Karl, To literally do what you want. The easiest way would be to WRKUSRPRF *ALL. Then put a '2' on each profile and then on the command line put: PWDEXP(*YES) bill Karls wrote: Is it possible to set all User Profile passwords to expire globally? Or do I have to touch each profile in order to change it? (For instance I would like all passwords to expire on next Monday because a system operator will be leaving the company.....but I really don't want to have to touch each user profile to do this.) Any help would be appreciated. Thanks, KARL
Unconfigured Ad Widget
Collapse
Announcement
Collapse
No announcement yet.
Set Password Expire on all User Profiles
Collapse
X
-
Set Password Expire on all User Profiles
Karl, Just a a follow-on comment. Setting all of the passwords does not completely address the condition you are trying to head off. I will assume you want to expire everyone's password so that the operator can not come back and use a profile and password that he may have known while working there. You have two exposures, 1. Unless you have set the system to not allow previous passwords, nothing prevents the users from setting their password back to what it was. 2. The passwords will remain what they were until that profile signs on the next time. This works for everyone that signs on "soon" but what about those on vacation, or the "Q" profiles? I don't have an easy answer to address these points, I just wanted to make sure that you were aware of them. Bill Karl Schosser wrote: Is it possible to set all User Profile passwords to expire globally? Or do I have to touch each profile in order to change it? (For instance I would like all passwords to expire on next Monday because a system operator will be leaving the company.....but I really don't want to have to touch each user profile to do this.) Any help would be appreciated. Thanks, KARL
-
Set Password Expire on all User Profiles
On Sunday, March 28, 1999, 06:30 PM, Tim Raczek wrote: I'd like to go further with the 8 character profile. We at our company are setting up new passwords for people in a way that gives consistancy. First letter of first name followed by last name. My boss wants to have the paswords be 10 characters long. We will not be using OfficeVision and no directories to wory about. My question is would we be limiting ourselves in any way if we went to 10 character profiles instead of 8? No, if you ever need to add a directory entry you can always associate the user profile as follows; ADDDIRE USRID(ENTRY001 MYAS400) USRD(DESCRIPTION FOR FRODRIGUEZ) USER(FRODRIGUEZ) ENTRY001 will be the directory entry name that you want to assign, in this case it could be FRODRIGU. When two go together one sees before the other.
Comment
-
Set Password Expire on all User Profiles
You could try ANZPRFACT (analyze profile activity). This will disable all profiles that have not been used for "x" days. The command accepts from 1 to 366 days. I suppose you could run this command at 12:01am and specify 1 day. You can exempt some profiles from being disabled by using the command CHGACTPRFL. The IBM supplied user profiles cannot be disabled with ANZPRFACT. Chris
Comment
Comment