I was unaware of the ability to use group policies to rename it.
Thanks,
John
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Lukas Beeler
Sent: Wednesday, July 25, 2007 11:12 AM
To: Midrange Systems Technical Discussion
Subject: RE: Rép. : Auditing, renaming, deleting IBM profiles
That's no problem, if done right.
Services don't use that account (normally), and you can even use group
policies to automatically rename the local administrator on client machines,
etc.etc.
Submitting a DCR about this is absolutely a good idea, IBM should provide a
way to do this.
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of John Brandt
Sent: Wednesday, July 25, 2007 4:59 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: Rép. : Auditing, renaming, deleting IBM profiles
You already know the answer. Have them rename, delete or disable
"Administrator" on a WinTel server. See where that gets them.
John
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Alan Shore
Sent: Wednesday, July 25, 2007 9:54 AM
To: Midrange Systems Technical Discussion
Subject: Re: Rép. : Auditing, renaming, deleting IBM profiles
Actually Denis Robitaille's remark of "You should change auditor" was
probably said tongue in cheek, but never a truer word said in jest.
Do these auditors know what repercussions would arise by making such a
suggestion?
I would seriously ask them what experience they have on the AS/400 - or
i-series they have.
Alan Shore
NBTY, Inc
(631) 244-2000 ext. 5019
AShore@xxxxxxxx
"If you're going through Hell, keep going" - Winston Churchill
midrange-l-bounces@xxxxxxxxxxxx wrote on 07/25/2007 10:46:20 AM:
You should change auditor ;)
I suggest you do the following (that should satisfy your auditor):
- Change the password of those profiles for a random sequence of
number/caracter
- Disable the profiles that can be.
A lot of system stuff run under some of those profiles. Renaming or
delating them is a sure recipe for desaster.
<lgoodbar@xxxxxxxxxxxxxx> 2007-07-25 10:33 >>>
Other than "common knowledge" that IBM user profiles should not be
renamed or deleted, is there any official IBM documentation stating
the fact? We have auditors who want to rename or delete QSECOFR,
QUSER, QSRV, QSRVBAS, QPGMR, QSYSOPR, &c. I found and printed IBM's
command help for DLTUSRPRF that restricts deleting those profiles, but
have not seen anything on a rename.
Thanks,
Loyd
Loyd Goodbar
Senior programmer/analyst
BorgWarner
TS Water Valley
662-473-5713
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at
http://archive.midrange.com/midrange-l.
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.476 / Virus Database: 269.10.19/917 - Release Date: 7/25/2007
1:16 AM
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.476 / Virus Database: 269.10.19/917 - Release Date: 7/25/2007
1:16 AM
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at
http://archive.midrange.com/midrange-l.
As an Amazon Associate we earn from qualifying purchases.