Re: Question on QTVDEVICE job entering incorrect password

I disagree. I understand what you are saying, but people should do an
ALT-CTL-DEL and lock their workstations when leaving their desk. Everyone
here has an Active Directory entry that enforces a 15 minute automatic on
that. Some, including me, have it choked down to 1 minute. (Yes, taking
the computer to give a presentation at the LUG did involve someone poking
a key on a frequent basis to stop the screen dim.)

We are implementing EIM. We do NOT allow some users to sign on via their
5250 screen directly. Instead they HAVE to use Kerberos to get access to
the i5. Then the "bypass signon" is how to get the 5250. Their i5 user
profile is LCLPWDMGT(*NO). Their AD password is selected at random and
they are never told it. Instead it is synced up using biometrics.

This allows "Sally" the ability to have multiple sessions but not be
sharing her password throughout the office. Well, I suppose she could
biometrically enter in at each workstation and then have them work the
rest of the day. Rather a pain though if she leaves for a spell and the
other person left their workstation inactive for 15 minutes. They're
stuck until she brings the necessary body part back on site.

Rob Berendt