Re: Public Windows share not seen on QNTC

Doesn't "lists the users and passwords in the windows pc" require access
to AD? Unless of course you're talking about "local" users. Which,
strangely enough, is what others are recommending. They say "use a local
user with the same credentials as they have on IBM i". Which I think is
wrong on a number of basis. One, you've mentioned that a program to list
them is feasible. Two, these local users with the matching service
accounts on IBM i often use passwords set up to never change. Once you
start down that path you are royally screwed.

Our Windows administrator account hasn't had it's password changed in well
over a decade for fear that some startup service somewhere may be
affected. And a couple of people in IT use it as often as they use their
regular Windows account (with the same exact authority). Often for no
reason other than to avoid creating a user directory for their account on
a PC they rarely access. Oh, and there's been some turnover with people
who know this password. At least it doesn't have vpn access. Because of
this security I refuse to learn it even though they've offered.

QSECOFR is set on the same expiration schedule as every other user. And
the password matches our Windows qsecofr account.


Rob Berendt