Re: Create basic user for one database



The 'Admin' account and 'Users' group are common to every installation
of Access in the world. If you remove all permissions from 'admin' and
assign the correct permissions to the Users group, then *any* instance
of Access can open the database without joining a special workgroup or
by supplying a userID and password to the Access session. It's the
method that I would use if I wanted to allow people to use the
database without supplying a password.

Using 'Users' for anything other than this "freely-accessible" access
level is the wrong approach. Accounts can never be deleted from the
Users group.

If you are determined to use a 'Service' account, then the easiest way
to do that is to create a special Windows shortcut (.lnk file) and
supply the workgroup, MDB filename, username, and password all as
parameters in the shortcut's Target.

My advice would be to re-visit all the other databases, create a new
group with the same permissions as you are currently using for Users,
assign all the accounts to that group, and remove permissions from the
Users group.


On Tue, 10 Mar 2009 10:56:02 -0700, css
<css@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

We have several databases split on our network, with the front end on each
machine & the back end on the server.

I have created individual users with passwords & assigned them to groups,
usually the default 'Users' groups, so that I can specify at a group level
what each individual has access to in each database.

Now we are creating a new database & management would like to have a generic
user called 'Service' with no password. This user needs to be able to log in
to this one particular database and run a query that will create a temp file,
then it will merge the data with a Word template. All is done, except for
setting up the security.

I tried to create a new user called 'Service', and remove it from all of the
groups. I got a message saying that I could not remove it from the default
User's group. Not sure what to do now; this user is only authorized to open
just this one database from any pc. By it being in the 'User' group, they can
open anything without a password.

Any ideas?

Thanks,
Connie

--
jackmacMACdonald@xxxxxxxxxxxxxx
remove uppercase letters for true email
http://www.geocities.com/jacksonmacd/ for info on MS Access security
.



Relevant Pages

  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied ... I then added full permissions to my user account on both of these keys, ... that's for every app pool you create for every new web app on the ... local admin rights to the server hosting incoming email. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: NTFS owner problem
    ... power options, ... permissions that control access. ... to which any admin account should have full access. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: 2003 Server Client/Delegation and Data Issues
    ... The test account has the same issue as the junior admin. ... The AD information is up to date - I could view the account I ... I am starting to suspect a permissions conflict as I have poked around ... The jr admin is a member of the Remote Desktop Users group at the domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)

Loading