Change NWS Attributes (CHGNWSA)

The Change Network Server Attributes (CHGNWSA) command changes the network server attributes of the system. Many of these attributes can be set on an individual user profile basis using the CHGNWSUSRA command. Many network server commands such as DSPNWSUSR and WRKNWSSTS can specify that information from the network server attributes should be used by specifying *NWSA for a given parameter.

Network server attributes are saved by the Save System (SAVSYS) command. Network server attributes are restored to the system when the operating system is installed.

Restrictions:

  1. This command is shipped with public *EXCLUDE authority. When this command is shipped, authority is issued only to the security officer. The security officer can grant the use of this command to other users.
  2. To make changes to the WNTDMNLST, WNTLCLSVRL parameters, you must have *SECADM special authority.
  3. The Windows domain and server names specified in the WNTDMNLST and WNTLCLSVRL parameters must follow the naming conventions of Windows.

Parameters

Keyword Description Choices Notes
PMTCTL Prompt control *ALL, *WINDOWS, *WINDOWSNT Optional, Key, Positional 1
DFTSVRTYPE Default server type *SAME, *WINDOWS, *WINDOWSNT Optional
WNTDMNLST Windows server domain list Single values: *SAME, *NONE
Other values (up to 64 repetitions): Element list
Optional
Element 1: Domain Character value
Element 2: User template Character value, *NONE
Element 3: Group type *GLOBAL, *LOCAL
WNTLCLSVRL Windows local server list Single values: *SAME, *NONE
Other values (up to 64 repetitions): Element list
Optional
Element 1: Server Character value
Element 2: User template Character value, *NONE

Prompt control (PMTCTL)

Specifies which network server attributes should be prompted for on the command.

*ALL
All parameters are prompted.
*WINDOWS or *WINDOWSNT
Only those parameters that apply to Windows servers are prompted.

Note: *WINDOWS should be used in V5R4 and later releases. The *WINDOWSNT value is supported for compatibility with releases prior to V5R4.

Default server type (DFTSVRTYPE)

Specifies the default server type for the system. This attribute is used primarily as a default for those commands that support multiple network types.

If the default server type is not set, it is defaulted to *WINDOWS.

*SAME
The default server type does not change.
*WINDOWS or *WINDOWSNT
The default server type for the system is set to *WINDOWS.

Note: *WINDOWS should be used in V5R4 and later releases. The *WINDOWSNT value is supported for compatibility with releases prior to V5R4.

Windows server domain list (WNTDMNLST)

Specifies a default list of Windows domains that will be used by the user enrollment support to determine into which Windows domains profiles are enrolled.

Each entry in the list will contain a domain, a user account template name, and a group type. The user account template name is the name of a Windows user identity that is to be used when creating new Windows users.

Up to 64 entries can be specified for this parameter. An entry consists of a value from each of the following elements. A domain name must be entered for each entry and must be unique within the list.

If the WNTDMNLST parameter has never been set, it is defaulted to *NONE.

Single values

*SAME
The value does not change.
*NONE
When *NONE is specified, the default is to not enroll profiles into Windows domains.

Element 1: Domain

'domain-name'
Specify the name of the Windows domain where the user enrollment support will enroll profiles.

Element 2: User template

Specifies the name of a Windows user that can be used as a template when creating new Windows users in the Windows domain.

Note: Changing this value will not affect Windows users that are already enrolled in the domain.

*NONE
No Windows user account template is used when creating a new user identity in the Windows domain.
'User-account-template-name'
Specify the name of a Windows user account to be used when creating new Windows user identities in the domain.

Element 3: Group type

Specifies the type of group to be created in the Windows domain. This element is only used when enrolling group profiles.

*GLOBAL
A global group is created in the Windows domain.
*LOCAL
A local group is created in the Windows domain.

Windows local server list (WNTLCLSVRL)

Specifies a default list of Windows servers that will be used by the user enrollment support to determine in which local Windows servers to enroll user profiles.

Each entry in the list will contain a server name and associated user account template name. The user account template name is the Windows user account to be used when creating new Windows user identities on the server.

Up to 64 entries can be specified for this parameter. An entry consists of a value from each of the following elements. A server name must be entered for each entry and must be unique within the list.

If the WNTLCLSVRL parameter has never been set, it is defaulted to *NONE.

Single values

*SAME
The value does not change.
*NONE
When *NONE is specified, the default is to not enroll user profiles into local Windows servers.

Element 1: Server

'server-name'
Specify the name of a Windows local server where the user enrollment support will enroll user profiles. This server must be a locally configured integrated Windows server.

Element 2: User template

Specifies the name of a Windows user that can be used as a template when creating new Windows user identities on the local server.

*NONE
No Windows user account template is used when creating a new user identity on the Windows server.
'User-account-template-name'
Specify the name of a Windows user account to be used when creating new Windows user identities on the local server.

Examples

Example 1: Setting Network Server Attributes for Windows

CHGNWSA   DFTSVRTYPE(*WINDOWS)
          WNTDMNLST((DMN01 USRTMP1) (DMN02))
          WNTLCLSVRL((LCLSVR1 TMPL1) (LCLSRV2 *NONE))

The default server type is set to *WINDOWS. The default Windows domain list will be set to enroll profiles into domain DMN01 using user account USRTMP1 and into domain DMN02. Any Windows groups that are created in the domain will be created as global groups.

The Windows local server default list will be set to enroll profiles into local server LCLSVR1 using user account template TMPL1 and into local server LCLSRV2.

Error messages

*ESCAPE Messages

CPFA44F
Network server attributes not changed. See previous messages.