RE: QSECOFR can only login to the System Console

Tom,

It sounds as though you've checked the appropriate things and that the
system is not behaving as it should.

You say that this is a new machine, have you applied the latest cumes,
hipers, etc.?

As an experiment, if you grant *CHANGE authority to a device description
to QSECOFR, does anything change?

If you display the authorities for the device descriptions for the
console and a non-console device, is there any difference?

If you are using QCTL as your controlling subsystem and accept the
defaults, then the console will go to QCTL and the other devices will go
to QINTER.  There could be some issue there.

Good luck.  Sometimes when you've done all of the right things and it
still doesn't work, then the issue is fixed by PTF's.  It's also possible
that IBM is continuing their trend of tightening up the default security
settings, although for the life of me, the behavior you describe is only
controlled by the system value which you have set correctly.

Regards,
Andy Nolen-Parkhouse