Re: i Access password weirdness

It was just suggested on this list in another thread ("Why require
CTRL+ALT+DEL for XP signon") to _start_ this behavior . . .

Every desktop PC has it's Docs & Settings folder backed up up to a
server 5 days a week, to 5 different locations.

They still sign off Friday night. And I _never_ sign off my PC unless
a reboot is required. Even over the weekend.


On Tue, Oct 20, 2009 at 11:01 AM, Tom Jedrzejewicz
<tomjedrz@xxxxxxxxxxxxxx> wrote:

On Tue, Oct 20, 2009 at 6:54 AM, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx>wrote:

All,

A user has started _not_ logging off at night so he doesn't have to wait
for
his roaming profile to load in the morning.  He closes all applications and
then locks the keyboard.  Next morning he unlocks, starts apps, and away he
goes.

You need to end this behavior .. it will end up causing you problems down
the road.  Log off is when the roaming profile is sync'ed from the local
computer to the domain.  That needs to happen regularly, otherwise the two
versions of the profile get out of sync.  If he has an abnormal shutdown, he
will lose all of the changes to his profile since his last log off.
 Differences between the local and server instances of the profile also
increases the likeliness of the profile getting corrupted. It also
eliminates the biggest benefit of roaming profiles, which is that a user can
log on to any computer and see the same desktop and favorites.

If it takes a long time to log on and log off, you should adjust the
configuration of what is in the profile to make it smaller.

Does this make sense that Windows would supply the old password until he
logs off?  Or do you think the System i Access software cached it
somewhere?  IOW, is this standard Windows behavior in that _any_ app would
be provided the old password until log off/on, or is it an i Access issue?

Yes, it makes sense.  The old password is what he used to authenticate, so
when the session is asked to pass "user and password", it sends the old
password.  However, when Windows is talking to Windows apps which use
standard Windows authentication, it does not use "user and password".
 Instead, it uses the Windows "guid" and relies on the known Windows client
having successfully authenticated the user.

---------
Tom Jedrzejewicz
tomjedrz@xxxxxxxxxxxxxx
--
This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
To post a message email: PcTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/pctech.

--
Jeff Crosby
UniPro FoodService/Dilgard
P.O. Box 13369
Ft. Wayne, IN 46868-3369
260-422-7531
www.dilgardfoods.com

The opinions expressed are my own and not necessarily the opinion of
my company.  Unless I say so.