Admin help

[Guest]

Hi guys,

I need help. I have removed the user Admin from the Admin group in my DB
using my custom MDW. I have removed all permissions from user and admin
GROUPS and admin USERS. I (superAdmin) am the owner of the DB and all
objects. All security features work when I open my DB using my custom MDW.
But I can still open the DB using the system MDW. Is that possible? I can't
do anything to any objects but i thought the DB permissions would bar me from
opening the DB even with the system MDW. Am I missing something?

 

[Joan Wild]

Hi guys,

I need help. I have removed the user Admin from the Admin group in my
DB using my custom MDW. I have removed all permissions from user and
admin GROUPS and admin USERS.

There is a Users Group, Admins Group, and an Admin User in every mdw
created. (I can't really make sense of what you wrote above).

You need to remove permissions for the Users Group and the Admin User.
You need to ensure that neither the Users Group nor the Admin User own any
objects.
You do not need to remove permissions from the Admins Group.
You need to remove the Admin User from the Admins Group.

I (superAdmin) am the owner of the DB
and all objects.

Is superAdmin user a member of the Admins Group?

All security features work when I open my DB using
my custom MDW. But I can still open the DB using the system MDW. Is
that possible?

How did you create your custom mdw?

I can't do anything to any objects but i thought the
DB permissions would bar me from opening the DB even with the system
MDW. Am I missing something?

Your sig said Access 2000 - did you run the security wizard (you shouldn't
in 2000)?

 

[Guest]

Hi. Thanks for responding. Let me try and make myself clearer. I know what
sounds informative to me might make no sense to someone else. As a
reference, I followed all the steps in Jack Macdonalds security steps.

1. I created a new workgroup using wrkgrp.exe and open DB with it.
2. I created password for user admin, create new user (me), added (me) to
admin group and remove admin user from admin group.
3. I login as me and create password.
4. I create AppUser group and SuperAdmin group.
5. I create new DB for which I (user) am the owner and of all objects.
6. I remove ALL permissions for the Admin Group, User group, And Admin
user.(giving SuperAdmin group all rights and AppUser Group some, and remove
all user level permissions).

Now when I log into my DB using my pc default system.mdw (silently as user
admin), I should be locked out b/c permissions are saved with the db...
right? However I can open the db. Did I miss something?

Thanks for all your help!

 

[Joan Wild]

1. I created a new workgroup using wrkgrp.exe and open DB with it.

How are you sure you were using your new workgroup when you opened the mdb?
(It's possible you were still using system.mdw).

2. I created password for user admin, create new user (me), added
(me) to admin group and remove admin user from admin group.
3. I login as me and create password.
4. I create AppUser group and SuperAdmin group.
5. I create new DB for which I (user) am the owner and of all objects.
6. I remove ALL permissions for the Admin Group, User group, And Admin
user.(giving SuperAdmin group all rights and AppUser Group some, and
remove all user level permissions).

Just an aside, it isn't necessary to remove permissions for the Admins
Group, but no harm. Did you also ensure that you removed permission on the
database object? It's not in plain view in earlier versions.

 

[Guest]

I always check what .mdw file i use when i log in using "?dbengine.systemdb"
in the intermediate window.

I have to check but i am pretty sure only SuperAdmin group has permission to
the database object.

Thanks for your input. I will keep working on it till I figure it out.