ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzamv_5.4.0.1/rzamvuserprofdisable.htm

66 lines
4.4 KiB
HTML
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Disable user profiles automatically" />
<meta name="abstract" content="If someone is gone from the organization for an extended period, disable (deactivate) that users profile." />
<meta name="description" content="If someone is gone from the organization for an extended period, disable (deactivate) that users profile." />
<meta name="DC.Relation" scheme="URI" content="rzamvremoveuser.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="userprofdisable" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Disable user profiles automatically</title>
</head>
<body id="userprofdisable"><a name="userprofdisable"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Disable user profiles automatically</h1>
<div><p>If someone is gone from the organization for an extended period,
disable (deactivate) that users profile. </p>
<p>You can use the Analyze Profile Activity (<span class="cmdname">ANZPRFACT</span>)
command to regularly disable user profiles that have been inactive for a specified
number of days. When you use the <span class="cmdname">ANZPRFACT</span> command, you
specify the number of inactive days that the system looks for. The system
looks at the last used date, the restore date, and the creation date for the
user profile. </p>
<p>Once you have specified a value for the <span class="cmdname">ANZPRFACT</span> command,
the system schedules a job to run weekly at 1 a.m. (starting with the day
after you first specified a value). The job examines all profiles and disables
inactive profiles. You do not need to use the <span class="cmdname">ANZPRFACT</span> command
again unless you want to change the number of inactive days. </p>
<p>You can use the Change Active Profile List (<span class="cmdname">CHGACTPRFL</span>)
command to make some profiles exempt from <span class="cmdname">ANZPRFACT</span> processing.
The <span class="cmdname">CHGACTPRFL</span> command creates a list of user profiles
that the <span class="cmdname">ANZPRFACT</span> command will not disable, no matter
how long those profiles have been inactive. </p>
<p>When the system runs the <span class="cmdname">ANZPRFACT</span> command, it writes
a CP entry in the audit journal for each user profile that is disabled. You
can use the <span class="cmdname">DSPAUDJRNE</span> command to list the user profiles
that are newly disabled.</p>
<div class="remember"><span class="remembertitle">Remember:</span> The system writes audit entries only if the QAUDCTL
value specifies *AUDLVL and the QAUDLVL system value specifies *SECURITY.</div>
<p>Another method for checking to ensure that user profiles are being disabled
on your planned schedule is to use the Print User Profile (<span class="cmdname">PRTUSRPRF</span>)
command. When you specify *PWDINFO for the report type, the report includes
the status of each selected user profile.</p>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvremoveuser.htm" title="This article describes how to remove a user from the system, explains why it is important, and provides step-by-step instructions.">Remove a user from the system</a></div>
</div>
</div>
</body>
</html>