RE: How can I easily enable/disable remote access by User

<vendor response>

I recently developed some software for another company in a similiar situation. The solution included a command interface to enable easy identification of supported IP addresses, disabling of system request while the initial program is running, and a few other items. Depending on your network configuration, and the applications being accessed, this might provide the basis for an inexpensive solution to your situation. If you would be interested in exploring this feel free to contact me directly.

</vendor response>

Bruce Vining
Bruce Vining Services

John Allen <jallen@xxxxxxxxxxx> wrote:
Thanks for the quick reply,

They want this to be real easy thing to do (disable/enable)
because it will be done quite often, don't want to
continually have to go into Active Directory to make the
changes if there is an easier way.

We do not want to disable User profile because they are
still allowed to use System i while in the office, just want
to stop the remote access.

My initial thought was some type of Subfile program that
displays all of the User Profiles and set a flag Allow
Remote Access Y/N.

But once I have the User Profile and the flag value I guess
I could write a program to run as there initial program and
if they are attempting remote access end the job.

Not sure how I can tell if they are coming in remotely
versus locally (in the office)

I was also hoping I did not have to write a program if
someone else already has, or if there is an inexpensive
solution available.

Thanks
For your suggestion about Active Directory, I will have to
see if that is possible solution

John




-----Original Message-----
From: David Wright [mailto:opendave@xxxxxxxxx]
Sent: Saturday, November 08, 2008 12:48 PM
To: Midrange Systems Technical Discussion
Subject: Re: How can I easily enable/disable remote access
by User

What sort of VPN hardware are you using?

Some grant/deny VPN access through Active Directory and some
through
internal user lists.

But if access to the i is the only thing you need to
restrict, couldn't you
just enable/disable user profiles on the i?

On Sat, Nov 8, 2008 at 9:03 AM, John Allen
wrote:

We have some employees that access our System i remotely
(through a VPN)