Technical data

Managing User Accounts
7.8 Restricting the Use of Accounts
For example:
SYSMAN>
CLASS_SCHEDULE ADD MAINCLASS -
_SYSMAN> /ACCOUNT = (ACCTNAME1, ACCTNAME2) -
_SYSMAN> /USERNAME = HOTSHOT -
_SYSMAN> /CPU_LIMIT = (PRIMARY, 08-17=15, SECONDARY, 00-23=30) -
_SYSMAN> /WINDFALL
This example performs the following actions:
• Creates scheduling class MAINCLASS
• Adds users in accounts ACCTNAME1 and ACCTNAME2 to MAINCLASS
• Adds user HOTSHOT to MAINCLASS
• Allots processes run by users in MAINCLASS 15 percent of CPU time
between 8 AM and 6 PM on primary days (default Monday through Friday)
• Allots processes run by users in MAINCLASS 30 percent of CPU time all day
(24 hours) on secondary days (default SATURDAY and SUNDAY)
• Allows process run by users in MAINCLASS to receive extra CPU time during
the specified days and times when the CPU is idle
Note that you can use the /PRIMEDAYS qualifier to change the primary and
secondary days assigned to a scheduling class.
CPU time restrictions created with the class scheduler do not apply to system
users (see Section 12.4.2).
For more detailed information about the SYSMAN CLASS_SCHEDULE
command, see the OpenVMS System Management Utilities Reference Manual:
M–Z.
7.8.4 Restricting Login Functions
In addition to specifying hourly login restrictions, you can assign function
restrictions to an account by using appropriate keywords with the /FLAGS
qualifier in the Authorize utility. By default, there are no restrictions. Options
are shown in the following table:
Keyword Meaning
[NO]AUDIT [Do not] audit all security-relevant actions.
[NO]AUTOLOGIN [Do not] prevent access except by automatic login when
automatic logins are enabled.
[NO]CAPTIVE [Do not] prevent user from changing any defaults at login
(implies DISCTLY).
[Do not] deny user access to the DCL command level.
[NO]DEFCLI [Do not] prevent user from changing default CLI or CLI
tables.
[NO]DISCTLY [Do not] disable Ctrl/Y interrupts.
[NO]DISFORCE_PWD_
CHANGE
[Do not] remove requirement that user must change an
expired password at login.
[NO]DISIMAGE [Do not] prevent user from using the RUN or MCR commands
or from executing ‘‘foreign’’ commands.
[NO]DISMAIL [Do not] prevent mail delivery to the user.
7–30 Managing User Accounts