Re: Admin help

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: MaBell (MaBell_at_discussions.microsoft.com)
Date: 10/30/04 

Date: Sat, 30 Oct 2004 12:43:01 -0700

Hi. Thanks for responding. Let me try and make myself clearer. I know what
sounds informative to me might make no sense to someone else. As a
reference, I followed all the steps in Jack Macdonalds security steps.

1. I created a new workgroup using wrkgrp.exe and open DB with it.
2. I created password for user admin, create new user (me), added (me) to
admin group and remove admin user from admin group.
3. I login as me and create password.
4. I create AppUser group and SuperAdmin group.
5. I create new DB for which I (user) am the owner and of all objects.
6. I remove ALL permissions for the Admin Group, User group, And Admin
user.(giving SuperAdmin group all rights and AppUser Group some, and remove
all user level permissions).

Now when I log into my DB using my pc default system.mdw (silently as user
admin), I should be locked out b/c permissions are saved with the db...
right? However I can open the db. Did I miss something?

Thanks for all your help!

"Joan Wild" wrote:

> MaBell wrote:
> > Hi guys,
> >
> > I need help. I have removed the user Admin from the Admin group in my
> > DB using my custom MDW. I have removed all permissions from user and
> > admin GROUPS and admin USERS.
>
> There is a Users Group, Admins Group, and an Admin User in every mdw
> created. (I can't really make sense of what you wrote above).
>
> You need to remove permissions for the Users Group and the Admin User.
> You need to ensure that neither the Users Group nor the Admin User own any
> objects.
> You do not need to remove permissions from the Admins Group.
> You need to remove the Admin User from the Admins Group.
>
> > I (superAdmin) am the owner of the DB
> > and all objects.
>
> Is superAdmin user a member of the Admins Group?
>
> > All security features work when I open my DB using
> > my custom MDW. But I can still open the DB using the system MDW. Is
> > that possible?
>
> How did you create your custom mdw?
>
> > I can't do anything to any objects but i thought the
> > DB permissions would bar me from opening the DB even with the system
> > MDW. Am I missing something?
>
> Your sig said Access 2000 - did you run the security wizard (you shouldn't
> in 2000)?
>
> --
> Joan Wild
> Microsoft Access MVP
>
>
>

Relevant Pages

  • RE: Security Groups and users on SBS Premium
    ... questions after you upgrade your Windows NT server to Windows SBS 2000. ... should it be a member of the domain admin group? ... the user templates can help you to assign user permissions ... Do I need to be anything other than a member of the Dom Admin group to ...
    (microsoft.public.windows.server.sbs)
  • Power User Registry Entry
    ... Oddly, when you right click and go to permissions, it says ... if you select to add yourself (admin) ... >>was created by a power user. ... >>objects by admin group can be viewed by admin group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Custom MMC for OU
    ... The admins at the very least are going to need permissions to traverse ... > My first time dealing with OUs and containers and I've run ... > created admin group. ... > of the admin group can properly administer their ...
    (microsoft.public.win2000.active_directory)
  • Re: Permissions issue with users in Domain Users not able to see p
    ... You will only need to add them to the local admin group ... if they need to be a local admin or not. ... Yes adding the domain users to the local ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Deny Interactive Logon but Allow Runas
    ... There are third party runas ... As our users don't have local admin rights they usually have to ... users in the local admin group. ...
    (microsoft.public.windowsxp.security_admin)