Re: [EXTERNAL] CPIB682 - User profile disabled for...

[Rob Berendt <robertowenberendt@xxxxxxxxx>]

We are using "IBM Security Verify Governance, Identity Manager".  When our
users change their passwords in Windows they are automatically changed in
IBM i, Notes, etc
We encourage them to reboot their PC's after changing their passwords.

On Fri, Apr 21, 2023 at 9:16 AM Greg Wilburn <
gwilburn@xxxxxxxxxxxxxxxxxxxxxxx> wrote:

> ADDLIBLE NETSRVCMD then GO NETS, option 12
> This is easier than using Navigator to reset users.
>
> Now to fix the real problem:
> We use the IFS Extensively - users accessing for a variety of reasons.
>
> 1. Go to Password level 3.  If you're not there, shame on you.  Such an
> easy security enhancement
> 2. Have your users synchronize their windows & IBM password - when they
> change one, change the other to match exactly
> 3. On the PC:  Open Credential Manager (search for it).  Delete any saved
> Windows Credentials for the IBM I - windows will use the "windows password"
> to connect to the IFS
>
> Know that a SINGLE click on an IFS folder with the wrong password will
> disable the user in Netserver.  The PC attempts to connect several times if
> unsuccessful.
>
> You will still get some people disabling themselves - usually when they
> change their password after having already connected to the IBM i.  If the
> windows password is changed at logon, then the IBM i password changed
> before accessing the IFS they will be fine.
>
> HTH,
> Greg
>
> -----Original Message-----
> From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Åke
> Olsson
> Sent: Friday, April 21, 2023 5:22 AM
> To: midrange-l@xxxxxxxxxxxxxxxxxx
> Subject: [EXTERNAL] CPIB682 - User profile disabled for...
>
> One specific user has constant issues with being disabled for access to IFS
> folders through windows client.
>
>
>
> He claims adamantly that the correct password is used and has changed from
> using a script to attaching the folders in windows explorer.
>
>
>
> Doing constant resets using the navigator is getting to be quite a chore...
>
>
>
> Ideas? Any ideas??
>
>
>
> /Ake Olsson/
>
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> [CAUTION! This email originated outside of the organization. Please do not
> open attachments or click links from an unknown or suspicious origin.]
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.