RE: Access database placed in a state...

Tech-Archive recommends: Fix windows errors by optimizing your registry

=?Utf-8?B?R29sZmlucmF5?= <Golfinray@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in news:D457792F-01F1-4003-9F26-C83D27445EC3@xxxxxxxxxxxxx:

Secondly, the backend file AND the folder it resides in must have
read/write/edit/ and delete rights for each user.

Technically, the back end folder does not require delete rights --
it will run just fine without it, though the LDB file will never be
deleted. The usual reason for doing this is to prevent users from
accidentally deleting your back-end data file. The minor downside is
that the LDB file won't be deleted when the last user exits your
app. This is only a problem if the LDB file gets corrupted, and in
that case, someone with delete permissions can take care of it.

My usual practice when I removed delete permissions was to have
regulars users without delete permissions and a few administrative
users *with* delete permissions (the couple of people who did
database maintenance). This has worked fine for years in several
installations I've had.

--
David W. Fenton http://www.dfenton.com/
usenet at dfenton dot com http://www.dfenton.com/DFA/
.

Relevant Pages

  • Re: Prevent changes to Administrator password
    ... What I am trying to do is give Taz1972 some options to minimize the risk or make it harder for a lower-level DA to reset the password for the EA account. ... Restricted Admins group to mitigate against what you propose Deji. ... also need to make sure the DAs in question cannot elevate their rights to EA, ... > By adding the Deny Write Permissions ACE, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Prevent changes to Administrator password
    ... What I am trying to do is give Taz1972 some options to minimize the risk or make it harder for a lower-level DA to reset the password for the EA account. ... * This posting is provided "AS IS" with no warranties and confers no rights! ... > By adding the Deny Write Permissions ACE, ... > permission to modify the ACL on AdminSDHolder. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Why is Fedora not a Free GNU/Linux distributions?
    ... Taking away legitimate rights, yes, that would be immoral. ... specifically to be incompatible with the GPL, ... Software license) doesn't take away any right you had. ... There are other permissions that enable you to copy and distribute the ...
    (Fedora)
  • Re: Prevent changes to Administrator password
    ... Have you thought about delegating the exact permissions needed instead of using DA or restructing your forest? ... * This posting is provided "AS IS" with no warranties and confers no rights! ... > Restricted Admins group to mitigate against what you propose Deji. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Prevent changes to Administrator password
    ... * This posting is provided "AS IS" with no warranties and confers no rights! ... his/her account from the Restricted Admin group and clears the flag? ... > By adding the Deny Write Permissions ACE, ... > permission to modify the ACL on AdminSDHolder. ...
    (microsoft.public.windows.server.active_directory)