Adding my 2 cents to Glenn's comment ....
Be very careful using this command - from personal experience on a test partition.
Especially the "preview => yes".
You'll probably want to review the fields in QSYS2.USER_INFO and
in SYSTOOLS.CHANGE_USER_PROFILE.
Respectfully,
Michael Mayer
IBM i on Power System Admin / VMO Specialist
ERMCO-ECI
2225 Industrial Rd
Dyersburg, Tennessee 38024
Cell, Office and Text Messages: 518.641.8906
Email: michael.mayer@xxxxxxxxxxxxx
https://www.ermco-eci.com
https://ermcopower.com/
IBM i Award Winning Blog Site:
https://ibmireference.blogspot.com
Awarded IBM 2024 Advocate, Contributor, Influencer and IBM i Ready Badges.
------------------------------
message: 4
date: Mon, 9 Dec 2024 13:38:45 -0500
from: Glenn Gundermann <glenn.gundermann@xxxxxxxxx>
subject: Re: Mass revocation of authority
Hi Bill,
This code came from Scott Forstie from IBM.
It does a CHGUSRPRF and disables the profile.
You can modify it for the parameters you want to change.
Set preview to yes to see who will be changed. Set it to no to actually do the update.
select cp.* from QSYS2.USER_INFO,
table (
SYSTOOLS.CHANGE_USER_PROFILE(
P_USER_NAME => AUTHORIZATION_NAME, P_STATUS => '*DISABLED', PREVIEW => 'YES'
)
) cp
where STATUS = '*ENABLED' and
user_creator <> '*IBM' and
USER_DEFAULT_PASSWORD = 'YES';
Yours truly,
Glenn Gundermann
Email: glenn.gundermann@xxxxxxxxx
Cell: (416) 317-3144
On Mon, 9 Dec 2024 at 13:35, Bill and Lisa Howie <blhowie66@xxxxxxxxxxx>
wrote:
Hello all,
We?re doing a comprehensive security review on our IBM I system and
we?re looking at removing the JOBCTL and SPLCTL authority for a large
list of users. I?m working on trying to do this programmatically, and
I thought I had an idea on it but I?ve run into a brick wall. Anyone
every done this and willing to share how? Any info would be much appreciated.
Bill
midrange.com
