Access 2003 and Active Directory

[HighlanderMom]

I am fairly certain that I know the answer to this, but just in case I'm
missing something (it's been known to happen).

Is it possible to set up permissions to specific Access 2003 forms using
Active Directory groups?

Thanks,

 

[Tom van Stiphout]

On Mon, 10 Dec 2007 11:02:00 -0800, HighlanderMom

Yes, with a bit of code.
In the Form_Open write:
if not IsMemberOfGroup("SomeGroup") then
Cancel = True

This will cancel the opening of the form if the user is not a member.

Left to do is to write the function IsMemberOfGroup, which takes a
group name and checks with Active Directory if the current user (get
from Windows API call (http://www.mvps.org/access/api/api0008.htm)) is
a member of the given group. There are plenty of examples on the net
on how to do that.

-Tom.

 

[Tony Toews [MVP]]

I am fairly certain that I know the answer to this, but just in case I'm
missing something (it's been known to happen).

Is it possible to set up permissions to specific Access 2003 forms using
Active Directory groups?

I did some work with Active Directory a while back. It was quite
ugly. I took notes of the sites I visited figuring things out but
have never taken the time to organize the links. So the following is
a complete unorganized dump.

Internet resources

Following might do everything I want.
http://groups.google.ca/groups?hl=e...=off&q=adsi+search+organizationalunit&spell=1

Programmatically Set NTFS File System Folder Permissions

Enumerating Local Groups and Descriptions with NetLocalGroupEnum
Pasted from
<http://vbnet.mvps.org/code/network/netlocalgroupenumdesc.htm>

Enumerating Members of a Group with NetLocalGroupGetMembers
Pasted from
<http://vbnet.mvps.org/code/network/netgocalgroupgetmembers.htm>

Xcacls.exe
Pasted from
<http://support.microsoft.com/default.aspx?scid=KB;EN-US;825751>

How To Use High-Level Access Control APIs from Visual Basic
Pasted from
<http://support.microsoft.com/default.aspx?scid=kb;EN-US;295004>


http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/adsi/iadsgroup.asp

ldap
http://msdn.microsoft.com/library/d...ry/en-us/dnanchor/html/anch_activediradsi.asp

Active Directory Service Interfaces Quick-start Tutorials
Pasted from
<http://msdn.microsoft.com/library/en-us/adsi/adsi/adsi_quick-start_tutorials.asp?frame=true>


IADsAccessControlEntry
Pasted from
<http://msdn.microsoft.com/library/en-us/adsi/adsi/iadsaccesscontrolentry.asp?frame=true>

An ADSI Primer, Part 11: More on Scripting Permissions and Auditing
(Windows Scripting though)
Pasted from
<http://www.windowsitpro.com/WindowsScripting/Article/ArticleID/7456/7456.html>


HOWTO: Use ADsSecurity.dll to Remotely Add Local Account ACEs to an
NTFS File
Pasted from
<http://support.microsoft.com/default.aspx?scid=kb;en-us;Q285998>

How To Use ADSI to Set Automatic Inheritance of File/Folder
Permissions
Pasted from <http://support.microsoft.com/kb/266461/EN-US/>

http://groups.google.ca/groups?q=gr...ff&[email protected]&rnum=10

Various constants are at the following:
http://www.serverwatch.com/tutorials/article.php/1476721

Security and Access Rights
http://msdn.microsoft.com/library/d...leio/base/file_security_and_access_rights.asp


How To Use ADSI to Set Automatic Inheritance of File/Folder
Permissions
Pasted from
<http://support.microsoft.com/default.aspx?scid=kb;en-us;266461>
VBScript recursive changing of subfolders


IADsAccessControlEntry Property Methods
http://msdn.microsoft.com/library/d...i/iadsaccesscontrolentry_property_methods.asp


HOWTO: Use ADsSecurity.dll to Remotely Add Local Account ACEs to an
NTFS File
Pasted from
<http://support.microsoft.com/default.aspx?scid=kb;en-us;Q285998>

How To Use ADsSecurity.dll to Add an Access Control Entry to an NTFS
Folder
Pasted from
<http://support.microsoft.com/default.aspx?scid=kb;en-us;Q279682>

Tony
--
Tony Toews, Microsoft Access MVP
Please respond only in the newsgroups so that others can
read the entire thread of messages.
Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/

 

[HighlanderMom]

Thank you very much. Your answers were a big help.
Connie