Restrict users with policies and application administration

IBM® i Access policies provide multiple methods of setting up restrictions and profiles.

The policies use either Microsoft's policy editor or the Application Administration function of IBM Navigator for i.

The two primary methods for implementing administrative control over your network are Application Administration and policies. Application Administration bases restrictions on the IBM i user profile, and is administered through IBM Navigator for i. Policies mandate configuration settings and restrictions, and can apply to both specific PCs and individual Windows user profiles. As such, they offer greater granularity than Application Administration, but are significantly more difficult to set up and administer. In order to use policies, you must download the Microsoft System Policy Editor and configure your PCs and system for storage, retrieval, and application of the policies you set. Generally, Application Administration is preferable if all of the functions you want to restrict are Application Administration-enabled, and if the version of the IBM i server being used supports Application Administration.

For more information about Application Administration, refer to Application Administration.

To learn about policies, refer to the following topics: