Microsoft Office Online
Sign in to My Office Online (What's this?) | Sign in

 
 
Microsoft Office Access
Search
Search
 
Check for updates: (c) Microsoft
Office downloads
 
 
 
Warning: You are viewing this page with an unsupported Web browser. This Web site works best with Microsoft Internet Explorer 6.0 or later, Firefox 1.5, or Netscape Navigator 8.0 or later. Learn more about supported browsers.

Email this linkEmail this link Printer-Friendly VersionPrinter-Friendly Version Bookmark and ShareShare
About Microsoft Jet Expression Service sandbox mode
 

To help enhance the security of your data, you have the option of running Access 2003 in sandbox mode. In sandbox mode, Access evaluates only those expressions in field properties and controls that are safe. An expression is considered safe if it does not use functions or properties that could be exploited by malicious users to access drives, files, or other resources for which they do not have authorization. For example, functions such as Kill and Shell could be used to damage data and files on a computer, so they are not considered safe. When Access runs in sandbox mode, an expression that calls these functions or properties will result in an error message.

For a list of functions and properties blocked in sandbox mode, see Functions and properties that are blocked in sandbox mode.

Note  Sandbox mode does not affect Visual Basic for Applications (VBA) code that is in your files. Code that is digitally signed, even if it includes the blocked functions or properties, will run, whether Access is in sandbox mode or not. Unsafe functions and properties are blocked only when used in expressions such as default values, control sources, or SQL statements.

Sandbox mode is implemented by using the Microsoft Jet Expression Service to evaluate expressions. Microsoft Jet 4.0 Service Pack 8 (SP8) or later allows Access to be fully functional, yet still have Jet block unsafe expressions by enabling sandbox mode. However, the Jet expression service is not part of Access. You need to download and install Microsoft Jet 4.0 Service Pack 8 (SP8) or later before you can enable sandbox mode.

Note  A critical Windows update includes Jet 4.0 SP 8, so installing all the critical Windows updates will automatically install the latest version of Jet on your computer.

Important  Installing the latest version of Jet will not automatically enable sandbox mode. When you start Access after installing the service pack or the critical Windows updates, you will be prompted to block unsafe expressions. Clicking Yes will turn on sandbox mode and prevent unsafe expressions from getting evaluated.

If you enable sandbox mode without installing Jet 4.0 SP 8 or later, certain features will not work. For example, wizards will not start, and instead, you will see the message "This feature isn't installed, or has been disabled".

  • Wizards may not start.
  • Switchboards created by using the Switchboard Manager won't function properly.
  • You can't use the RunCode macro action to call a Visual Basic for Applications (VBA) procedure.
  • Event handlers that call VBA procedures won't function.
  • VBA procedures that are called from a property sheet or used in an SQL statement won't function.
  • The following VBA functions won't work when called from a property sheet or used in an SQL statement:
    • FormatCurrency
    • FormatDateTime
    • FormatNumber
    • FormatPercent
    • InStrB
    • InStrRev
    • MonthName
    • Replace
    • StrReverse
    • WeekDayName

For more information about installing the latest version of Jet, see About Microsoft Jet 4.0 SP8 or later. For more information on enabling sandbox mode, and learning about the limitations of sandbox mode and workarounds, see Frequently asked questions about Access security warnings.

For more information about sandbox mode in earlier versions of Jet, see the following Knowledge Base article: ACC2002: Jet 4.0 Expression Can Execute Unsafe Visual Basic for Applications Functions.

advertisement