End user enrollment

You can unenroll an enrolled iSeries user or group from one or more NDS trees or NetWare servers in one of these ways:

• To unenroll an iSeries profile from all NDS trees and NetWare servers, change the NDS tree list to *NONE for that profile:
  1. On the iSeries command line, type CHGNWSUSRA and press F4. The Change Network Server User Attributes display appears.
  2. In the User profile field, specify the name of the user or group that you want to unenroll from your NetWare servers.
  3. When you unenroll group profiles, specify the Profile type as *GROUP.
  4. Specify *NONE for the NDS tree list field and press Enter. iSeries attempts to remove the NetWare object with the same name as the iSeries profile from the NDS trees and NetWare servers on which it was enrolled.
• For iSeries profiles that list NDS trees, rather than using *NWSA to refer to network server attributes, you can remove a specific tree or server from the profile:
  1. On the iSeries command line, type CHGNWSUSRA and press F4. The Change Network Server User Attributes display appears.
  2. In the User profile field, specify the name of the user or group that you want to unenroll from a particular NDS tree.
  3. When you unenroll group profiles, specify the Profile type as *GROUP.
  4. Remove the NDS tree from the NDS tree list for this profile and press Enter. iSeries attempts to delete the NetWare user or group object with the same name as the iSeries profile from the removed trees or servers.
• Unenroll iSeries user profiles that were enrolled only as members of a group by directing iSeries to not propagate group member information for that group. To do this, use the CHGNWSUSRA command to change the PRPGRPMBR parameter from *ALL to *NONE for the iSeries group profile. iSeries attempts to delete the NetWare user or group object with the same name as the iSeries profile from the NDS trees in which the group was enrolled.
• Remove NDS trees from the network server attributes by using the CHGNWSA command (described in Define network server attributes). Doing this causes iSeries to delete those users and groups that specify *NWSA from the removed trees or servers.
• Remove an iSeries user profile from an iSeries group that was enrolled by using the CHGUSRPRF command.

  iSeries attempts to delete the NetWare user object with the same name from all NDS trees in which the group was enrolled if:

  • The user profile was enrolled only as a group member with the PRPGRPMBR(*ALL) parameter and
  • The user profile does not belong to any other groups that were enrolled and
  • You remove that user profile from the group
• Delete an iSeries profile by using the DLTUSRPRF command.

If iSeries can no longer access a NetWare server, it cannot complete these commands to remove an iSeries profile from that server. In this case, the Work with NWS User Enrollment display shows the status of the iSeries profile as either *DLTPND, *DLTRCYPND, or *DLTFAIL. To view an explanation of these status values, put the cursor on the Enrollment status column and press F1 and then F2.

If one of these status values appears, you can remove the entry from the display by using Option 4. iSeries processes the entry as though the delete request completed successfully. If you use option 4 to remove the entry, you must delete the NetWare object from the NDS tree by using the NetWare NETADMIN, NWADMIN, or SYSCON utility.