Syncing accounts

While our security software does a fine job of syncing passwords in
between Windows and IBM i, even if their accounts do not match, we have
found that NetServer shares served up by IBM i can be a bit troublesome so
we are in the process of matching up the few accounts which differ. For
example someone may be debbieg in IBM i and debg in Windows. We have
discovered that the account name in Active Directory is not the "key" to
the file. There's some SID attribute or some such thing. So I can change
debg in Active Directory to debbieg and she will still have the same
access to all the Windows based shares. File permissions stay good. Even
her users\debg directory on her local PC will stay in use instead of
creating a new debbieg. I think it is a fabulously smooth transition.

Kind of wish IBM i could do this same thing.

Rob Berendt