Re: [EXTERNAL] CPIB682 - User profile disabled for...

In answer to an earlier question in the thread, do the passwords need to be kept in sync, the answer is yes. Rob’s company invested (heavily) in software to manage authentication so that makes it easier for him, however most folks need to do it manually.

On a slightly different note, password level 3 will wind up saving a good deal of trouble once you’ve gotten past the initial change.


Jim Oberholtzer
Agile Technology Architects

On Apr 21, 2023, at 8:53 AM, Rob Berendt <robertowenberendt@xxxxxxxxx> wrote:

We are using "IBM Security Verify Governance, Identity Manager". When our
users change their passwords in Windows they are automatically changed in
IBM i, Notes, etc
We encourage them to reboot their PC's after changing their passwords.

On Fri, Apr 21, 2023 at 9:16 AM Greg Wilburn <
gwilburn@xxxxxxxxxxxxxxxxxxxxxxx> wrote:

ADDLIBLE NETSRVCMD then GO NETS, option 12
This is easier than using Navigator to reset users.

Now to fix the real problem:
We use the IFS Extensively - users accessing for a variety of reasons.

1. Go to Password level 3. If you're not there, shame on you. Such an
easy security enhancement
2. Have your users synchronize their windows & IBM password - when they
change one, change the other to match exactly
3. On the PC: Open Credential Manager (search for it). Delete any saved
Windows Credentials for the IBM I - windows will use the "windows password"
to connect to the IFS

Know that a SINGLE click on an IFS folder with the wrong password will
disable the user in Netserver. The PC attempts to connect several times if
unsuccessful.

You will still get some people disabling themselves - usually when they
change their password after having already connected to the IBM i. If the
windows password is changed at logon, then the IBM i password changed
before accessing the IFS they will be fine.

HTH,
Greg

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Åke
Olsson
Sent: Friday, April 21, 2023 5:22 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: [EXTERNAL] CPIB682 - User profile disabled for...

One specific user has constant issues with being disabled for access to IFS
folders through windows client.



He claims adamantly that the correct password is used and has changed from
using a script to attaching the folders in windows explorer.



Doing constant resets using the navigator is getting to be quite a chore...



Ideas? Any ideas??



/Ake Olsson/



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

[CAUTION! This email originated outside of the organization. Please do not
open attachments or click links from an unknown or suspicious origin.]

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.