Restrict users with policies and application administration

iSeries Access for Windows policies provide multiple methods of setting up restrictions and profiles.

The policies use either Microsoft's policy editor or the Application Administration function of iSeries Navigator.

The two primary methods for implementing administrative control over your network are Application Administration and policies. Application Administration bases restrictions on the iSeries user profile, and is administered through iSeries Navigator. Policies mandate configuration settings and restrictions, and can apply to both specific PCs and individual Windows^® user profiles. As such, they offer greater granularity than Application Administration, but are significantly more difficult to set up and administer. In order to use policies, download the Microsoft^® System Policy Editor and configure your PCs and system for storage, retrieval, and application of the policies you set. Generally, Application Administration is preferable if all of the functions you want to restrict are Application Administration-enabled, and if the version of the i5/OS™ server being used supports Application Administration.

Since V5R2, Application Administration has supported Central Settings. The Central settings support in Application Administration provides the ability to manage most of the functions iSeries Access for Windows controls through the following policy templates:

• Runtime restrictions (caerestr.adm)

• Mandated connection properties (config.adm)

• Configuration policies (caecfg.adm)

For more information about Application Administration, refer to Application Administration.

To learn about policies, refer to the following topics:

• Overview of iSeries Access for Windows policies
  Use system policies to restrict users from certain actions, and to suggest or require certain configuration features.

• Types and scopes of policies
  Each iSeries Access for Windows policy varies in scope and provides either a restriction or a configuration.

• Set up your system to use policies
  Download an iSeries Access for Windows policy file.

• iSeries Access for Windows policy list
  Administrators can use Microsoft system policies to control which iSeries Access for Windows functions and settings are available to each user.

Parent topic:

Related concepts
Microsoft System Policy Editor Application Administration