RE: Mapping Network Drive

["Ingvaldson, Scott" <SIngvaldson@xxxxxxxxxxxx>]

If you allow anonymous access AND have a root share defined you will
probably not be able to stop anyone from mapping a share.  You can remove
PUBLIC *ALL authority and grant specific authorities to the objects and
directories in root and they will not be visible to users with no access.
(Don't remove PUBLIC *ALL from root(/), bad things will happen...)  

Possibly the problem could be using QUSER as the Netserver Guest user ID, I
would recommend creating a new profile with no authorities to use as the
Netserver Guest user ID.

Regards,

Scott Ingvaldson
iSeries System Administrator
GuideOne Insurance Group

-----Original Message-----
date: Mon, 26 Apr 2004 15:42:13 -0500
from: "Shannon ODonnell" <sodonnell@xxxxxxxxxxxxxxxxx>
subject: RE: Mapping Network Drive

Yes.  Not allow anyone to map a network drive, unless they are first
authorized to do so.  The problem I've seen, and that I've had zero
amount of time to research, is that the guest user profile QUSER,
defined on the NETSERVER properties, allows all drive mapping access so
anyone can map a network drive even though I've limited access to the
QPWFSERVER *AUTL.  To add to the mix, there is also a /root share
defined.  :-)   

There may not be a five second solution here, but I thought it was worth
a shot to ask. 

Shannon O'Donnell
   
This message and accompanying documents are covered by the Electronic
Communications Privacy Act, 18 U.S.C. §§ 2510-2521, and contains information
intended for the specified individual(s) only. This information is
confidential. If you are not the intended recipient or an agent responsible
for delivering it to the intended recipient, you are hereby notified that
you have received this document in error and that any review, dissemination,
copying, or the taking of any action based on the contents of this
information is strictly prohibited. If you have received this communication
in error, please notify us immediately by e-mail, and delete the original
message.