Iseries Administration And Operations - IBM i series Handbook

– Prevent a specific user from running the Client Access Data Transfer to upload or
download data. Users can be restricted from creating a new file but allowing them to
append data to an existing file, or they can use only predefined transfer requests.
Additionally you could restrict users from running batch uploads/downloads, GUI
uploads/downloads, autostart uploads/downloads, use of the Excel add-in, or restrict
which iSeries a request may be run against in networks with multiple iSeries servers.
– Restrict the use of Operations Navigator.
– Limit the number of PC5250 sessions a user can start on a per-system basis.
– Restrict iSeries and iSeries ODBC driver or OLE DB usage on a per-system basis.
– Disable users from changing their passwords or modifying the password expiration
warning time frame.
– Pre-configure a user's system connectivity; then when the user starts a Client Access
function, only pre-configured systems would be available for use.
– Define policies by connection environment. For example, when a user is connecting
from the "home" environment, SSL is required. However when using an "office"
environment, SSL is not needed.
Each time a PC is started, the system policies are downloaded from the server to the PC.
Policy restrictions can be enforced on a per-user or per-PC basis. This function can be
used with any supported OS/400 release.
New with V5R1
With Service Pack Installation, Client Access Express service pack PTFs can be applied to
the Client Access Express installation image. Then when users install Client Access Express
from the iSeries server to the PC using iSeries NetServer, the Client Access Express product
including the latest service pack will be installed in one step, rather than having the two-step
install process of the client install followed by the service pack install.
One way that administrators can improve the security of their environment is by limiting user
access to their Windows 2000 or Windows NT PCs. This can be done by using the Windows
NT file system (NTFS), and then restricting specific users from being able to write to selected
directories. Client Access Express now has enhanced support for these environments,
ensuring that user-writable files are stored in user-writable locations in most cases. Previous
versions of Client Access Express required users to perform extensive workarounds for these
environments.

iSeries Administration and Operations

Operations Navigator is the graphical interface for administering and operating iSeries
systems and is packaged with Client Access Express for Windows.
IBM Licensed Programs: Networking Products
IBM Licensed Programs: Networking Products
693