How to ensure that no one can sign on with the NetIQ provided profiles PSOBJOWNS and PSOBJOWN? (NETIQKB30821)

  • 7730821
  • 02-Feb-2007
  • 23-Sep-2013

Environment

VigilEnt Security Agent for iSeries 5.4/7.0
VigilEnt Security Agent for iSeries 7.5
NetIQ Security Solutions for iSeries 8.0
NetIQ Security Solutions for iSeries 8.1

Situation

How to ensure that no one can sign on with the NetIQ provided profiles PSOBJOWNS and PSOBJOWN?

What profile parameters to use so no one can sign on with PSOBJOWNS and PSOBJOWN?

Resolution

The profiles are shipped with the following parameters, ensuring no one can sign on:

  • Initial Menu = *SIGNOFF
  • Initial Program = *NONE
  • Password set to *NONE

 These should be reviewed to be sure they are not changed. The 'Limit Capabilities' value should not be changed from *NO. The consequences are unpredictable.



Additional Information

Formerly known as NETIQKB30821