Re: I have carried out the Keith Wilby stepwise approach to securing an MDB but I am not sure what I have achieved

My memory is that you can only set your own password, though as an
admin you can reset the password for other accounts. To set the
password fro other accounts, you've got to log in with that account.

As far as setting permissions, one big key is to set permissions for
groups, not individual users--your users will come and go, and you'll
just have to recreate those permissions when that happens. So even if
you are setting permissions particular to just one user, first create a
group with a name that describes the funcitons that person will do, set
permissions for that group, and make that individual a member of that
group.

A person will need to be a member of a group that has permission to use
every object that they come into contact with while using the database.
In general, I open up everything except those objectgs that need to be
locked down.

Jeremy
--
Jeremy Wallace
Fund for the City of New York

.

Relevant Pages

  • Re: AD Delegation Fails - Permissions Disappear
    ... in turn a member of the Print Operators group. ... inheriting permissions?? ... ACL on all security principals (users, groups, and machine accounts) present ... AdminSDHolder Object Affects Delegation of Control for Past Administrator ...
    (microsoft.public.windows.server.active_directory)
  • Re: File Sharing (again - sorry, Pd)
    ... InTerminal, type umask. ... Back in the good old days, Mac OS X user accounts ... The reason that the file permissions are "resetting" each time the ... that folder inherit the ACLs from the folder. ...
    (uk.comp.sys.mac)
  • Re: Security Group Keeps getting removed???
    ... ACL on all security principals (users, groups, and machine accounts) present ... Delegated permissions are not available and inheritance is automatically ... AdminSDHolder Object Affects Delegation of Control for Past Administrator ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegating AD Rights (Enable/Disable Accounts)
    ... I will definitely pass it on to my Customer ... user accounts in AD to non-admin staff so that they will be able to ... permissions as Domain User rights will work just fine. ... The UMRA ...
    (microsoft.public.windows.server.scripting)
  • Re: Delegation - Password Reset - Access Denied
    ... If you go to properties of an AD object, select the security tab and click ... on advanced you should be on the permissions tab. ... WARNING - Any implicit permissions defined will be lost and reset back to ... Accounts in the OU and found that the BldgAdmins group was not listed. ...
    (microsoft.public.windows.server.active_directory)