Avoid Security Warning

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • Cron

    #1

    Avoid Security Warning

    Hi I've completed work on an access2007 database which is to be run on
    a network server by many users at the same time. Every time the
    database is opened on a new computer I get the "Certain content in
    this database has been disabled" warning at the top. How do I avoid
    this please? My users would not know to click the bar and enable the
    content.

    I've tried digital signing but it I can only seem to do it by
    packaging the database which brings up an extraction screen every time
    it's loaded. Is there any way to bypass this annoying security
    warning?


    Thanks a lot,
    Ciarán
  • Rick Brandt

    #2
    Re: Avoid Security Warning

    Cron wrote:
    Hi I've completed work on an access2007 database which is to be run on
    a network server by many users at the same time. Every time the
    database is opened on a new computer I get the "Certain content in
    this database has been disabled" warning at the top. How do I avoid
    this please? My users would not know to click the bar and enable the
    content.
    >
    I've tried digital signing but it I can only seem to do it by
    packaging the database which brings up an extraction screen every time
    it's loaded. Is there any way to bypass this annoying security
    warning?
    On each user's PC the folder where the file is stored needs to be set as a
    "trusted folder". This is in the Access options.

    --
    Rick Brandt, Microsoft Access MVP
    Email (as appropriate) to...
    RBrandt at Hunter dot com


    Comment

    • Cron

      #3
      Re: Avoid Security Warning

      On each user's PC the folder where the file is stored needs to be set as a
      "trusted folder".  This is in the Access options.
      Surely there's a better way to do it than this?? The network is in a
      busy college with hundreds of workstations. It's not practical to set
      it on every machine. Is there no way to digitally sign a database
      without having to package it?

      Cheers,
      Ciarán

      Comment

      • Rick Brandt

        #4
        Re: Avoid Security Warning

        Cron wrote:
        >On each user's PC the folder where the file is stored needs to be
        >set as a "trusted folder". This is in the Access options.
        >
        Surely there's a better way to do it than this?? The network is in a
        busy college with hundreds of workstations. It's not practical to set
        it on every machine. Is there no way to digitally sign a database
        without having to package it?
        >
        Cheers,
        Ciarán
        It can be done programmaticall y as it is just a registry entry. Sorry, I am
        not familiar with the specifics of digital certificates.

        --
        Rick Brandt, Microsoft Access MVP
        Email (as appropriate) to...
        RBrandt at Hunter dot com


        Comment

        • Cron

          #5
          Re: Avoid Security Warning

          It can be done programmaticall y as it is just a registry entry.  Sorry,I am
          not familiar with the specifics of digital certificates.
          >
          Yes I've actually tried writing a .reg file for it but reg edits are
          blocked on the college workstations! It's dead ends in all directions!
          Ciarán

          Comment

          • paii, Ron

            #6
            Re: Avoid Security Warning


            "Cron" <cronoklee@hotm ail.comwrote in message
            news:ce8368b0-cf15-45e6-8875-25b420f93aaf@d3 1g2000hsg.googl egroups.com...
            On each user's PC the folder where the file is stored needs to be set as a
            "trusted folder". This is in the Access options.
            >Surely there's a better way to do it than this?? The network is in a
            >busy college with hundreds of workstations. It's not practical to set
            >it on every machine. Is there no way to digitally sign a database
            >without having to package it?
            >Cheers,
            >Ciarán
            How are you going to get a copy of the front-end onto those workstations?
            Can the same script be used to set the destination folder as trusted?




            Comment

            • Cron

              #7
              Re: Avoid Security Warning

              How are you going to get a copy of the front-end onto those workstations?
              Can the same script be used to set the destination folder as trusted?
              Hi, thanks for the reply... The databse is installed on a shared
              network drive and can be accessed by all workstations simultaneously.

              Is there any VBA code that can add trusted locations as executing
              a .reg file manually is forbidden on the college workstations?

              Cheers,
              Ciarán

              Comment

              • paii, Ron

                #8
                Re: Avoid Security Warning


                "Cron" <cronoklee@hotm ail.comwrote in message
                news:2ff5114f-0802-4466-87ba-9868a77f0647@u6 5g2000hsc.googl egroups.com...
                How are you going to get a copy of the front-end onto those workstations?
                Can the same script be used to set the destination folder as trusted?
                >Hi, thanks for the reply... The databse is installed on a shared
                >network drive and can be accessed by all workstations simultaneously.
                Access should not be run this way. Each user should have a copy of the
                front-end linked to a shared copy of the back-end otherwise you will have
                corruption of the MDB. The Jet Back-end may need to be changed to SQL server
                if you have100's of simultaneous users.
                >Is there any VBA code that can add trusted locations as executing
                >a .reg file manually is forbidden on the college workstations?
                Are the workstations connected to the server with Active Directory? If so,
                can your system administrator add the keys though a group policy?
                >Cheers,
                >Ciarán


                Comment

                • Cron

                  #9
                  Re: Avoid Security Warning

                  On Oct 7, 1:31 pm, "paii, Ron" <n...@no.comwro te:
                  "Cron" <cronok...@hotm ail.comwrote in message
                  >
                  news:2ff5114f-0802-4466-87ba-9868a77f0647@u6 5g2000hsc.googl egroups.com...
                  >
                  How are you going to get a copy of the front-end onto those workstations?
                  Can the same script be used to set the destination folder as trusted?
                  Hi, thanks for the reply... The databse is installed on a shared
                  network drive and can be accessed by all workstations simultaneously.
                  >
                  Access should not be run this way. Each user should have a copy of the
                  front-end linked to a shared copy of the back-end otherwise you will have
                  corruption of the MDB. The Jet Back-end may need to be changed to SQL server
                  if you have100's of simultaneous users.
                  There'll be 30 users max at any one time. I've never had corruption
                  problems in the past with similar setups, why would this be an issue?
                  >
                  Is there any VBA code that can add trusted locations as executing
                  a .reg file manually is forbidden on the college workstations?
                  >
                  Are the workstations connected to the server with Active Directory? If so,
                  can your system administrator add the keys though a group policy?
                  I have no idea how the server is set up. As far as I can tell it's
                  simply a windows mapped network drive. I'd prefer an access only
                  solution as the admins are very busy and could take weeks or months to
                  add the keys.


                  Cheers,
                  Ciarán

                  Comment

                  • Salad

                    #10
                    Re: Avoid Security Warning

                    Cron wrote:
                    On Oct 7, 1:31 pm, "paii, Ron" <n...@no.comwro te:
                    >
                    >>"Cron" <cronok...@hotm ail.comwrote in message
                    >>
                    >>news:2ff511 4f-0802-4466-87ba-9868a77f0647@u6 5g2000hsc.googl egroups.com...
                    >>
                    >>
                    >>>How are you going to get a copy of the front-end onto those workstations?
                    >>>Can the same script be used to set the destination folder as trusted?
                    >>>Hi, thanks for the reply... The databse is installed on a shared
                    >>>network drive and can be accessed by all workstations simultaneously.
                    >>
                    >>Access should not be run this way. Each user should have a copy of the
                    >>front-end linked to a shared copy of the back-end otherwise you will have
                    >>corruption of the MDB. The Jet Back-end may need to be changed to SQL server
                    >>if you have100's of simultaneous users.
                    >
                    >
                    There'll be 30 users max at any one time. I've never had corruption
                    problems in the past with similar setups, why would this be an issue?
                    Good luck!

                    Consider a runtime version of A2007. It's free.

                    Comment

                    • Chris O'C via AccessMonster.com

                      #11
                      Re: Avoid Security Warning

                      This has been an issue for more than 15 years. The Microsoft Access team
                      identified this as the top reason for corruption in their tech support
                      incidents.

                      If you haven't had the problem yet, you will so take good advice when you get
                      it and split the db file.

                      Chris
                      Microsoft MVP


                      Cron wrote:
                      >There'll be 30 users max at any one time. I've never had corruption
                      >problems in the past with similar setups, why would this be an issue?
                      --
                      Message posted via AccessMonster.c om


                      Comment

                      • Cron

                        #12
                        Re: Avoid Security Warning

                        On Oct 7, 11:08 pm, "Chris O'C via AccessMonster.c om" <u29189@uwe>
                        wrote:
                        This has been an issue for more than 15 years.  The Microsoft Access team
                        identified this as the top reason for corruption in their tech support
                        incidents.
                        >
                        If you haven't had the problem yet, you will so take good advice when youget
                        it and split the db file.


                        hmm... ok point taken. Is it OK to have a shared copy of the front end
                        linked to a seperate shared copy of the backend?

                        Comment

                        • Chris O'C via AccessMonster.com

                          #13
                          Re: Avoid Security Warning

                          Nobody shares, really. Only one user per front end. The db file is split
                          into a back end (contains tables and relationships) and a front end (contains
                          all other objects and links to the tables). The back end is put on the
                          network share and a copy of the front end is put on each user's desktop. The
                          users are linked to the back end tables but they aren't sharing the file
                          (like they've opened it in Access at the same time). They have a connection
                          thru the Jet or ACE db driver, but none of those connections are shared with
                          anybody else's db connection. So if one of those connections gets
                          disconnected (like a network cable is pulled), it doesn't affect the other
                          users' sessions.

                          Chris
                          Microsoft MVP


                          Cron wrote:
                          >Is it OK to have a shared copy of the front end
                          >linked to a seperate shared copy of the backend?
                          --
                          Message posted via AccessMonster.c om


                          Comment

                          • Cron

                            #14
                            Re: Avoid Security Warning

                            On Oct 8, 12:25 am, "Chris O'C via AccessMonster.c om" <u29189@uwe>
                            wrote:
                            Nobody shares, really.  Only one user per front end.  The db file is split
                            into a back end (contains tables and relationships) and a front end (contains
                            all other objects and links to the tables).  The back end is put on the
                            network share and a copy of the front end is put on each user's desktop.  The
                            users are linked to the back end tables but they aren't sharing the file
                            (like they've opened it in Access at the same time).  They have a connection
                            thru the Jet or ACE db driver, but none of those connections are shared with
                            anybody else's db connection.  So if one of those connections gets
                            disconnected (like a network cable is pulled), it doesn't affect the other
                            users' sessions.
                            >
                            Chris
                            Microsoft MVP
                            >

                            OK I'll do it like that so. Now back to the matter at hand... does
                            anyone know a way to add a trusted location to the registry using VBA?
                            or is there a way to digitally sign a database without packaging it?

                            Cheers for the help on this guys,
                            Ciarán

                            Comment

                            • Chris O'C via AccessMonster.com

                              #15
                              Re: Avoid Security Warning

                              Several flaws in your logic. The vba won't run because the college students
                              at those hundreds of workstations don't have the smarts to enable the content
                              by pressing a bar that pretty much says "contents disabled unless you press
                              here". You don't want to go to those hundreds of workstations yourself to do
                              it while each user is logged in. (The trusted locations are per user, not
                              per workstation, so unless the network is set up with roaming profiles - kind
                              of doubtful - you have a lot more work than you thought if students are
                              allowed to use more than 1 pc when using your app during the semester.) The
                              user who's executing the vba code needs to have enough permissions to write
                              to the registry. Most college networks are locked down so student users
                              don't usually have those permissions.

                              What kind of digital signature are you using that needs to be packaged to be
                              installed on each pc? You can't sign the files on one pc with your digital
                              certificate and copy the front end to each user's desktop and copy the back
                              end to the network server?

                              Chris
                              Microsoft MVP


                              Cron wrote:
                              >does
                              >anyone know a way to add a trusted location to the registry using VBA?
                              >or is there a way to digitally sign a database without packaging it?
                              --
                              Message posted via AccessMonster.c om


                              Comment

                              Working...