Suppose you want to examine the contents of an untrusted Access database.

It seems there should be a way to open it in Access with macros and VBA disabled.

Searching around the web, I've found several options which aren't quite right:

  • Hold down Shift to suppress any Autoexec macro or Startup form. No good because (unbelievably) it can be bypassed.
  • Set macro security level to Medium. The only options it gives you are Cancel and Open. There's no "open with scripting disabled".
  • "Sandbox mode" ie "block unsafe expressions". No good, most scripts still run.
  • KB article How to turn off Visual Basic for Applications when deploying Office 2003 or Office XP gives 5 options which are just variations on two methods:
    • uninstall (or don't install) VBA. Too drastic. I still want to examine the code I might or might not want to run.
    • Set a "VBAOff" registry value, equivalently through either Policy or regedit. This works for all Office applications except Access!

Does anyone have any other ideas? I'm using Access 2003.

link|improve this question

40% accept rate
If you really don't trust it, how about opening it in a virtual machine and just rollback a snapshot if it breaks something? – cularis Jul 4 '11 at 8:14
@cularis: a VM works, but it's a bit cumbersome. It seems like there should be a way to do what I am asking. – Hugh Allen Jul 4 '11 at 9:29
What's in it that you want to examine? If it's only data tables, create a new blank database and then link to the tables in the other database. This will be completely safe. If you need to look at the code, that's a different issue. What exactly are you afraid of? – David W. Fenton Jul 6 '11 at 1:39
Are you aware of the fact that you can turn back on the DisableBypassKey without opening the database in the Access UI? – David W. Fenton Jul 6 '11 at 1:40
@David W. Fenton: (you mean AllowBypassKey) that's a good idea which I hadn't thought of. It still takes effort though :( – Hugh Allen Jul 6 '11 at 13:41
show 1 more comment
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown

Browse other questions tagged or ask your own question.