Shawn, very unfortunately, asks:
> I understand that HP finally gave us a way to configure weather PARM=-1 is
> available at signon time.  Can someone tell me how to change it?
 
I'd prefer to say: no
 
But, if you do decide to do this *VERY UNWISE* action...you do it
via SYSGEN:
 
   :hello manager.sys
   :sysgen
   mi
   sy enforcelogonudcs=on
or, preferably:
   sy enforcelogonudcs=off
   ho
   exit
   k
   exit
and reboot, with "start norecovery group=config"  (or whatever group your
config is in)
 
Ok...*why* am I so against this?
 
You're keeping out exactly and only one user: the system manager.  That's all.
 
Well, I have news for you:  the system manager is an important user,
who darn well better be able to logon when your logon UDCs are screwed up!
 
I've had to dial in and rescue users a number of times over the years...
generally with success.
 
The two times this year that I actually *failed* to help the user was when
they had done enforcelogonudcs=on.
 
 
It's exactly like putting unopenable security bars on your windows
at home...a cheap and incorrect solution to a problem ... one that could
cost you much, much more than you will ever save!
 
Stan (did I mention I don't like enforcelogonudcs=on?) Sieler