Sample Access Project Security Documentation

Up

Network Information

File Pathnames

\\[Server Name]\[Workgroup Name]\Application.mdb
\\[Server Name]\[Workgroup Name]\Data.mdb
\\[Server Name]\[Workgroup Name]\System.mdw
\\[Server Name]\[Workgroup Name]\User.doc
\\[Server Name]\[Workgroup Name]\Admin.doc

Network Group Names and Permissions

[Workgroup Name]
Change Rights (RWXD)(RWXD) (Read, Write, Execute and Delete) for the Directories and Files above. (N.B. All Users need these Rights.)

Network User Information

User Names

Logon Name

Group

[User Name]

[Account Name]

[Workgroup Name]

[User Name]

[Account Name]

[Workgroup Name]

Developer

Developer

[Workgroup Name]

Workgroup Information

If you have two or more versions of MSAccess installed or you need access to secured and unsecured databases then you should use the Command Line Options on your Desktop Icons (see below).

User and Group account Information is stored in the Workgroup File (System.mdw). Every machine that runs Microsoft Access has a Pointer to a Workgroup File (System.mdw). This Pointer must point to a Workgroup File that contains the necessary Accounts:

  •  \\[Server Name]\[Workgroup Name]\System.mdw

Use the following procedure to point the Pointer to the Workgroup File above:

Run the Microsoft Access Workgroup Administrator:

  •  (C:\MSOffice\Access\Wrkgadm.exe in Access 95)
  •  (C:\Windows\System\Wrkgadm.exe in Access 97)
  •  ("C:\Program Files\Microsoft Office\Office\1033\WRKGADM.EXE" in Access 2000)
  •  join the Workgroup (System.mdw File normally located with the Access Application)
  •  you will be told that you have successfully joined the Workgroup

This operation must be repeated on each PC that requires a secure logon.

Desktop Icons

Use the following procedure to add an Icon to the Users Desktop:

  •  right click on a bare spot of the Windows Desktop
  •  select the New->Shortcut option from the Context menu
  •  click Browse and change Files of Type to “All Files” or type *.* in the File Name Text Box
  •  browse to the file below and double click it (search under the Network Neighbourhood)
  •  “\\[Server Name]\[Workgroup Name]\Application.mdb” (Need “” for spaces)
  •  If you have two or more versions of MSAccess installed then you must use the command line options below.

Desktop Icons Command Line Options

When running multiple versions of Access or you need access to secured and unsecured databases you may need to use Command Line Options with your Icons:

  •  create your Desktop Icon as shown above
  •  right click the Icon and choose Properties from the Context Menu and click the Short Cut Tab
  •  change the “Target” Command Line to show three parameters: Application, File and Workgroup.
  •  “C:\Program Files\Microsoft Office\Office\MSAccess.exe” “\\[Server Name]\[Workgroup Name]\[Application.mdb]” /Wrkgrp “\\[Server Name]\[Workgroup Name]\System.mdw”

Access Information

All the following information is Case Sensitive and must be recorded for each System.

Workgroup Owner Information (Admins Group Account)

The Workgroup was created using the following Account Details:

  •  [Record Workgroup Name here]
  •  [Record Organisation here]
  •  [Record Workgroup ID here]

Access Developer Information (Database and Objects Owner Account)

The Database and Objects were created using the following Account Details:

  •  [Record Developer Name here]
  •  [Record PID here]
  •  [Record Password here]

Access Groups Information (Group Permissions Accounts)

The Database and Object Permissions are assigned to the following Account Details:

  •  [Record Group Name here]
  •  [Record PID here]
  •  [Record Group Name here]
  •  [Record PID here]

Permissions Matrix

The Database and Object Permissions were assigned using the following Rules:

Object

Group

Permissions

Database

[Record Group Name here]

[Record Permissions here]

Tables

[Record Group Name here]

[Record Permissions here]

Queries

[Record Group Name here]

[Record Permissions here]

Forms

[Record Group Name here]

[Record Permissions here]

Reports

[Record Group Name here]

[Record Permissions here]

Macros

[Record Group Name here]

[Record Permissions here]

Access User Information (User Accounts)

User Names

Account Name

Group

PID

Workgroup

[User Name]

[Account Name]

[Group Name]

[PID]

[Workgroup Name]

[User Name]

[Account Name]

[Group Name]

[PID]

[Workgroup Name]

N.B. The Developer Account should be the One and Only Account in the Admins Group.

Access Options

To enable easier Searches for Access Beginners do the following:

  •  Select the Tools-Options form the Main Access Menu
  •  Click the Edit/Find Tab
  •  Click the General Search Option in the Default Edit/Find Behaviour Group
  •  Click OK

Admin Logon Password

All the Admin and Default Permissions have been removed from this System. If a User without a User Account is asked to Logon, they can logon as Admin (the Access Default User). This will allow them to continue working on any unsecured Access Systems and Default User Rights to any secured Systems.

1996 Richard Bates

Up Design Documentation
Legal