George,
We are on v7r3 and have NETSRVCMD library. I don't recall if I had to download that separately, or if it was part of a Tech Refresh.
https://www.ibm.com/support/pages/manage-ibm-i-netserver-without-navigator-go-nets
You asked for a solution to reduce disabled netserver passwords. I gave you what works for us. We worked with IBM on this. You're welcome to take my advice or leave it.
Our experience is that it's easier for a person to remember ONE password, than two (especially when it's difficult for a user to know which system they are actually accessing).
Regardless of what you do.. I urge you to go to PWDLVL 3... We are a small company of just over 200... our password requirements on both Windows and IBM i are long and follow the recommended complexity and change intervals.
Two years ago, we were at PWDLVL 1 - the switch to 3 was the easiest security measure we have taken.
Greg
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of George Smith
Sent: Friday, April 21, 2023 9:28 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: [EXTERNAL] CPIB682 - User profile disabled for...
Greg,
I must assume that your NETSRVCMD is a V7R5 library. Also, even if I go to PWDLVL 3 my users will have to keep their passwords in sync? None of the documentation addresses that they must stay in sync to keep from disabling the Network Neighborhood.
George.....
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Greg Wilburn
Sent: Friday, April 21, 2023 8:16 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: [EXTERNAL] CPIB682 - User profile disabled for...
ADDLIBLE NETSRVCMD then GO NETS, option 12 This is easier than using Navigator to reset users. Now to fix the real problem: We use the IFS Extensively - users accessing for a variety of reasons. 1. Go
External (gwilburn@xxxxxxxxxxxxxxxxxxxxxxx<mailto:gwilburn@xxxxxxxxxxxxxxxxxxxxxxx>)
Report This Email<
https://protection.inkyphishfence.com/report?id=c2tvdXQtZnJ1aXQtb2YtdGhlLWVhcnRoL2dzbWl0aEBmb3RlLmNvbS8wNjAwODY1MjkzMGFjZWQ2ZjBjNDFkYjIwNDFlMzgwNy8xNjgyMDgyOTYyLjQ5#key=f7bf6190320aea70bc922d8131a78f76> FAQ<
https://getskout.com/emailprotectionfaq/> Skout Email Protection<
https://getskout.com/emailprotection/>
ADDLIBLE NETSRVCMD then GO NETS, option 12
This is easier than using Navigator to reset users.
Now to fix the real problem:
We use the IFS Extensively - users accessing for a variety of reasons.
1. Go to Password level 3. If you're not there, shame on you. Such an easy security enhancement
2. Have your users synchronize their windows & IBM password - when they change one, change the other to match exactly
3. On the PC: Open Credential Manager (search for it). Delete any saved Windows Credentials for the IBM I - windows will use the "windows password" to connect to the IFS
Know that a SINGLE click on an IFS folder with the wrong password will disable the user in Netserver. The PC attempts to connect several times if unsuccessful.
You will still get some people disabling themselves - usually when they change their password after having already connected to the IBM i. If the windows password is changed at logon, then the IBM i password changed before accessing the IFS they will be fine.
HTH,
Greg
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx<mailto:midrange-l-bounces@xxxxxxxxxxxxxxxxxx>> On Behalf Of Åke Olsson
Sent: Friday, April 21, 2023 5:22 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx<mailto:midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] CPIB682 - User profile disabled for...
One specific user has constant issues with being disabled for access to IFS
folders through windows client.
He claims adamantly that the correct password is used and has changed from
using a script to attaching the folders in windows explorer.
Doing constant resets using the navigator is getting to be quite a chore...
Ideas? Any ideas??
/Ake Olsson/
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx<mailto:MIDRANGE-L@xxxxxxxxxxxxxxxxxx>
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l<
https://shared.outlook.inky.com/link?domain=lists.midrange.com&t=h.eJw1zEEOwiAQheGrGNZSKK3YuvIqtIV20gEMDDHReHdF4_r973uykpBdDmwjuuWLEAiZcuNhSSastpmjF94AehO-EwQXxX_lyI4Httd73mMh7lIB4tFx2iy3JtEm1uyBtquL9MOklnLQJzV20sx20U7OfbtMSvat7QZ5Fq0elBzUqFXTj9W31V_vgFNJ4UqRDE7wcAUdIHobqLo1XD5hKIivN-AxRYo.MEQCIH0vfnM2X05BIsLu4qAn1AJt3RIia7OEyn1ed-p0eLq6AiAPDB6dlN_JkuY7_7nLjpmXvxLU_zviTPI8LzkGMebSjA>
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx<mailto:MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx>
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.<
https://shared.outlook.inky.com/link?domain=archive.midrange.com&t=h.eJw1jEsOgjAUAK9iurYfClZgxVVKP7ThQU151UTj3bUxLieZmRcpGch4IgHxdoyc62xCvDu2RZv1vjhm0sb_QIGR84msNTjWVJD6XCLS5CkGR53OGPhybBHD5BP-YqGE6NVFDq3QxlnlhekaO0vRNa7txZU3qpeil4OSrBvq39X_8ogwl7xPmFDDHJ--gI8Am9uxfqtov-JeAN4fW0w_xg.MEQCIAOGYopnq13zZ_dgsQhwxlpocwYE45L5BdlaFcqMa6yDAiB_u5Fv0u9b0xrLGKBaVThJ9vmqQxAmQl0GQJ_k81eUkg>
Please contact support@xxxxxxxxxxxxxxxxxxxx<mailto:support@xxxxxxxxxxxxxxxxxxxx> for any subscription related questions.
[CAUTION! This email originated outside of the organization. Please do not open attachments or click links from an unknown or suspicious origin.]
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx<mailto:MIDRANGE-L@xxxxxxxxxxxxxxxxxx>
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l<
https://shared.outlook.inky.com/link?domain=lists.midrange.com&t=h.eJw1zEEOwiAQheGrGNZSKK3YuvIqtIV20gEMDDHReHdF4_r973uykpBdDmwjuuWLEAiZcuNhSSastpmjF94AehO-EwQXxX_lyI4Httd73mMh7lIB4tFx2iy3JtEm1uyBtquL9MOklnLQJzV20sx20U7OfbtMSvat7QZ5Fq0elBzUqFXTj9W31V_vgFNJ4UqRDE7wcAUdIHobqLo1XD5hKIivN-AxRYo.MEQCIH0vfnM2X05BIsLu4qAn1AJt3RIia7OEyn1ed-p0eLq6AiAPDB6dlN_JkuY7_7nLjpmXvxLU_zviTPI8LzkGMebSjA>
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx<mailto:MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx>
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.<
https://shared.outlook.inky.com/link?domain=archive.midrange.com&t=h.eJw1jEsOgjAUAK9iurYfClZgxVVKP7ThQU151UTj3bUxLieZmRcpGch4IgHxdoyc62xCvDu2RZv1vjhm0sb_QIGR84msNTjWVJD6XCLS5CkGR53OGPhybBHD5BP-YqGE6NVFDq3QxlnlhekaO0vRNa7txZU3qpeil4OSrBvq39X_8ogwl7xPmFDDHJ--gI8Am9uxfqtov-JeAN4fW0w_xg.MEQCIAOGYopnq13zZ_dgsQhwxlpocwYE45L5BdlaFcqMa6yDAiB_u5Fv0u9b0xrLGKBaVThJ9vmqQxAmQl0GQJ_k81eUkg>
Please contact support@xxxxxxxxxxxxxxxxxxxx<mailto:support@xxxxxxxxxxxxxxxxxxxx> for any subscription related questions.
midrange.com
