On Tue, Mar 16, 2010 at 12:46 PM, Quay, Jonathan (IHG) <[email protected]> wrote: > IMHO the proper response to the question would be "what do you need it > for" > > Exactly. I would say to even ask this question you better be a privileged > user. As such, you probably do want to know the logon "status" of the user, > e.g. NOLOG. For that, direct examination of the directory or utilization of > the facilities of one's security or directory manager would be in order.
Generic tools sometimes grow over time and require extra privileges for things you did not want in the first place. Bonus points for doing things without additional privileges. You may for example be able to combine the result from two class-G tests to decide. If you just need to check whether the user is logged on, it may be pointless to know whether the user is defined (probably is, since that's why you were wondering, but who cares if not). Rob
