Restrict users with policies and application administration

iSeries™ Access for Windows® provides multiple methods of setting up restrictions and profiles. These include policies that can be set using Microsoft's policy editor, and the Application Administration function of iSeries Navigator.

iSeries Access for Windows supports two primary methods for implementing administrative control over your network: Application Administration and policies. Application Administration bases restrictions on the iSeries user profile, and is administered through iSeries Navigator. Policies mandate configuration settings and restrictions, and can apply to both specific PCs and individual Windows user profiles. As such, they offer greater granularity than Application Administration, but are significantly more difficult to set up and administer. In order to use policies, you must download the Microsoft® System Policy Editor and configure your PCs and iSeries server for storage, retrieval, and application of policies you set. Generally, Application Administration is preferable if all of the functions you want to restrict are Application Administration-enabled, and if the version of the i5/OS™ server being used supports Application Administration.

For V5R2, Application Administration added support for Central Settings. The Central settings support in Application Administration provides the ability to manage most of the functions iSeries Access for Windows controls through the following policy templates:

For more information about Application Administration, refer to Application Administration.

To learn about policies, refer to the following topics:

Related concepts
Microsoft System Policy Editor
Application Administration