Re: Is someone hacking into our database?

It is quite possible that someone has downloaded a tool to get the
usernames/passwords from your mdw file. However it is also possible that
your database hasn't been secured properly, and someone is changing things
using their standard system.mdw workgroup.

--
Joan Wild
Microsoft Access MVP

eagle wrote:
I created user-level security on our database over 2 years ago. I
removed Admin user from ADMINS group, and removed all permissions
from Admin user and Users group. A month ago, the Admin user
mysteriously got back into the ADMINS group. I took it out, of
course, as soon as I saw it there.

There are only 2 persons in this agency with permissions to change
security levels. I know I didn't change the Admin user back to ADMINS
group -- and the other person maintains she did not either. I
thought maybe someone hacked in and got one of our passwords to do
this. So, she suggested we change our passwords. Mine is now over 15
characters long.

Today, I found where someone deleted some important client related
records, and the only ones with permissions to do that is myself and
this other person. I know I did not do this, and the other person
says she didn't do it, either.

So, my question: can someone hack in and get one of our passwords
and use it to change security levels and delete data? In laymen's
terms (so I can tell my boss), how does someone hack in (from inside
or outside agency)? We have firewalls on our network (I think --
this is what the other person works on....network, firewalls,
computers, phones, etc. -- I do strictly database design). If so,
is there anything we can do to stop it from happening?

Thanks so much, in advance, for you help.


.

Relevant Pages

  • Re: is it possible to make a database secure after creating it as unsecure?
    ... user and remove the Admin user from the Admins group. ... and the Users group have no permissions, including no permissions on any new ... Now, create a new database. ...
    (microsoft.public.access.formscoding)
  • RE: Mystery security group setting changes.
    ... The .mdw file I use for this workgroup is called "share.mdw" and the default ... Sometimes when there are updates, ... suddenly the Admin user rejoined the ADMINS group within share.mdw. ...
    (microsoft.public.access.security)
  • Re: Security confusion
    ... I still believe though that you should import all objects into a new database container since ... >> I've never even heard it was possible to do this via the Immediate Window. ... but did you remove the Admin USER from the Admins GROUP? ...
    (microsoft.public.access.security)
  • New security
    ... I start with an unsecured database and I create a new workgroup file. ... I open the database with an Access shortcut using the /wrkgrp flag pointing ... I add a new user to the Admins group. ... I put a password on the Admin user and remove it from the Admins group ...
    (microsoft.public.access.security)
  • Re: unsecure secure database
    ... > FAQ says nothing about removing permissions from the admin USER, ... > remove the admin user from the Admins group. ... Admins group, added a password to my own account, ...
    (microsoft.public.access.security)