AS/400 command line

225 pts.
Tags:
AS/400 Command Line
AS/400 Permissions
what is the command and steps to disable command line access in as400
ASKED: August 18, 2009  7:02 AM
UPDATED: October 12, 2009  3:19 AM

Answer Wiki

Thanks. We'll let you know when a new response is added.

You can do this “On Mass” like this:WRKUSRPRF *ALL

Place a 2 “Change” beside all the profiles you want to change.

Type this on the command line and press Enter.
LMTCPB(*YES)

Now Limit capabilities on all the selected profiles will be chagned to *YES

Limit capabilities (LMTCPB) – Help

Specifies the limit to which the user can control the program, menu,
current library, and the ATTN key handling program values. It also
determines whether the user can run commands from a command line.
This parameter is ignored when the security level is 10.

Note: When creating or changing other users’ user profiles, you
cannot specify values on this parameter that grant greater
capabilities to other users than your own user profile grants to
you. For example, if *PARTIAL is specified for the Limit
capabilities (LMTCPB) parameter in your user profile, you can
specify *PARTIAL or *YES for another user. You cannot specify
*NO for another user.

*YES
The program, menu, and current library values cannot be changed
on the sign-on display. Commands cannot be run when issued from
a command line or by selecting an option from a command grouping
menu such as CMDADD, but can still be run from a command entry
screen. The user cannot change the program, menu, current
library, or the ATTN key program handling values by using the
CHGPRF command.

=========================================================

For completeness, LMTCPB(*YES) doesn’t restrict access to command lines nor does it stop users from entering and executing commands. Rather, it stops users from executing commands that do not have the ALWLMTUSR(*YES) attribute set. Commands such as DSPMSG and DSPJOB are still available. A half dozen or so commands are set by default from IBM. Any other command that has had the attribute set has also been made available. (Subject to authorities.)

Tom

Discuss This Question: 1  Reply

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • CharlieBrowne
    On the USRPRF, you can use the keywork LMTCPB. If you set it to *YES, the user will not be able ot enter command.
    39,875 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following