RE: Rép. : Auditing, renaming, deleting IBM profiles

You already know the answer. Have them rename, delete or disable
"Administrator" on a WinTel server. See where that gets them.

John

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Alan Shore
Sent: Wednesday, July 25, 2007 9:54 AM
To: Midrange Systems Technical Discussion
Subject: Re: Rép. : Auditing, renaming, deleting IBM profiles

Actually Denis Robitaille's remark of "You should change auditor" was
probably said tongue in cheek, but never a truer word said in jest.
Do these auditors know what repercussions would arise by making such a
suggestion?
I would seriously ask them what experience they have on the AS/400 - or
i-series they have.


Alan Shore

NBTY, Inc
(631) 244-2000 ext. 5019
AShore@xxxxxxxx
"If you're going through Hell, keep going" - Winston Churchill

midrange-l-bounces@xxxxxxxxxxxx wrote on 07/25/2007 10:46:20 AM:

You should change auditor ;)

I suggest you do the following (that should satisfy your auditor):
- Change the password of those profiles for a random sequence of
number/caracter
- Disable the profiles that can be.

A lot of system stuff run under some of those profiles. Renaming or
delating them is a sure recipe for desaster.

<lgoodbar@xxxxxxxxxxxxxx> 2007-07-25 10:33 >>>

Other than "common knowledge" that IBM user profiles should not be
renamed or deleted, is there any official IBM documentation stating
the fact? We have auditors who want to rename or delete QSECOFR,
QUSER, QSRV, QSRVBAS, QPGMR, QSYSOPR, &c. I found and printed IBM's
command help for DLTUSRPRF that restricts deleting those profiles, but
have not seen anything on a rename.



Thanks,

Loyd



Loyd Goodbar

Senior programmer/analyst

BorgWarner

TS Water Valley

662-473-5713



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.

No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.476 / Virus Database: 269.10.19/917 - Release Date: 7/25/2007
1:16 AM


No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.476 / Virus Database: 269.10.19/917 - Release Date: 7/25/2007
1:16 AM