
Windows logon <--> Access logon
Quote:
>-----Original Message-----
>Is it possible to connect an Access logon to a Windows
>logon?
I have never done it, but I have a scheme in mind to try
someday:
1. Implement user-level security in Access.
2. Create a process that would run periodically under an
administrator's account. The code (probably using DAO,
since ADOX never got fixed) would rebuild the users in
the .mdw file according to the users in the appropriate NT
domain login groups.
The maintenance logic is simple:
If NT_User Not in Access_Users, then Add NT_User to
Access_Users.
If Access_User Not in NT_Users, then delete Access_User.
3. If desired, and if the appropriate NT groups exist to
support it, maintain mirrored Access groups driven by the
same process.
4. All those users would have blank passwords in the .mdw
file. Administrative usernames would have strong
passwords, just like normal.
5. Users would join the workgroup, and typically open
Access with a shortcut that had the command line
switches /user %username% /pwd ""
6. The Access database startup code would include
something like:
If CurrentUser <> GetNTUserFunction and CurrentUser Not In
AdminGroup then exit.
7. Set AllowByPassKey to False, and prevent it from being
reset in code, so Step 6 would be guaranteed to run.
This last part, I think, is the weak link. Access has so
many back doors I am never sure I have closed them all!