Considerations for changing QPWDLVL from 0 to 1

Password level 1 allows a system, which doesn't need to communicate with the IBM® i Support for Windows Network Neighborhood (IBM i NetServer), to eliminate the IBM i NetServer LAN manager passwords. IBM i NetServer LAN manager passwords only affect Windows 95/98/ME clients. The LAN manager passwords have been disabled by Windows since Vista so removing them will not affect current versions of Windows. Eliminating unnecessary encrypted passwords from the system increases the overall security of the system.

At QPWDLVL 1, all current, pre-V5R1 password substitution and password authentication mechanisms will continue to work. There is very little potential for breakage except for functions/services that require the IBM i NetServer LAN manager password.

A change to the QPWDLVL system value takes effect at the next IPL. To see the current and pending password level values, use the Display Security Attributes (DSPSECA) command.