Re: User Profiles

[John Earl <johnearl@xxxxxxxxxxx>]

Johnny,

If you have the System Security Audit Journal (QAUDJRN) enabled, it can track
changes to user profiles.  You can turn the journal on with the CHGSECAUD
command, and specify (at least) that you want to audit *SECURITY events.  If the
journal is already active, issue a CHGSYSVAL to system value QAUDLVL so that it
includes the *SECURITY events.


If you use the CHGSECAUD command, we reccommend that you use the default setting
(*DFTSET) on this command for a broader range of auditing.

The command: CHGSECAUD QAUDCTL(*AUDLVL) QAUDLVL(*DFTSET) will enable the
*AUTFAIL, *CREATE, *DELETE, *SECURITY, and *SAVRST audit levels.

jte




Johnny Helms wrote:

> Is there anyway to get find out who last changed a user profile.
> I tried a dspobjd *usrprf, but there was no information in there
> about who changed it last.  We have a program that automatically
> disabled user profiles after 90 days.  However, I am seeing that
> user profiles are being disabled at random and not because the
> user has disabled their profile with the wrong password.  Any help
> would be much appreciated.
>
> ------Johnny Helms------
> Rock Hill Telephone Co.
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---



--
John Earl                                              johnearl@toolnet.com
PowerTech Toolworks                         206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                    www.400school.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---