User profile authority requirements

You can secure IBM® i NetServer by controlling user profile authorities.

IBM i NetServer authenticates client files and print requests that are based on the user identity (user ID) and password that are used in the Windows desktop logon. If a user profile matches the Windows desktop client user ID, then the passwords are checked. If the passwords do not match, IBM i NetServer prompts the client to enter the correct one.

Note: If the Windows user ID is longer than 10 characters (also the maximum length of the user profile name), then IBM i NetServer truncates the Windows user ID to 10 characters and attempts to match it with a user profile. For example, a user profile called ADMINISTRA can be created to match the Windows Administrator user without requiring guest support.

In order to access IBM i NetServer shared resources, clients might not need a user profile that matches their Windows desktop user. IBM i NetServer can provide guest support for those clients that need only basic file and print services. This support is not automatically enabled.

To configure this support, follow these steps:

  1. Right-click the IBM i NetServer icon and select Properties.
  2. Select the Advanced tab.
  3. Click the Next Start button.
  4. Specify the guest user profile name in the appropriate field.
Note: You need *IOSYSCFG and *SECADM special authorities to change the IBM i NetServer guest configuration. Changes take effect the next time IBM i NetServer is started. In addition, the guest user profile should not have any special authorities and should have access only to those integrated file system directories and output queues that are used for basic file and print services.
Parent topic: IBM i NetServer security