PC Review


Reply
Thread Tools Rate Thread

Access security hole?

 
 
Neil W
Guest
Posts: n/a
 
      23rd Apr 2010
Lets say I apply "password" to northwind.mdb. When I run MSAccess, I enter
"password" at the prompt and I am in.

Now another person starts a second instance of MSAccess. Since
Northwind.mdb is already opened in one instance of Access, they can connect
to northwind.mdb from the second instance without having to know or enter
the password!

Is there any way of preventing this?

Thanks.




 
Reply With Quote
 
 
 
 
Gina Whipp
Guest
Posts: n/a
 
      24th Apr 2010
Neil,

Not sure how you set up the security but that shouldn't happen. Have a look
at...

http://www.jmwild.com/

--
Gina Whipp
2010 Microsoft MVP (Access)

"I feel I have been denied critical, need to know, information!" - Tremors
II

http://www.regina-whipp.com/index_files/TipList.htm

"Neil W" <(E-Mail Removed)> wrote in message
news:#(E-Mail Removed)...
Lets say I apply "password" to northwind.mdb. When I run MSAccess, I enter
"password" at the prompt and I am in.

Now another person starts a second instance of MSAccess. Since
Northwind.mdb is already opened in one instance of Access, they can connect
to northwind.mdb from the second instance without having to know or enter
the password!

Is there any way of preventing this?

Thanks.

 
Reply With Quote
 
Neil W
Guest
Posts: n/a
 
      26th Apr 2010
Thanks for the reply, but can you be more specific? Is there a specific
article or tip I should look at?


"Gina Whipp" <(E-Mail Removed)> wrote in message
news:B8BE09F7-8E41-4BA9-9D9B-(E-Mail Removed)...
> Neil,
>
> Not sure how you set up the security but that shouldn't happen. Have a
> look
> at...
>
> http://www.jmwild.com/
>
> --
> Gina Whipp
> 2010 Microsoft MVP (Access)
>
> "I feel I have been denied critical, need to know, information!" - Tremors
> II
>
> http://www.regina-whipp.com/index_files/TipList.htm
>
> "Neil W" <(E-Mail Removed)> wrote in message
> news:#(E-Mail Removed)...
> Lets say I apply "password" to northwind.mdb. When I run MSAccess, I
> enter
> "password" at the prompt and I am in.
>
> Now another person starts a second instance of MSAccess. Since
> Northwind.mdb is already opened in one instance of Access, they can
> connect
> to northwind.mdb from the second instance without having to know or enter
> the password!
>
> Is there any way of preventing this?
>
> Thanks.
>



 
Reply With Quote
 
Gina Whipp
Guest
Posts: n/a
 
      27th Apr 2010
Neil,

Try starting here...

http://www.ltcomputerdesigns.com/Security.htm

--
Gina Whipp
2010 Microsoft MVP (Access)

"I feel I have been denied critical, need to know, information!" - Tremors
II

http://www.regina-whipp.com/index_files/TipList.htm

"Neil W" <(E-Mail Removed)> wrote in message
news:eR#(E-Mail Removed)...
Thanks for the reply, but can you be more specific? Is there a specific
article or tip I should look at?


"Gina Whipp" <(E-Mail Removed)> wrote in message
news:B8BE09F7-8E41-4BA9-9D9B-(E-Mail Removed)...
> Neil,
>
> Not sure how you set up the security but that shouldn't happen. Have a
> look
> at...
>
> http://www.jmwild.com/
>
> --
> Gina Whipp
> 2010 Microsoft MVP (Access)
>
> "I feel I have been denied critical, need to know, information!" - Tremors
> II
>
> http://www.regina-whipp.com/index_files/TipList.htm
>
> "Neil W" <(E-Mail Removed)> wrote in message
> news:#(E-Mail Removed)...
> Lets say I apply "password" to northwind.mdb. When I run MSAccess, I
> enter
> "password" at the prompt and I am in.
>
> Now another person starts a second instance of MSAccess. Since
> Northwind.mdb is already opened in one instance of Access, they can
> connect
> to northwind.mdb from the second instance without having to know or enter
> the password!
>
> Is there any way of preventing this?
>
> Thanks.
>


 
Reply With Quote
 
Arvin Meyer [MVP]
Guest
Posts: n/a
 
      28th Apr 2010
Neil, there's no way that it can be diagnosed over the Internet. Try reading
these articles and following them exactly:

Security FAQ
http://support.microsoft.com/support...ent/secfaq.asp

Lynn Trapp's summarization:
http://www.ltcomputerdesigns.com/The10Steps.htm

KB articles:
http://support.microsoft.com/default...;en-us;q165009
http://download.microsoft.com/downlo...-us/secfaq.exe
http://support.microsoft.com/default.aspx?kbid=325261

Joan Wild's articles:
http://www.jmwild.com/security02.htm
http://www.jmwild.com/security97.htm
http://www.jmwild.com/SecureNoLogin.htm
http://www.jmwild.com/Unsecure.htm
--
Arvin Meyer, MCP, MVP
http://www.datastrat.com
http://www.accessmvp.com
http://www.mvps.org/access


"Neil W" <(E-Mail Removed)> wrote in message
news:eR%(E-Mail Removed)...
> Thanks for the reply, but can you be more specific? Is there a specific
> article or tip I should look at?
>
>
> "Gina Whipp" <(E-Mail Removed)> wrote in message
> news:B8BE09F7-8E41-4BA9-9D9B-(E-Mail Removed)...
>> Neil,
>>
>> Not sure how you set up the security but that shouldn't happen. Have a
>> look
>> at...
>>
>> http://www.jmwild.com/
>>
>> --
>> Gina Whipp
>> 2010 Microsoft MVP (Access)
>>
>> "I feel I have been denied critical, need to know, information!" -
>> Tremors
>> II
>>
>> http://www.regina-whipp.com/index_files/TipList.htm
>>
>> "Neil W" <(E-Mail Removed)> wrote in message
>> news:#(E-Mail Removed)...
>> Lets say I apply "password" to northwind.mdb. When I run MSAccess, I
>> enter
>> "password" at the prompt and I am in.
>>
>> Now another person starts a second instance of MSAccess. Since
>> Northwind.mdb is already opened in one instance of Access, they can
>> connect
>> to northwind.mdb from the second instance without having to know or enter
>> the password!
>>
>> Is there any way of preventing this?
>>
>> Thanks.
>>

>
>



 
Reply With Quote
 
Rick Brandt
Guest
Posts: n/a
 
      29th Apr 2010
Stewart Berman wrote:

> I did not see any information on how to secure an Access 2007 accdb or
> accde database.
>
> Microsoft has chosen to remove workgroup security for accdb and accde
> files. So you now have to roll your own.
>
> Do you have any information on securing the current MS Access database
> structure? In particular how do you secure the database against an
> authorized user -- someone with read/write access to the folder the
> database is in and who has the password -- from poking around in it?


You can't. If you want security that applies to people allowed to open your
file then revert to MDB format or use a server database like SQL Server.
 
Reply With Quote
 
Stewart Berman
Guest
Posts: n/a
 
      29th Apr 2010
I did not see any information on how to secure an Access 2007 accdb or accde
database.

Microsoft has chosen to remove workgroup security for accdb and accde files.
So you now have to roll your own.

Do you have any information on securing the current MS Access database
structure? In particular how do you secure the database against an
authorized user -- someone with read/write access to the folder the database
is in and who has the password -- from poking around in it?

"Arvin Meyer [MVP]" <(E-Mail Removed)> wrote:

>Neil, there's no way that it can be diagnosed over the Internet. Try reading
>these articles and following them exactly:
>
>Security FAQ
>http://support.microsoft.com/support...ent/secfaq.asp
>
>Lynn Trapp's summarization:
>http://www.ltcomputerdesigns.com/The10Steps.htm
>
>KB articles:
>http://support.microsoft.com/default...;en-us;q165009
>http://download.microsoft.com/downlo...-us/secfaq.exe
>http://support.microsoft.com/default.aspx?kbid=325261
>
>Joan Wild's articles:
>http://www.jmwild.com/security02.htm
>http://www.jmwild.com/security97.htm
>http://www.jmwild.com/SecureNoLogin.htm
>http://www.jmwild.com/Unsecure.htm

 
Reply With Quote
 
Neil W
Guest
Posts: n/a
 
      30th Apr 2010
Thanks. Can RevokeActiveObject be used to stop another program from doing a
GetObject on that Access database?

"Rick Brandt" <(E-Mail Removed)> wrote in message
news:hrd3eh$qsk$(E-Mail Removed)...
> Stewart Berman wrote:
>
>> I did not see any information on how to secure an Access 2007 accdb or
>> accde database.
>>
>> Microsoft has chosen to remove workgroup security for accdb and accde
>> files. So you now have to roll your own.
>>
>> Do you have any information on securing the current MS Access database
>> structure? In particular how do you secure the database against an
>> authorized user -- someone with read/write access to the folder the
>> database is in and who has the password -- from poking around in it?

>
> You can't. If you want security that applies to people allowed to open
> your
> file then revert to MDB format or use a server database like SQL Server.



 
Reply With Quote
 
Arvin Meyer [MVP]
Guest
Posts: n/a
 
      3rd May 2010
You can build an ACCDE, which keeps them from idly poking around the
objects, but not the data.
--
Arvin Meyer, MCP, MVP
http://www.datastrat.com
http://www.accessmvp.com
http://www.mvps.org/access


"Stewart Berman" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I did not see any information on how to secure an Access 2007 accdb or
>accde
> database.
>
> Microsoft has chosen to remove workgroup security for accdb and accde
> files.
> So you now have to roll your own.
>
> Do you have any information on securing the current MS Access database
> structure? In particular how do you secure the database against an
> authorized user -- someone with read/write access to the folder the
> database
> is in and who has the password -- from poking around in it?
>
> "Arvin Meyer [MVP]" <(E-Mail Removed)> wrote:
>
>>Neil, there's no way that it can be diagnosed over the Internet. Try
>>reading
>>these articles and following them exactly:
>>
>>Security FAQ
>>http://support.microsoft.com/support...ent/secfaq.asp
>>
>>Lynn Trapp's summarization:
>>http://www.ltcomputerdesigns.com/The10Steps.htm
>>
>>KB articles:
>>http://support.microsoft.com/default...;en-us;q165009
>>http://download.microsoft.com/downlo...-us/secfaq.exe
>>http://support.microsoft.com/default.aspx?kbid=325261
>>
>>Joan Wild's articles:
>>http://www.jmwild.com/security02.htm
>>http://www.jmwild.com/security97.htm
>>http://www.jmwild.com/SecureNoLogin.htm
>>http://www.jmwild.com/Unsecure.htm



 
Reply With Quote
 
Stewart Berman
Guest
Posts: n/a
 
      3rd May 2010
"Arvin Meyer [MVP]" <(E-Mail Removed)> wrote:

>You can build an ACCDE, which keeps them from idly poking around the
>objects, but not the data.


Accde only protects code. All of the other objects are unprotected.
 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
UAC security hole? Steve Thackery Windows Vista Security 1 28th Sep 2008 11:56 AM
Web Access Security Hole? =?Utf-8?B?R3JlZ29yaXVz?= Microsoft Outlook Installation 1 25th May 2005 03:10 AM
DWT Security Hole? Ken Microsoft Frontpage 2 23rd Oct 2004 09:47 AM
ie security hole Bill T.61 Windows XP Security 1 28th Sep 2004 09:36 AM
SECURITY HOLE IN IE6...what do I do??? =?Utf-8?B?TWlTdCppUXVF?= Windows XP Internet Explorer 1 12th Apr 2004 12:42 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 08:31 PM.