What security is applied in this Access database?

[Lin]

We have a third party application which is not supported
for long from the vendor. It is written by VB(or C) in
front and Access 95/97 on the back. The Access database is
located in our network. We are developing a Extranet to
allow user insert/update the data in this database. I need
the connection to run/open from ASP.net scripts. I also
need the permission on a few tables to insert/update.

I am able to view/open the database by Access 2000 with
message "You can't make change to the database objects in
the database. This database was created in an earlier
version of Microsoft Access." There was no logon username
password required.
I have tried following:
1. added a username and personal ID through the VB
frontend designed by the application, I got the full right
to insert/update the database in VB front. I still can't
get permission to connect the database through my ASP
code.
2.converted it to Access 2000, I still got same message
when open as "This database was created in an earlier
version of Microsoft Access."
3. imported all the tables/queries to a new database, add
a new user into both users and admins group. Admins group
has full permissions on open/run database and tables. I
got message like "The Microsoft Jet database engine cannot
open the file '(unknown)'. It is already opened
exclusively by another user, or you need permission to
view its data. "

Is this acturally a security issue? What kind of security
this database may have if it is not password protected and
I can view all the data?
Thanks

 

[Alick [MSFT]]

Hi Lin,

It is hard to troubleshooting the issue since the application is not
supported and we are unable to view the front side application code; from
the backend database file message, I don't think it is security issue; for
Access has two kind of security, the first is database security which can
be set by tools->Security->Set database password; second is workgroup
security, since you aren't prompted to enter user/password, the workgroup
file (mdw) currently it is using is not "secured"; to view the mdw file it
uses by default, open the Access database and click
tools->security->Workgroup administrators. Tough it is possible the
database is originally secured by workgroup file (mdw); it doesn't work if
we use other workgroup file to open the database.

One possible cause is that database file is corrupt, we can compact your
database using JetComp.exe utitliy.

ACC2000: Jet Compact Utility Available in Download Center
http://support.microsoft.com/support/kb/articles/Q273/9/56.ASP

Please feel free to reply to the threads if you have any concerns or
questions.




Sincerely,

Alick Ye, MCSD
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.



--------------------
| Content-Class: urn:content-classes:message
| From: "Lin" <[email protected]>
| X-Tomcat-NG: microsoft.public.access.security
|
| We have a third party application which is not supported
| for long from the vendor. It is written by VB(or C) in
| front and Access 95/97 on the back. The Access database is
| located in our network. We are developing a Extranet to
| allow user insert/update the data in this database. I need
| the connection to run/open from ASP.net scripts. I also
| need the permission on a few tables to insert/update.
|
| I am able to view/open the database by Access 2000 with
| message "You can't make change to the database objects in
| the database. This database was created in an earlier
| version of Microsoft Access." There was no logon username
| password required.
| I have tried following:
| 1. added a username and personal ID through the VB
| frontend designed by the application, I got the full right
| to insert/update the database in VB front. I still can't
| get permission to connect the database through my ASP
| code.
| 2.converted it to Access 2000, I still got same message
| when open as "This database was created in an earlier
| version of Microsoft Access."
| 3. imported all the tables/queries to a new database, add
| a new user into both users and admins group. Admins group
| has full permissions on open/run database and tables. I
| got message like "The Microsoft Jet database engine cannot
| open the file '(unknown)'. It is already opened
| exclusively by another user, or you need permission to
| view its data. "
|
| Is this acturally a security issue? What kind of security
| this database may have if it is not password protected and
| I can view all the data?
| Thanks
|

 

[Lin]

Thanks, Alick,
I think you are right. This database has no security
protected. The logon/password prompted after I have
created a workgroup file by myself. However, this is just
varify if the database HAD workgroup security. By now, I
don't know how to delete this workgroup information so
that I can get back to the original security of the
datbase?

Thanks.

 

[Lin]

HI,
I downloaded the JetComp.exe. When I set a copy of my
original database as a source database to compact and an
empty database as a destination, I got a message "Can't
compact this version of the database.
What version of the database which should be?

Thanks.
Lin

 

[Alick [MSFT]]

Hi Lin,

Most likely the database is corrupt, you may have to rely on the recent
backup file; if you did not backup the database unfortunately, you may need
to consult other third-party vendors. The following companies are known to
specialize in the data recovery area. You may be able to find additional
companies that specialize in this area by searching on the Internet.

Action Front Data Recovery Labs
http://www.actionfront.com/index_us_home.asp

OfficeRecovery http://www.officerecovery.com/access/index.htm

PK Solutions http://www.pksolutions.com

Note: This response contains a reference to a third-party World Wide Web
site. Microsoft is providing this information as a convenience to you.
Microsoft does not control these sites and has not tested any software or
information found on these sites; therefore, Microsoft cannot make any
representations regarding the quality, safety, or suitability of any
software or information found there. There are inherent dangers in the use
of any software found on the Internet, and Microsoft cautions you to make
sure that you completely understand the risk before retrieving any software
from the Internet.



Sincerely,

Alick Ye, MCSD
Product Support Services
Microsoft Corporation
Get Secure! - <www.microsoft.com/security>

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Content-Class: urn:content-classes:message
| From: "Lin" <[email protected]>
| X-Tomcat-NG: microsoft.public.access.security
|
| HI,
| I downloaded the JetComp.exe. When I set a copy of my
| original database as a source database to compact and an
| empty database as a destination, I got a message "Can't
| compact this version of the database.
| What version of the database which should be?
|
| Thanks.
| Lin
|
|
| >-----Original Message-----
| >Hi Lin,
| >
| >It is hard to troubleshooting the issue since the
| application is not
| >supported and we are unable to view the front side
| application code; from
| >the backend database file message, I don't think it is
| security issue; for
| >Access has two kind of security, the first is database
| security which can
| >be set by tools->Security->Set database password; second
| is workgroup
| >security, since you aren't prompted to enter
| user/password, the workgroup
| >file (mdw) currently it is using is not "secured"; to
| view the mdw file it
| >uses by default, open the Access database and click
| >tools->security->Workgroup administrators. Tough it is
| possible the
| >database is originally secured by workgroup file (mdw);
| it doesn't work if
| >we use other workgroup file to open the database.
| >
| >One possible cause is that database file is corrupt, we
| can compact your
| >database using JetComp.exe utitliy.
| >
| >ACC2000: Jet Compact Utility Available in Download Center
| >http://support.microsoft.com/support/kb/articles/Q273/9/56
| .ASP
| >
| >Please feel free to reply to the threads if you have any
| concerns or
| >questions.
| >
| >
| >
| >
| >Sincerely,
| >
| >Alick Ye, MCSD
| >Microsoft Online Partner Support
| >
| >Get Secure! - www.microsoft.com/security
| >This posting is provided "as is" with no warranties and
| confers no rights.
| >
| >
| >
| >--------------------
| >| Content-Class: urn:content-classes:message
| >| From: "Lin" <[email protected]>
| >| X-Tomcat-NG: microsoft.public.access.security
| >|
| >| We have a third party application which is not
| supported
| >| for long from the vendor. It is written by VB(or C) in
| >| front and Access 95/97 on the back. The Access database
| is
| >| located in our network. We are developing a Extranet to
| >| allow user insert/update the data in this database. I
| need
| >| the connection to run/open from ASP.net scripts. I also
| >| need the permission on a few tables to insert/update.
| >|
| >| I am able to view/open the database by Access 2000 with
| >| message "You can't make change to the database objects
| in
| >| the database. This database was created in an earlier
| >| version of Microsoft Access." There was no logon
| username
| >| password required.
| >| I have tried following:
| >| 1. added a username and personal ID through the VB
| >| frontend designed by the application, I got the full
| right
| >| to insert/update the database in VB front. I still
| can't
| >| get permission to connect the database through my ASP
| >| code.
| >| 2.converted it to Access 2000, I still got same message
| >| when open as "This database was created in an earlier
| >| version of Microsoft Access."
| >| 3. imported all the tables/queries to a new database,
| add
| >| a new user into both users and admins group. Admins
| group
| >| has full permissions on open/run database and tables. I
| >| got message like "The Microsoft Jet database engine
| cannot
| >| open the file '(unknown)'. It is already opened
| >| exclusively by another user, or you need permission to
| >| view its data. "
| >|
| >| Is this acturally a security issue? What kind of
| security
| >| this database may have if it is not password protected
| and
| >| I can view all the data?
| >| Thanks
| >|
| >
| >.
| >
|