|
On Apr 21, 2023, at 9:18 AM, Greg Wilburn <gwilburn@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
George,
We are on v7r3 and have NETSRVCMD library. I don't recall if I had to download that separately, or if it was part of a Tech Refresh.
https://www.ibm.com/support/pages/manage-ibm-i-netserver-without-navig
ator-go-nets
You asked for a solution to reduce disabled netserver passwords. I gave you what works for us. We worked with IBM on this. You're welcome to take my advice or leave it.
Our experience is that it's easier for a person to remember ONE password, than two (especially when it's difficult for a user to know which system they are actually accessing).
Regardless of what you do.. I urge you to go to PWDLVL 3... We are a small company of just over 200... our password requirements on both Windows and IBM i are long and follow the recommended complexity and change intervals.
Two years ago, we were at PWDLVL 1 - the switch to 3 was the easiest security measure we have taken.
Greg
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
George Smith
Sent: Friday, April 21, 2023 9:28 AM
To: Midrange Systems Technical Discussion
<midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: [EXTERNAL] CPIB682 - User profile disabled for...
Greg,
I must assume that your NETSRVCMD is a V7R5 library. Also, even if I go to PWDLVL 3 my users will have to keep their passwords in sync? None of the documentation addresses that they must stay in sync to keep from disabling the Network Neighborhood.
George.....
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Greg Wilburn
Sent: Friday, April 21, 2023 8:16 AM
To: Midrange Systems Technical Discussion
<midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: [EXTERNAL] CPIB682 - User profile disabled for...
ADDLIBLE NETSRVCMD then GO NETS, option 12 This is easier than using
Navigator to reset users. Now to fix the real problem: We use the IFS
Extensively - users accessing for a variety of reasons. 1. Go External
(gwilburn@xxxxxxxxxxxxxxxxxxxxxxx<mailto:gwilburn@totalbizfulfillment.
com>) Report This
Email<https://protection.inkyphishfence.com/report?id=c2tvdXQtZnJ1aXQt
b2YtdGhlLWVhcnRoL2dzbWl0aEBmb3RlLmNvbS8wNjAwODY1MjkzMGFjZWQ2ZjBjNDFkYj
IwNDFlMzgwNy8xNjgyMDgyOTYyLjQ5#key=f7bf6190320aea70bc922d8131a78f76>
FAQ<https://getskout.com/emailprotectionfaq/> Skout Email
Protection<https://getskout.com/emailprotection/>
ADDLIBLE NETSRVCMD then GO NETS, option 12
This is easier than using Navigator to reset users.
Now to fix the real problem:
We use the IFS Extensively - users accessing for a variety of reasons.
1. Go to Password level 3. If you're not there, shame on you. Such
an easy security enhancement
2. Have your users synchronize their windows & IBM password - when
they change one, change the other to match exactly
3. On the PC: Open Credential Manager (search for it). Delete any
saved Windows Credentials for the IBM I - windows will use the
"windows password" to connect to the IFS
Know that a SINGLE click on an IFS folder with the wrong password will disable the user in Netserver. The PC attempts to connect several times if unsuccessful.
You will still get some people disabling themselves - usually when they change their password after having already connected to the IBM i. If the windows password is changed at logon, then the IBM i password changed before accessing the IFS they will be fine.
HTH,
Greg
-----Original Message-----
From: MIDRANGE-L
<midrange-l-bounces@xxxxxxxxxxxxxxxxxx<mailto:midrange-l-bounces@lists
.midrange.com>> On Behalf Of Åke Olsson
Sent: Friday, April 21, 2023 5:22 AM
To:
midrange-l@xxxxxxxxxxxxxxxxxx<mailto:midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] CPIB682 - User profile disabled for...
One specific user has constant issues with being disabled for access
to IFS
folders through windows client.
He claims adamantly that the correct password is used and has changed
from
using a script to attaching the folders in windows explorer.
Doing constant resets using the navigator is getting to be quite a chore...
Ideas? Any ideas??
/Ake Olsson/
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email:
MIDRANGE-L@xxxxxxxxxxxxxxxxxx<mailto:MIDRANGE-L@xxxxxxxxxxxxxxxxxx>
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l<https://shared.
outlook.inky.com/link?domain=lists.midrange.com&t=h.eJw1zEEOwiAQheGrGN
ZSKK3YuvIqtIV20gEMDDHReHdF4_r973uykpBdDmwjuuWLEAiZcuNhSSastpmjF94AehO-
EwQXxX_lyI4Httd73mMh7lIB4tFx2iy3JtEm1uyBtquL9MOklnLQJzV20sx20U7OfbtMSv
at7QZ5Fq0elBzUqFXTj9W31V_vgFNJ4UqRDE7wcAUdIHobqLo1XD5hKIivN-AxRYo.MEQC
IH0vfnM2X05BIsLu4qAn1AJt3RIia7OEyn1ed-p0eLq6AiAPDB6dlN_JkuY7_7nLjpmXvx
LU_zviTPI8LzkGMebSjA>
or email:
MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx<mailto:MIDRANGE-L-request@lists.
midrange.com>
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.<https://shared.outlook.inky.c
om/link?domain=archive.midrange.com&t=h.eJw1jEsOgjAUAK9iurYfClZgxVVKP7
ThQU151UTj3bUxLieZmRcpGch4IgHxdoyc62xCvDu2RZv1vjhm0sb_QIGR84msNTjWVJD6
XCLS5CkGR53OGPhybBHD5BP-YqGE6NVFDq3QxlnlhekaO0vRNa7txZU3qpeil4OSrBvq39
X_8ogwl7xPmFDDHJ--gI8Am9uxfqtov-JeAN4fW0w_xg.MEQCIAOGYopnq13zZ_dgsQhwx
lpocwYE45L5BdlaFcqMa6yDAiB_u5Fv0u9b0xrLGKBaVThJ9vmqQxAmQl0GQJ_k81eUkg>
Please contact support@xxxxxxxxxxxxxxxxxxxx<mailto:support@xxxxxxxxxxxxxxxxxxxx> for any subscription related questions.
[CAUTION! This email originated outside of the organization. Please do
not open attachments or click links from an unknown or suspicious
origin.]
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email:
MIDRANGE-L@xxxxxxxxxxxxxxxxxx<mailto:MIDRANGE-L@xxxxxxxxxxxxxxxxxx>
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l<https://shared.
outlook.inky.com/link?domain=lists.midrange.com&t=h.eJw1zEEOwiAQheGrGN
ZSKK3YuvIqtIV20gEMDDHReHdF4_r973uykpBdDmwjuuWLEAiZcuNhSSastpmjF94AehO-
EwQXxX_lyI4Httd73mMh7lIB4tFx2iy3JtEm1uyBtquL9MOklnLQJzV20sx20U7OfbtMSv
at7QZ5Fq0elBzUqFXTj9W31V_vgFNJ4UqRDE7wcAUdIHobqLo1XD5hKIivN-AxRYo.MEQC
IH0vfnM2X05BIsLu4qAn1AJt3RIia7OEyn1ed-p0eLq6AiAPDB6dlN_JkuY7_7nLjpmXvx
LU_zviTPI8LzkGMebSjA>
or email:
MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx<mailto:MIDRANGE-L-request@lists.
midrange.com>
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.<https://shared.outlook.inky.c
om/link?domain=archive.midrange.com&t=h.eJw1jEsOgjAUAK9iurYfClZgxVVKP7
ThQU151UTj3bUxLieZmRcpGch4IgHxdoyc62xCvDu2RZv1vjhm0sb_QIGR84msNTjWVJD6
XCLS5CkGR53OGPhybBHD5BP-YqGE6NVFDq3QxlnlhekaO0vRNa7txZU3qpeil4OSrBvq39
X_8ogwl7xPmFDDHJ--gI8Am9uxfqtov-JeAN4fW0w_xg.MEQCIAOGYopnq13zZ_dgsQhwx
lpocwYE45L5BdlaFcqMa6yDAiB_u5Fv0u9b0xrLGKBaVThJ9vmqQxAmQl0GQJ_k81eUkg>
Please contact support@xxxxxxxxxxxxxxxxxxxx<mailto:support@xxxxxxxxxxxxxxxxxxxx> for any subscription related questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
