RE: [Security400] Allowing Someone to Create User Profiles...

["Chuck Lewis" <clewis@xxxxxxxxxx>]

Cool. I've done that before with other stuff but I was thinking
(incorrectly) that a regular user could not do this.

Thanks !

Chuck


-----Original Message-----
From: security400-bounces@xxxxxxxxxxxx
[mailto:security400-bounces@xxxxxxxxxxxx] On Behalf Of
Julio_Domingo@xxxxxxxxxxxxx
Sent: Wednesday, September 24, 2003 8:20 AM
To: Security Administration on the AS400 / iSeries
Cc: security400@xxxxxxxxxxxx; security400-bounces@xxxxxxxxxxxx
Subject: Re: [Security400] Allowing Someone to Create User Profiles...


      The easy way is to write a program or a number of programs and make
the owner QSECOFR and when you create the programs take F4 and use 'USRPRF
*OWNER', the default is *USER.  Change the owner of the programs QSECOFR.
Make sure that the user cannot get to a command line while using the menu
options, since they will still have QSECOFR authority if they can.
      Hope this helps.
                                       
 Julio Domingo