93 lines
5.8 KiB
HTML
93 lines
5.8 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Restrict users with policies and application administration" />
|
||
|
|
<meta name="abstract" content="iSeries Access for Windows provides multiple methods of setting up restrictions and profiles. These include policies that can be set using Microsoft's policy editor, and the Application Administration function of iSeries Navigator." />
|
||
|
|
<meta name="description" content="iSeries Access for Windows provides multiple methods of setting up restrictions and profiles. These include policies that can be set using Microsoft's policy editor, and the Application Administration function of iSeries Navigator." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiioverview.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiipoloverview.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiiconfiguration.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiipolicylisting.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiieditor.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../rzaj3/rzaj3overview.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzaiipolicyadm" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Restrict users with policies and application administration</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzaiipolicyadm"><a name="rzaiipolicyadm"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Restrict users with policies and application administration</h1>
|
||
|
|
<div><p>iSeries™ Access
|
||
|
|
for Windows<sup>®</sup> provides
|
||
|
|
multiple methods of setting up restrictions and profiles. These include policies
|
||
|
|
that can be set using Microsoft's policy editor, and the Application Administration
|
||
|
|
function of iSeries Navigator.</p>
|
||
|
|
<p>iSeries Access
|
||
|
|
for Windows supports
|
||
|
|
two primary methods for implementing administrative control over your network:
|
||
|
|
Application Administration and policies. Application Administration bases
|
||
|
|
restrictions on the iSeries user profile, and is administered through iSeries Navigator.
|
||
|
|
Policies mandate configuration settings and restrictions, and can apply to
|
||
|
|
both specific PCs and individual Windows user profiles. As such, they
|
||
|
|
offer greater granularity than Application Administration, but are significantly
|
||
|
|
more difficult to set up and administer. In order to use policies, you must
|
||
|
|
download the Microsoft<sup>®</sup> System Policy Editor and configure your
|
||
|
|
PCs and iSeries server
|
||
|
|
for storage, retrieval, and application of policies you set. Generally, Application
|
||
|
|
Administration is preferable if all of the functions you want to restrict
|
||
|
|
are Application Administration-enabled, and if the version of the i5/OS™ server
|
||
|
|
being used supports Application Administration.</p>
|
||
|
|
<p>For V5R2, Application Administration added support for Central Settings.
|
||
|
|
The Central settings support in Application Administration provides the ability
|
||
|
|
to manage most of the functions iSeries Access for Windows controls
|
||
|
|
through the following policy templates:</p>
|
||
|
|
<ul><li>Runtime restrictions (caerestr.adm)</li>
|
||
|
|
<li>Mandated connection properties (config.adm)</li>
|
||
|
|
<li>Configuration policies (caecfg.adm)</li>
|
||
|
|
</ul>
|
||
|
|
<p>For more information about Application Administration, refer to Application
|
||
|
|
Administration.</p>
|
||
|
|
<p>To learn about policies, refer to the following topics:</p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<ul class="ullinks">
|
||
|
|
<li class="ulchildlink"><strong><a href="rzaiipoloverview.htm">Overview of iSeries Access for Windows policies</a></strong><br />
|
||
|
|
Use iSeries Access
|
||
|
|
for Windows System
|
||
|
|
Policies to restrict users from certain actions, and to suggest or require
|
||
|
|
certain configuration features.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzaiiconfiguration.htm">Set up your system to use policies</a></strong><br />
|
||
|
|
Download a policy file across the network.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzaiipolicylisting.htm">iSeries Access for Windows policy list</a></strong><br />
|
||
|
|
iSeries Access
|
||
|
|
for Windows supports Microsoft System
|
||
|
|
Policies. Administrators can use policies to control which functions and settings
|
||
|
|
are available to each user.</li>
|
||
|
|
</ul>
|
||
|
|
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzaiioverview.htm" title="Use this topic to administer iSeries Access for Windows in your client/server environment.">iSeries Access for Windows: Administration</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relconcepts"><strong>Related concepts</strong><br />
|
||
|
|
<div><a href="rzaiieditor.htm" title="To create your own policy files, you need the Microsoft policy editor.">Microsoft System Policy Editor</a></div>
|
||
|
|
<div><a href="../rzaj3/rzaj3overview.htm">Application Administration</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|