Join a Workgroup

[Guest]

I have been having problems with my workgroup. Orginnally I had three
databases on a server and I worked out of one workgroup called Secure1. Once
I made the workgroup Secure1 I created a shortcut that went through Secure1
for each database that everyone in our office had to use to get into the
databases. However, after a migration of our database to a new server I
began having problems. Some people were still able to log into any of the
databases with no problems. However others would get an error message that
the database was locked if someone else had logged in though the shortcut.
If there was an icon for Secure1 with a lock on it these people could not log
in until it was gone. I checked and everthough they had the same permission
of some other who could log on anytime they continue to get the message that
the database was locked until everyone got out and the Secure1 icon with the
lock was gone. I then went back in and created a new workgroup (Security)
for the main database and this seem to resolve my prolem with the error
message that some were getting that the database was lock. However, I'm
having problems trying to get the other two databases in the same workgroup
(Security). Eventhought I open one of the other databases up and go to
Security then to Join Workgroup if I try and go back in I get a message that
I don't have permission. I'm new to using the security feature in Access and
would appreciate any help.

 

[Joan Wild]

There is more to securing a database than creating a workgroup and joining
it. You must follow a set of steps exactly; missing one thing can mean the
mdb isn't secure. From your description, the move to the new server didn't
cause the problem, it just proved that the databases never were secured
properly.

See www.jmwild.com/AccessSecurity.htm for a detailed set of steps.

The 'database was locked' messages are not due to Access security, but are
because the Windows permissions on the new server aren't set correctly. All
users need modify permissions on the folder where the mdb is located.

 

[Guest]

I have followed your Step by Step instructions for Access 2002/2003 Security.
I now am try to split my database by using the instructions you provided in
Splitting a Secure Database. I made a copy of my secure database, however
when I attempt to open it I get a message that "You do not have the necessary
permissions to use the <name> object. Have your system administrator or the
person who created this object establish the appropriate permissions for you.
(Error 3033)
Even when I click on the icon for the orginal database I get the same
message. The only way I can get into the database is by going through the
shortcut created by the Security Wizard, which is what I wanted. I check my
security account and I'm in the Admins and user group. I'm also shown as the
owner of all the objects. What have I done wrong? Also, I still have an
Account for Admin but is is only assigned to the user group. If this
correct? Also, should I keep this account and if so do I need to give it a
password?

 

[Joan Wild]

Everything sounds like it is working correctly. You need to use the desktop
shortcut in order to open your secure database. You are joined by default
to system.mdw, the workgroup that ships with Access. The wizard created a
desktop shortcut to start your mdb. As you've found, opening your secure
mdb via a double-click in Windows explorer doesn't work. This is because
you are using system.mdw and no one in that workgroup has permission to use
the mdb. You have to be using your secure mdw in order to open it. The
desktop shortcut includes the /wrkgrp switch, which over-rides the default
system.mdw and uses the secure mdw.

So in order to split it, you'd open via the shortcut, and then hit Ctrl-O to
open another mdb. The shortcut /wrkgrp switch uses the secure mdw *for that
session* of Access, so any mdb you open during the session is using that
mdw.

The accounts and memberships sound all correct to me.
'You' are in the Admins and Users Groups - all users have to be a member of
the Users Group, you can't change that. But the Users Group doesn't have
any permissions.
'You' are the owner of everything - correct.
'Admin' is only a member of the Users Group - correct
'should I keep this account'? Yes, in fact you can't delete it. It is a
member of the Users Group. The Users Group doesn't have any permissions,
and the Admin user doesn't own anything, so everything is as it should be.
'Do I need to give it a password' - it already has a password. This is what
causes the login dialog to show up. If the Admin user doesn't have a
password, the dialog doesn't appear.