Re: Rép. : Auditing, renaming, deleting IBM profiles

Actually Denis Robitaille's remark of "You should change auditor" was
probably said tongue in cheek, but never a truer word said in jest.
Do these auditors know what repercussions would arise by making such a
suggestion?
I would seriously ask them what experience they have on the AS/400 - or
i-series they have.


Alan Shore

NBTY, Inc
(631) 244-2000 ext. 5019
AShore@xxxxxxxx
"If you're going through Hell, keep going" - Winston Churchill

midrange-l-bounces@xxxxxxxxxxxx wrote on 07/25/2007 10:46:20 AM:

You should change auditor ;)

I suggest you do the following (that should satisfy your auditor):
- Change the password of those profiles for a random sequence of
number/caracter
- Disable the profiles that can be.

A lot of system stuff run under some of those profiles. Renaming or
delating them is a sure recipe for desaster.

<lgoodbar@xxxxxxxxxxxxxx> 2007-07-25 10:33 >>>

Other than "common knowledge" that IBM user profiles should not be
renamed or deleted, is there any official IBM documentation stating
the
fact? We have auditors who want to rename or delete QSECOFR, QUSER,
QSRV, QSRVBAS, QPGMR, QSYSOPR, &c. I found and printed IBM's command
help for DLTUSRPRF that restricts deleting those profiles, but have
not
seen anything on a rename.



Thanks,

Loyd



Loyd Goodbar

Senior programmer/analyst

BorgWarner

TS Water Valley

662-473-5713



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.