Re: Commands for Limited Users
Steve Martinson <smartfamily2003-/[email protected]>
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Message-ID | <[email protected]> |
Dave, I agree with Phil's assessment of the benefits gained on securing the sign-on display by properly controlling the LMTCPB parameter of your users. John was right to point out the limitation of this control with regard to remote access, however, Phil was indeed addressing the question at hand regarding the ability to control command line usage within the traditional display session environment. BTW, if you do end up extrapolating this issue out to the remote access (exit point) security arena, be sure to do your homework before choosing an exit program vendor. I know of some deficiencies and usability issues with some of them. Feel free to contact me offline if you would like to know more. Best regards, Steven W. Martinson, CISSP, CISM Consultant - Servique, LLC Cell 281.546.9836 www.servique.com 4801 Woodway Drive, Suite 300E Houston, TX 77056 "Uniquely Qualified" --------------------------------- All-new Yahoo! Mail - Fire up a more powerful email and get things done faster. _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.