Enable a disabled user profile

This topic describes how to enable a disabled user profile, explains why it is important, and provides step-by-step instructions.

If the QMAXSIGN and QMAXSGNACN system values on your system are set up to disable a user profile after too many signon attempts, you may want someone like a system operator to enable the profile by changing the status to *ENABLE. However, to enable a user profile, you must have *SECADM special authority and *OBJMGT and *USE authority to the user profile. Normally, a system operator does not have *SECADM special authority.

A solution is to use a simple program which adopts authority:

Create a CL program owned by a user who has *SECADM special authority and *OBJMGT and *USE authority to the user profiles on the system. Adopt the authority of the owner when the program is created by specifying USRPRF(*OWNER).
Use the EDTOBJAUT command to make the public authority to the program *EXCLUDE and give the system operators *USE authority.
The operator enables the profile by entering: CALL ENABLEPGM profile-name

The main part of the ENABLEPGM program looks like this:

PGM &PROFILE 
DCL VAR(&PROFILE) TYPE(*CHAR) LEN(10) 
CHGUSRPRF USRPRF(&PROFILE) STATUS(*ENABLED) 
ENDPGM

Listing User Profiles

You can display and print information about user profiles in a variety of formats. Displaying an Individual Profile To display the values for an individual user profile, use option 5 (Display) from either the Work with User Enrollment display or the Work with User Profiles display. Or, you can use the Display User Profile (DSPUSRPRF) command.

Listing All Profiles

Use the Display Authorized Users (DSPAUTUSR) command to either print or display all the user profiles on the system. The sequence (SEQ) parameter on the command allows you to sort the list either by profile name or by group profile.

              Display Authorized Users 

                   Password 
Group     User     Last     No 
Profile   Profile  Changed  Password  Text 
DPTSM    
          ANDERSR  08/04/0x           Anders, Roger 
          VINCENT  09/15/0x           Vincent, Mark 
DPTWH 
          ANDERSR  08/04/0x           Anders, Roger 
          HOGANR   09/06/0x           Hogan, Richard 
          QUINN    09/06/0x           Quinn, Rose 
QSECOFR 
          JONESS   09/20/0x           Jones, Sharon 
          HARRISON 08/29/0x           Harrison, Ken 
*NO GROUP 
          DPTSM    09/05/0x    X      Sales and Marketing 
          DPTWH    09/18/0x    X      Warehouse

By pressing F11, you are able to see which user profiles have passwords defined for use at the various password levels.

             Display Authorized Users 

                   Password  Password   Password   Password
User      Group    Last      for level  for level     for
Profile   Profile  Changed    0 or 1     2 or 3    NetServer
ANGELA             04/21/0x    *YES       *NO         *YES 
ARTHUR             07/07/0x    *YES       *YES        *YES 
CAROL1             05/15/0x    *YES       *YES        *YES 
CAROL2             05/15/0x    *NO        *NO         *NO 
CHUCKE             05/18/0x    *YES       *NO         *YES 
DENNISS            04/20/0x    *YES       *NO         *YES 
DPORTER            03/30/0x    *YES       *NO         *YES 
GARRY              08/04/0x    *YES       *YES        *YES
JANNY              03/16/0x    *YES       *NO         *YES

Types of User Profile Displays

The Display User Profile (DSPUSRPRF) command provides several types of displays and listings:

Some displays and listings are available only for individual profiles. Others can be printed for all profiles or a generic set of profiles. Consult online information for details about the available types.
You can create an output file from some displays by specifying output(*OUTFILE). Use a query tool or program to produce customized reports from the output file.