First, thanks for the replies so far. As for needing to ask about the
need for being able to sign on as manager.sys, I have the perhaps
annoying habit (judging from how few responses some of my questions
draw) of asking questions that I have an answer to in order to find out
if someone else has an even better answer. Worse still, no question is
too basic for me to ask. I got this idea from a quote attributed to
Einstein. I think that Wirt knew Einstein, and worked with Einstein, so
let me be the one to say that I am no Einstein ;-)  I'm much closer to
Rainman (Dibbs, Sally 478-5523... 82, 82, 82, 246... about a hundred
dollars...).

Funny that this issue of devices has come up. We have created a flat
file of associations as INPUT to ASOCTBL. This lets us then ASSOCIATE or
DISASSOCIATE an LDEV or class to certain sign ons, on demand. The one
major dislike I have for this is then error messages do not appear on
the console (a mixed blessing, to be sure). This lets us use the
following commands: ABORTIO, ACCEPT, ALTSPOOLFILE, DELETESPOOLFILE,
DISCRPS, DOWN, DOWNLOAD, FORMSALIGN, HEADOFF, HEADON, OPENQ, OUTFENCE,
REFUSE, REPLY, RESUMESPOOL, SHUTQ, SPOOLER, STARTSPOOL, STOPSPOOL,
SUSPENDSPOOL, UP. Taking the console is not something that I want to do
from where I am sitting. Now I just need to figure out how to setup an
entry that would allow me to ABORTIO hung telnet sessions (long story,
that).

Some fairly good examples of things I do that require manager.sys that I
have noted are: comparing files between accounts under our current
configuration (I know that we could change the Read access, or copy
files to an open group in one account, then sign on to the other
account), Report on multiple accounts on a volume set (again, we could
sign on to each one in turn), and under SECURITY/3000, "setup users with
inheritance from other accounts". And of course, setting up new
accounts.

As for SYSGEN and NMMGR, I have used these, but these always require
coordination with admin, and tracking in their system, so except for
browsing for information, this is something that could be handled by
admin. This is the kind of thing that makes them want to take away
manager.sys from me. And I have to give them credit for handling most of
our requests far quicker than the quoted time to allow.

>----------
>From:  Art Bahrs[SMTP:[log in to unmask]]
>Sent:  Monday, October 13, 1997 11:57 AM
>To:    [log in to unmask]
>Subject:       Re: [HP3000-L] To fall from heaven -Reply
>
>Hi Barry,
>     Console commands can be allocated to users by logon id.  I believe that
>you
>use ACD's to do this.
>
>     I am looking at setting this method to give each department one user
>with
>the ability to work the outfence and such here at the foundation.
>
>Art "Security what a nightmare..." Bahrs
>
>