ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzaii_5.4.0.1/rzaiipolicyadm.htm

93 lines
5.8 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Restrict users with policies and application administration" />
<meta name="abstract" content="iSeries Access for Windows provides multiple methods of setting up restrictions and profiles. These include policies that can be set using Microsoft's policy editor, and the Application Administration function of iSeries Navigator." />
<meta name="description" content="iSeries Access for Windows provides multiple methods of setting up restrictions and profiles. These include policies that can be set using Microsoft's policy editor, and the Application Administration function of iSeries Navigator." />
<meta name="DC.Relation" scheme="URI" content="rzaiioverview.htm" />
<meta name="DC.Relation" scheme="URI" content="rzaiipoloverview.htm" />
<meta name="DC.Relation" scheme="URI" content="rzaiiconfiguration.htm" />
<meta name="DC.Relation" scheme="URI" content="rzaiipolicylisting.htm" />
<meta name="DC.Relation" scheme="URI" content="rzaiieditor.htm" />
<meta name="DC.Relation" scheme="URI" content="../rzaj3/rzaj3overview.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzaiipolicyadm" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Restrict users with policies and application administration</title>
</head>
<body id="rzaiipolicyadm"><a name="rzaiipolicyadm"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Restrict users with policies and application administration</h1>
<div><p>iSeries™ Access
for Windows<sup>®</sup> provides
multiple methods of setting up restrictions and profiles. These include policies
that can be set using Microsoft's policy editor, and the Application Administration
function of iSeries Navigator.</p>
<p>iSeries Access
for Windows supports
two primary methods for implementing administrative control over your network:
Application Administration and policies. Application Administration bases
restrictions on the iSeries user profile, and is administered through iSeries Navigator.
Policies mandate configuration settings and restrictions, and can apply to
both specific PCs and individual Windows user profiles. As such, they
offer greater granularity than Application Administration, but are significantly
more difficult to set up and administer. In order to use policies, you must
download the Microsoft<sup>®</sup> System Policy Editor and configure your
PCs and iSeries server
for storage, retrieval, and application of policies you set. Generally, Application
Administration is preferable if all of the functions you want to restrict
are Application Administration-enabled, and if the version of the i5/OS™ server
being used supports Application Administration.</p>
<p>For V5R2, Application Administration added support for Central Settings.
The Central settings support in Application Administration provides the ability
to manage most of the functions iSeries Access for Windows controls
through the following policy templates:</p>
<ul><li>Runtime restrictions (caerestr.adm)</li>
<li>Mandated connection properties (config.adm)</li>
<li>Configuration policies (caecfg.adm)</li>
</ul>
<p>For more information about Application Administration, refer to Application
Administration.</p>
<p>To learn about policies, refer to the following topics:</p>
</div>
<div>
<ul class="ullinks">
<li class="ulchildlink"><strong><a href="rzaiipoloverview.htm">Overview of iSeries Access for Windows policies</a></strong><br />
Use iSeries Access
for Windows System
Policies to restrict users from certain actions, and to suggest or require
certain configuration features.</li>
<li class="ulchildlink"><strong><a href="rzaiiconfiguration.htm">Set up your system to use policies</a></strong><br />
Download a policy file across the network.</li>
<li class="ulchildlink"><strong><a href="rzaiipolicylisting.htm">iSeries Access for Windows policy list</a></strong><br />
iSeries Access
for Windows supports Microsoft System
Policies. Administrators can use policies to control which functions and settings
are available to each user.</li>
</ul>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzaiioverview.htm" title="Use this topic to administer iSeries Access for Windows in your client/server environment.">iSeries Access for Windows: Administration</a></div>
</div>
<div class="relconcepts"><strong>Related concepts</strong><br />
<div><a href="rzaiieditor.htm" title="To create your own policy files, you need the Microsoft policy editor.">Microsoft System Policy Editor</a></div>
<div><a href="../rzaj3/rzaj3overview.htm">Application Administration</a></div>
</div>
</div>
</body>
</html>