Technical data

Managing User Accounts
7.4 Managing System-Supplied UAF Accounts
To enable the account when it is needed, run AUTHORIZE and enter the
command in the following format:
MODIFY username /FLAGS=NODISUSER
2. Optionally, change fields in the DEFAULT account. For example:
UAF> MODIFY DEFAULT/DEVICE=DISK$USER/WSQUO=750
In this example, the default device is set to the name most commonly used for
user accounts that will be added. Likewise, the working set value is set to a
value appropriate for most users on the system.
7.4.4 Using the SYSTEM Account
Use the SYSTEM account only for system functions such as performing backups
and installing maintenance updates. The SYSTEM account has full privileges
enabled by default, so exercise caution when you use it. For example, because you
have BYPASS privilege, the system allows you to delete any file, no matter what
its protection. If you enter an incorrect name or spurious asterisk, you might
destroy files that you or other users need to keep. Consider using an account with
fewer privileges for daily system management activities.
If you decide not to use the SYSTEM account for daily system management
activities, you can still receive mail from the SYSTEM account. To do this, log in
to the SYSTEM account, invoke Mail, and use the SET FORWARD command in
the following format to forward the mail to another account:
SET FORWARD node::username
For example:
$ MAIL
MAIL> SET FORWARD WINSTON::WOLF
MAIL> EXIT
Caution
Do not use DISUSER for user name SYSTEM if SYSTARTUP_VMS.COM
submits batch jobs. Disable all access except Batch in these cases.
Also, be careful not to disable all of your privileged system accounts. If
you inadvertently do so, you can recover by setting the system parameter
UAFALTERNATE during a conversational boot operation. See Chapter 4
for information about emergency startup procedures.
7.4.5 Using AUTHORIZE to Maintain UAF Accounts
Using the Authorize (AUTHORIZE) utility, you create and maintain UAF
accounts by assigning values to various fields within each account record. The
values you assign perform the following actions:
• Identify the user
• Define the user’s work environment
• Control use of system resources
7–10 Managing User Accounts