Re: [EXTERNAL] CPIB682 - User profile disabled for...

The reason the documentation doesn't say they have to stay in sync may be
because you can connect using different credentials. For example, from a
DOS prompt you could use
net use Z: \\DEVICE-NAME-OR-IP\SHARED-FOLDER PASSWORD /user:USERNAME
/persistent:yes
See the following:
https://pureinfotech.com/map-network-drive-command-prompt-windows-10/
but keeping them in sync versus storing the credentials in the connection
is often the preferred method.


On Fri, Apr 21, 2023 at 9:27 AM George Smith <gsmith@xxxxxxxx> wrote:

Greg,

I must assume that your NETSRVCMD is a V7R5 library. Also, even if I go to
PWDLVL 3 my users will have to keep their passwords in sync? None of the
documentation addresses that they must stay in sync to keep from disabling
the Network Neighborhood.

George.....

From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Greg Wilburn
Sent: Friday, April 21, 2023 8:16 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: [EXTERNAL] CPIB682 - User profile disabled for...

ADDLIBLE NETSRVCMD then GO NETS, option 12 This is easier than using
Navigator to reset users. Now to fix the real problem: We use the IFS
Extensively - users accessing for a variety of reasons. 1. Go
External (gwilburn@xxxxxxxxxxxxxxxxxxxxxxx<mailto:
gwilburn@xxxxxxxxxxxxxxxxxxxxxxx>)
Report This Email<
https://protection.inkyphishfence.com/report?id=c2tvdXQtZnJ1aXQtb2YtdGhlLWVhcnRoL2dzbWl0aEBmb3RlLmNvbS8wNjAwODY1MjkzMGFjZWQ2ZjBjNDFkYjIwNDFlMzgwNy8xNjgyMDgyOTYyLjQ5#key=f7bf6190320aea70bc922d8131a78f76>
FAQ<https://getskout.com/emailprotectionfaq/> Skout Email Protection<
https://getskout.com/emailprotection/>


ADDLIBLE NETSRVCMD then GO NETS, option 12

This is easier than using Navigator to reset users.



Now to fix the real problem:

We use the IFS Extensively - users accessing for a variety of reasons.



1. Go to Password level 3. If you're not there, shame on you. Such an
easy security enhancement

2. Have your users synchronize their windows & IBM password - when they
change one, change the other to match exactly

3. On the PC: Open Credential Manager (search for it). Delete any saved
Windows Credentials for the IBM I - windows will use the "windows password"
to connect to the IFS



Know that a SINGLE click on an IFS folder with the wrong password will
disable the user in Netserver. The PC attempts to connect several times if
unsuccessful.



You will still get some people disabling themselves - usually when they
change their password after having already connected to the IBM i. If the
windows password is changed at logon, then the IBM i password changed
before accessing the IFS they will be fine.



HTH,

Greg



-----Original Message-----

From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx<mailto:
midrange-l-bounces@xxxxxxxxxxxxxxxxxx>> On Behalf Of Åke Olsson

Sent: Friday, April 21, 2023 5:22 AM

To: midrange-l@xxxxxxxxxxxxxxxxxx<mailto:midrange-l@xxxxxxxxxxxxxxxxxx>

Subject: [EXTERNAL] CPIB682 - User profile disabled for...



One specific user has constant issues with being disabled for access to IFS

folders through windows client.







He claims adamantly that the correct password is used and has changed from

using a script to attaching the folders in windows explorer.







Doing constant resets using the navigator is getting to be quite a chore...







Ideas? Any ideas??







/Ake Olsson/







--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx<mailto:
MIDRANGE-L@xxxxxxxxxxxxxxxxxx>

To subscribe, unsubscribe, or change list options,

visit: https://lists.midrange.com/mailman/listinfo/midrange-l<
https://shared.outlook.inky.com/link?domain=lists.midrange.com&t=h.eJw1zEEOwiAQheGrGNZSKK3YuvIqtIV20gEMDDHReHdF4_r973uykpBdDmwjuuWLEAiZcuNhSSastpmjF94AehO-EwQXxX_lyI4Httd73mMh7lIB4tFx2iy3JtEm1uyBtquL9MOklnLQJzV20sx20U7OfbtMSvat7QZ5Fq0elBzUqFXTj9W31V_vgFNJ4UqRDE7wcAUdIHobqLo1XD5hKIivN-AxRYo.MEQCIH0vfnM2X05BIsLu4qAn1AJt3RIia7OEyn1ed-p0eLq6AiAPDB6dlN_JkuY7_7nLjpmXvxLU_zviTPI8LzkGMebSjA

or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx<mailto:
MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx>

Before posting, please take a moment to review the archives

at https://archive.midrange.com/midrange-l.<
https://shared.outlook.inky.com/link?domain=archive.midrange.com&t=h.eJw1jEsOgjAUAK9iurYfClZgxVVKP7ThQU151UTj3bUxLieZmRcpGch4IgHxdoyc62xCvDu2RZv1vjhm0sb_QIGR84msNTjWVJD6XCLS5CkGR53OGPhybBHD5BP-YqGE6NVFDq3QxlnlhekaO0vRNa7txZU3qpeil4OSrBvq39X_8ogwl7xPmFDDHJ--gI8Am9uxfqtov-JeAN4fW0w_xg.MEQCIAOGYopnq13zZ_dgsQhwxlpocwYE45L5BdlaFcqMa6yDAiB_u5Fv0u9b0xrLGKBaVThJ9vmqQxAmQl0GQJ_k81eUkg

Please contact support@xxxxxxxxxxxxxxxxxxxx<mailto:
support@xxxxxxxxxxxxxxxxxxxx> for any subscription related questions.



[CAUTION! This email originated outside of the organization. Please do not
open attachments or click links from an unknown or suspicious origin.]



--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx<mailto:
MIDRANGE-L@xxxxxxxxxxxxxxxxxx>

To subscribe, unsubscribe, or change list options,

visit: https://lists.midrange.com/mailman/listinfo/midrange-l<
https://shared.outlook.inky.com/link?domain=lists.midrange.com&t=h.eJw1zEEOwiAQheGrGNZSKK3YuvIqtIV20gEMDDHReHdF4_r973uykpBdDmwjuuWLEAiZcuNhSSastpmjF94AehO-EwQXxX_lyI4Httd73mMh7lIB4tFx2iy3JtEm1uyBtquL9MOklnLQJzV20sx20U7OfbtMSvat7QZ5Fq0elBzUqFXTj9W31V_vgFNJ4UqRDE7wcAUdIHobqLo1XD5hKIivN-AxRYo.MEQCIH0vfnM2X05BIsLu4qAn1AJt3RIia7OEyn1ed-p0eLq6AiAPDB6dlN_JkuY7_7nLjpmXvxLU_zviTPI8LzkGMebSjA

or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx<mailto:
MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx>

Before posting, please take a moment to review the archives

at https://archive.midrange.com/midrange-l.<
https://shared.outlook.inky.com/link?domain=archive.midrange.com&t=h.eJw1jEsOgjAUAK9iurYfClZgxVVKP7ThQU151UTj3bUxLieZmRcpGch4IgHxdoyc62xCvDu2RZv1vjhm0sb_QIGR84msNTjWVJD6XCLS5CkGR53OGPhybBHD5BP-YqGE6NVFDq3QxlnlhekaO0vRNa7txZU3qpeil4OSrBvq39X_8ogwl7xPmFDDHJ--gI8Am9uxfqtov-JeAN4fW0w_xg.MEQCIAOGYopnq13zZ_dgsQhwxlpocwYE45L5BdlaFcqMa6yDAiB_u5Fv0u9b0xrLGKBaVThJ9vmqQxAmQl0GQJ_k81eUkg

Please contact support@xxxxxxxxxxxxxxxxxxxx<mailto:
support@xxxxxxxxxxxxxxxxxxxx> for any subscription related questions.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.