Microsoft Access Security Page

 

On this page I am providing some quick information about User Level Security. Much of this information is dealing with questions that have been asked, and answered, in the Microsoft Newsgroup microsoft.public.access.security. This is not intended to be a replacement for the Security FAQ document, which can be found on a link below, but is designed to provide some extended explanation to specific issues that many people experience in implementing User Level Security in MS Access. None of this information is original with me but is the result of lessons learned from experience in implementing Access Security on thousands of databases and the gracious assistance of several of my MVP colleagues (particularly Mary Chipman, Joan Wild, Michael Kaplan, and Doug Steele – they should get most of the credit for anything good that appears here).

 

The Security FAQ document – This document is the “Bible” of Access User Level Security. Everything you need to know about Access User Level security can be found in this document. It is very detailed and you MUST follow it exactly to properly secure your application. The link above is to the online version of the document. If you prefer to download a copy you can also go to this Knowledge Base Article and click on the link to download Secfaq.exe.

 

The 10 Steps Summarized – The Security FAQ document list 10 steps that are essential to correctly implementing User Level Security. Here I have listed those 10 steps in an outline form.

 

The Database Owner – Ever try to convert a database and find yourself unable to for lack of permissions? Ever think you have secured a database only to find that users can still open the database by opening it directly from Windows Explorer? This page explains one of the reasons you may have encountered these problems.

 

basDatabasePassword - This link is to Michael Kaplan's code for cracking Jet 3.0 and 3.5 database passwords. He published this there, in his words, "for the express purpose of destroying the burgeoning shareware industry of Jet 3.x/3.5x database password crackers."

 

Back