Then I create a shortcut on their desktop whose properties look like this:

"\\path\msaccess.exe" "\\path\YourDbName.mdb" /wrkgrp "\\path\YourWorkgroup.mdw"

Anyway, here are the steps for creating a workgroup. These are the steps I use in Access 2000.

I use the Security Wizard to secure my database. Once secured, I go into security and create my groups and users. I assign rights to the groups I created (I assign no rights to the individual users). Then I assign users to the appropriate groups.

Here's the steps involved in creating a workgroup file for the front-end database. You will need to follow the same steps for the back-end database.

Be sure to backup the System.mdw file before doing this and also backup your FE and BE databases.. That way, if you mess up, you can easily start over.


1. Backup your System.mdw file in case you mess up (this is the one that ships with Microsoft)
2. Open your database
3. Add a new user (i.e. MyAdminsUser) (This user represents the Administrator of the project and, as such, will have all rights to the database)
4. Assign a password to user Admin (User Admin is the default user for unsecured databases)
(By assigning a password for Admin, you will be forced to login to Access everytime you open a database. Don't worry about, will take care of that later.)
5. Exit Access
6. Restart you database (Access will ask you to login. Login as the new user (no password)
7. Start the Security Wizard
8. In the first screen check the box entitled "Create a new workgroup information file"
9. Select Next
10. In the second screen, select Browse (located to the right of the file name field). At this point you will name your workgroup file (I would suggest putting your new workgroup file in a location that everyone will access (i.e. a network server))
11. Select the check box entitled "I want to create a shortcut to open my secured database"
12. Select Next
13. On the third screen, simply select Next (You'll want to secure all existing database objects)
14. On the fourth screen, simply select next (Don't select any groups to be included in your workgroup information file)
15. On the fifth screen, select the check box entitled "No, the Users group should not have any permissions"
16. Select Next
17. The sixth screen asks you to list the names of users you want added to this workgroup. The only one you want included is the new user you created earlier. Add the new user to the list. By default, your network name is shown, remove it. The new user should be the only one in the list.
18. Select Next
19. On the seventh screen, select the check box entitled "Select a user and assign the user to groups". The field entitled "Group or User Name" should contain the name of the new user you created earlier. And the Group Admins must be checked.
20. Select Next
21. Select Finish

You now have a secured workgroup. Now, login in using the new user's name and create your groups and users and assign rights to them.
You'll need to do the above steps for your back-end database also.

When you are done, you will want to remove the password for user Admin in the System.mdw file. So, launch access and open an unsecured database, it will ask you to enter your name and password. Enter "Admin" and the password you assigned to Admin in step 4 above. Once you are into the database, remove the password for user Admin.

 

[micky500970]

Thanks for your help. It now works fine

Mick