Security-Questions on Wizard, Best Method, Relocate mdw

[PurpleUnicorn]

I have a few questions regarding security that I hope someone will be able to answer.

1. I am running Access XP. My application is split - front end on all user stations and data on a server. I used the security wizard to create a new workgroup with a shortcut to my secured mdb. I notice that when I open my application using the shortcut and use the workgroup administrator to see the workgroup I am connected to - it shows the system.mdw. (It is correctly using the information from my secured.mdw) If I try to open the mdb by double-clicking it in windows explorer, I get an error message that says I do not have the necessary permission to open the file. If the mdb is “joined” to the system.mdw, why doesn’t it open? Did the wizard change my mdb in some way? (I am just curious – I have a backup)
If I create a workgroup file using wrkgadm.exe and create my own shortcut, I do not get the error regarding permissions when I try to open the file from windows explorer.

2 Can I create a workgroup on my PC for use at another location (clients site) in order to enter all of the groups and users that will be secure? I don’t want anyone to be able to open the mdb using the system.mdw. If I rename it, couldn’t it be easily recreated by re-installing Access.

3 Should the mdw reside on the server or on the user stations?

4 Is it essential to password protect the data mdb.


I have been reading about security and testing on my personal computer – I am a bit nervous about implementing it at the clients site. Any helpful info will be greatly appreciated.


Thanks

 

[FancyPrairie]

It sounds like you did it correctly. But I don't understand why you are seeing system.mdw via the workgroup administrator. To verify, open FE secured database (via your shortcut) and open a module (new or old) and in Debug's Immediate window, type ?syscmd(acSysCmdGetWorkgroupFile) It should show your new workgroup file.

You should put your new workgroup file on the same server as your BE. Then setup a short cut on your users's machines. The short cut property should look something like this: "\\path\msaccess.exe" "\\path\YourFE.mdb" /wrkgrp "\\path\YourNewWorkgroup.mdw"

 

[PurpleUnicorn]

Thanks for the response!

When I run the code in the immediate window - the result shows the correct mdw - the secured one.

If I chose Tools --> Security --> Workgroup Administrator - I see the path to the System.mdw.

I am guessing that Access puts some additional information in the mdb so it can not be opened without using the shortcut/path to the correct mdw.

 

[FancyPrairie]

Yeah, by default, when Access opens a databases it uses System.mdw, unless you tell it otherwise. Now you could go into the registry (via regedit) and change it so that Access defaults to whatever mdw file you want. Just do a search for system.mdw and change its value. I wouldn't recommend it though. Just use the shortcut method.