Re: Question on QTVDEVICE job entering incorrect password

[rob@xxxxxxxxx]

I disagree.  I understand what you are saying, but people should do an 
ALT-CTL-DEL and lock their workstations when leaving their desk.  Everyone 
here has an Active Directory entry that enforces a 15 minute automatic on 
that.  Some, including me, have it choked down to 1 minute.  (Yes, taking 
the computer to give a presentation at the LUG did involve someone poking 
a key on a frequent basis to stop the screen dim.)

We are implementing EIM.  We do NOT allow some users to sign on via their 
5250 screen directly.  Instead they HAVE to use Kerberos to get access to 
the i5.  Then the "bypass signon" is how to get the 5250.  Their i5 user 
profile is LCLPWDMGT(*NO).  Their AD password is selected at random and 
they are never told it.  Instead it is synced up using biometrics.

This allows "Sally" the ability to have multiple sessions but not be 
sharing her password throughout the office.  Well, I suppose she could 
biometrically enter in at each workstation and then have them work the 
rest of the day.  Rather a pain though if she leaves for a spell and the 
other person left their workstation inactive for 15 minutes.  They're 
stuck until she brings the necessary body part back on site.

Rob Berendt