> ... anyone with SM capability can
>bypass the whole shebang by signing on:
>
>        :HELLO smuser.smaccount;PARM=-1
>
>which bypasses all UDC files and takes the "smuser" directly to the MPE
>prompt.

The PARM=-1 thingy can be disabled in SYSGEN (MISC, I believe) for
quite a while (don't recall MPE/iX version and patch that introduced
this feature). But be careful to not put you in an ugly position by
SETCATALOGing a "broken" system-wide logon UDC after doing that...

;-) Lars