TechTalk: Secure disconnects for PC Support users.

Security - Other
Typography
  • Smaller Small Medium Big Bigger
  • Default Helvetica Segoe Georgia Times

Q: Whenever PC Support users issue the Start PC Organizer (STRPCO) command, their sessions can no longer be disconnected. The Disconnect Job (DSCJOB) command reports that the session cannot be disconnected. This is difficult to accept from a security standpoint. Do you have any suggestions?

- Loxley Smith

A: According to OS/400 CL Reference V3R1 (SC41-3722, CD-ROM QBKAUP00), Disconnect Job (DSCJOB) has the following restrictions:

1. A job being disconnected must be an interactive job.

2. A job being held cannot be disconnected.

3. A passthrough job cannot be disconnected unless the user has used the system request to return to the source system from the passthrough target.

4. A user must have *JOBCTL authority to disconnect a job.

5. A job cannot be disconnected if PC Organizer is active.

Since, presumably, the point of disconnecting the job is to prevent people from using others' abandoned workstations, you could use the End Job (ENDJOB) command instead of DSCJOB. Or, you could password-protect the PC if it isn't used for a period of time. Most Windows screen savers have this capability.

- Martin Pluth

BLOG COMMENTS POWERED BY DISQUS

LATEST COMMENTS

Support MC Press Online

$0.00 Raised:
$