Administrator can't add users

[Linda]

I am the database administrator (Access even tells me so), yet I can't add
users (the selection is greyed out). I seem to have all rights, except the
open/run. I have all of the passwords - how do I make the necessary changes?

 

[Joan Wild]

What exactly does Access tell you? If it says you are the 'Admin' user,
that user shouldn't have any rights in the database. The naming of default
users and groups can be misleading in Access.

 

[Linda]

When I go to Tools, then Security and Select Workgroup Administrator, my name
appears. When I look in permissions, I see lnichols and that Users is
selected. I appear to have all rights, as does Admin, except for open/run.
General User only has Read Design and Read Data permission.

Do I already have security and don't see it?

 

[Joan Wild]

When I go to Tools, then Security and Select Workgroup Administrator, my
name
appears.

That dialog just tells you the default workgroup file (mdw), not a username.

When I look in permissions, I see lnichols and that Users is

selected.

The Users Group is common to all mdw files, so normally doesn't have any
permissions. If you have a properly secured mdb, then there should be other
groups (besides Admins and Users). It sounds as though someone just went in
and started added usernames to the standard mdw that ships with Access. In
other words, it isn't secured at all. Are there any other Groups and/or
Users when you look at Tools, Security, Accounts?

Try hitting Ctrl-G and typing
?dbEngine.SystemDB

What is the path/filename returned by that?

I appear to have all rights, as does Admin, except for open/run.
General User only has Read Design and Read Data permission.

Do I already have security and don't see it?

I don't think you do. If you start Access and create a new mdb, can you
then use File, Get External Data and import all the objects from your mdb?
If so, then no, you had/have no security.

To learn more...
Security FAQ
http://support.microsoft.com/?id=207793

Security Whitepaper
http://support.microsoft.com/?id=148555

Although the whitepaper is old, it contains information to help you
understand security.

I've also outlined the detailed steps at
www.jmwild.com/AccessSecurity.htm

 

[Linda]

I read (and re-read) the Access 95 Security papers and finally have a better
understanding of roles and responsibilities. I am still confused, though, on
why, if Access recognizes owners automatically, why it doesn't recognize me,
as I am the ONLY person who has had any contact with the database and all of
the objects. I changed ownership of all tables, etc., to lnichols; however,
what I don't understand is how to change from being signed in as "admin" to
"lnichols."
lnichols is a member of Admins and Users, and so I believe has 'super powers.'

Thanks for your help and patience!!

Linda

 

[Joan Wild]

In order to get the login prompt to show, you need to assign a password to
the standard 'Admin' user.

Access ships with security turned 'on' for all databases. It uses a
workgroup file named system.mdw and silently logs you in as a user named
'Admin'. Since this user is common to all mdw files, anyone can use any
'unsecured' mdb.

If you want the login to show up, you assign a password to the Admin user.

However, it only makes sense to do this if you are using a new workgroup
file (i.e. not the standard system.mdw that ships with Access).

It's important to follow every step when securing a mdb.