To help enhance the security of your data, you have the option of running Access 2003 in sandbox mode. In sandbox mode, Access evaluates only those expressions in field properties and controls that are safe. An expression is considered safe if it does not use functions or properties that could be exploited by malicious users to access drives, files, or other resources for which they do not have authorization. For example, functions such as Kill and Shell could be used to damage data and files on a computer, so they are not considered safe. When Access runs in sandbox mode, an expression that calls these functions or properties will result in an error message.
For a list of functions and properties blocked in sandbox mode, see Functions and properties that are blocked in sandbox mode.
Note Sandbox mode does not affect Visual Basic for Applications (VBA) code that is in your files. Code that is digitally signed, even if it includes the blocked functions or properties, will run, whether Access is in sandbox mode or not. Unsafe functions and properties are blocked only when used in expressions such as default values, control sources, or SQL statements.
Sandbox mode is implemented by using the Microsoft Jet Expression Service to evaluate expressions. Microsoft Jet 4.0 Service Pack 8 (SP8) or later allows Access to be fully functional, yet still have Jet block unsafe expressions by enabling sandbox mode. However, the Jet expression service is not part of Access. You need to download and install Microsoft Jet 4.0 Service Pack 8 (SP8) or later before you can enable sandbox mode.
Note A critical Windows update includes Jet 4.0 SP 8, so installing all the critical Windows updates will automatically install the latest version of Jet on your computer.
Important Installing the latest version of Jet will not automatically enable sandbox mode. When you start Access after installing the service pack or the critical Windows updates, you will be prompted to block unsafe expressions. Clicking Yes will turn on sandbox mode and prevent unsafe expressions from getting evaluated.
If you enable sandbox mode without installing Jet 4.0 SP 8 or later, certain features will not work. For example, wizards will not start, and instead, you will see the message "This feature isn't installed, or has been disabled".
- Wizards may not start.
- Switchboards created by using the Switchboard Manager won't function properly.
- You can't use the RunCode macro action to call a Visual Basic for Applications (VBA) procedure.
- Event handlers that call VBA procedures won't function.
- VBA procedures that are called from a property sheet or used in an SQL statement won't function.
- The following VBA functions won't work when called from a property sheet or used in an SQL statement:
- FormatCurrency
- FormatDateTime
- FormatNumber
- FormatPercent
- InStrB
- InStrRev
- MonthName
- Replace
- StrReverse
- WeekDayName
For more information about installing the latest version of Jet, see About Microsoft Jet 4.0 SP8 or later. For more information on enabling sandbox mode, and learning about the limitations of sandbox mode and workarounds, see Frequently asked questions about Access security warnings.
For more information about sandbox mode in earlier versions of Jet, see the following Knowledge Base article:
ACC2002: Jet 4.0 Expression Can Execute Unsafe Visual Basic for Applications Functions.