dbTalk Databases Forums  

Avoid Security Warning

comp.databases.ms-access comp.databases.ms-access


Discuss Avoid Security Warning in the comp.databases.ms-access forum.



Reply
 
Thread Tools Display Modes
  #21  
Old   
Salad
 
Posts: n/a

Default Re: Avoid Security Warning - 10-07-2008 , 10:41 PM






Chris O'C via AccessMonster.com wrote:
Quote:
Several flaws in your logic. The vba won't run because the college students
at those hundreds of workstations don't have the smarts to enable the content
by pressing a bar that pretty much says "contents disabled unless you press
here". You don't want to go to those hundreds of workstations yourself to do
it while each user is logged in. (The trusted locations are per user, not
per workstation, so unless the network is set up with roaming profiles - kind
of doubtful - you have a lot more work than you thought if students are
allowed to use more than 1 pc when using your app during the semester.) The
user who's executing the vba code needs to have enough permissions to write
to the registry. Most college networks are locked down so student users
don't usually have those permissions.
I haven't migrated to 2007 yet so I don't understand the trusted
location concept you just stated. If I set "C:\A2007\Apps" as a trusted
folder wouldn't it be a trusted folder for all students?

Wouldn't Tony Toews AutoFe be a useful tool for distributing the
application to the students?

Quote:
What kind of digital signature are you using that needs to be packaged to be
installed on each pc? You can't sign the files on one pc with your digital
certificate and copy the front end to each user's desktop and copy the back
end to the network server?

Chris
Microsoft MVP


Cron wrote:


does
anyone know a way to add a trusted location to the registry using VBA?
or is there a way to digitally sign a database without packaging it?



Reply With Quote
  #22  
Old   
Tony Toews [MVP]
 
Posts: n/a

Default Re: Avoid Security Warning - 10-10-2008 , 09:01 PM






Cron <cronoklee (AT) hotmail (DOT) com> wrote:

Quote:
Create a digital signiture using office.
Sign and package the database with it in access.
Unpack the signed package to a new computer and run as digitally
signed without problems??
You should be able to digitally sign the MDB/MDE all by itself.

Tony
--
Tony Toews, Microsoft Access MVP
Please respond only in the newsgroups so that others can
read the entire thread of messages.
Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/


Reply With Quote
  #23  
Old   
Tony Toews [MVP]
 
Posts: n/a

Default Re: Avoid Security Warning - 10-10-2008 , 09:35 PM



Cron <cronoklee (AT) hotmail (DOT) com> wrote:

Quote:
Right, I'll have a
look around tomorrow and see if can find some VBA to allow trusted
locations.
All trusted locations are stored in the registry under:
HKCU\Software\Microsoft\Office\12.0\Access\Securit y\Trusted
Locations\LocationN
(where N is an integer)

To see what the entries should look like, just add a trusted location through the
Trust Center, then go to the registry to look at the key and see what it did. Note:
you cannot trust a specific file, but only at the folder level, so you'll want to
make sure that you're installing your app to a folder that contains only your
application and not other stuff.

You can add any key name you want unde Trusted Locations\ instead of using LocationN.
Such as Trusted Locations\My App or Trusted Locations\<generated GUID>

So what you could do is have a startup form with a big text comment telling the user
to click on Security prompt at the top of the Access window. Now the first thing
your VBA does is set the above Trusted Locations registry key, if not already there
and close the form and continue. If the VBA code is working because the Trusted
Locations key is set then this form is visible for a flicker.

You will need to use an API call to set the registry location. See vbnet.mvps.org.

Tony
--
Tony Toews, Microsoft Access MVP
Please respond only in the newsgroups so that others can
read the entire thread of messages.
Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/


Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.