I had to do a little spelunking as well. The screen(s) have changed since the last time I needed to do admin work. I would make sure that all the out-of-box userids are preserved as is but denied remote login. You can assign the attributes you need to your own (created) userids.
Be careful when assigning privileges. Unless things have changed, a single userid cannot have both Admin and Sysprog authority. That is, you can (could?) assign those privileges without errors, but the same userid will simply not work for all functions. (I have never seen this documented; learned by trial and error.) I have managed with two separate userids for decades. . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-543-6132 Office ⇐=== NEW [email protected] -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Porowski, Kenneth Sent: Tuesday, July 31, 2018 1:02 PM To: [email protected] Subject: (External):Re: HMC Password maintenance for SERVICE account Thank you! I somehow missed that 'details' button. This email message and any accompanying materials may contain proprietary, privileged and confidential information of CIT Group Inc. or its subsidiaries or affiliates (collectively, “CIT”), and are intended solely for the recipient(s) named above. If you are not the intended recipient of this communication, any use, disclosure, printing, copying or distribution, or reliance on the contents, of this communication is strictly prohibited. CIT disclaims any liability for the review, retransmission, dissemination or other use of, or the taking of any action in reliance upon, this communication by persons other than the intended recipient(s). If you have received this communication in error, please reply to the sender advising of the error in transmission, and immediately delete and destroy the communication and any accompanying materials. To the extent permitted by applicable law, CIT and others may inspect, review, monitor, analyze, copy, record and retain any communications sent from or received at this email address. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Jesse 1 Robinson Sent: Tuesday, July 31, 2018 3:19 PM To: [email protected] Subject: Re: [IBM-MAIN] HMC Password maintenance for SERVICE account You have to logon to HMC with admin authority. Either userid ACSADMIN or another userid with that authority. Select User Management. Select userid 'SERVICE'. Click Details. You will see this option. Make sure the box is *not* checked. __ Allow remote access to the console . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-543-6132 Office ⇐=== NEW [email protected] -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Rob Schramm Sent: Tuesday, July 31, 2018 12:08 PM To: [email protected] Subject: (External):Re: HMC Password maintenance for SERVICE account I am pretty sure you can't login to service remotely..just like acsadmin. You must login to acsadmin and enable/disable remote login. Rob Schramm On Tue, Jul 31, 2018, 2:53 PM Porowski, Kenneth <[email protected]> wrote: > How do I set the SERVICE userid to not be accessible via my network? > I've looked through the user settings and don't see anything relevant. > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] > On Behalf Of Mark Pace > Sent: Tuesday, July 31, 2018 12:22 PM > To: [email protected] > Subject: Re: [IBM-MAIN] HMC Password maintenance for SERVICE account > > I've never changed it. The HMC is in locked room with security > controls on who can access the room. Don't allow the Service user id > to be accessed via a network. > > On Tue, Jul 31, 2018 at 12:08 PM Porowski, Kenneth > <[email protected]> > wrote: > > > How do others handle changing the default password for the HMC > > SERVICE account. > > > > Do you just change it and let your CE know the new password? > > > > > The postings on this site are my own and don’t necessarily represent > Mainline’s positions or opinions > > Mark D Pace > Senior Systems Engineer > Mainline Information Systems ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
