development | 1 Feb 2006 05:57
Favicon

Re: Dropping users

This is a multipart message in MIME format.
--=_alternative 0017963487257108_=
Content-Type: text/plain; charset="US-ASCII"

Yup - you can't really drop a user from a single datbase from the 
administrator - and keep them out.  I believe what you will have to do 
is...

1) Drop all the users and issue a servercommand to >set config 
server_restricted=2  which I believe prevents everyone from logging in 
until you reset the value or reboot.
Might be a good option if you do your work in the evening. 

or 

2) Drop only the users in your db - then lock up the ACL temporarily while 
you do your work.

A.J. McCartan
Enterprise Messaging

"Patrick Trapp" <ptrapp <at> nex-tech.com> 
Sent by: lnotes-l <at> ozzie.notesnic.net
01/31/2006 03:53 PM
Please respond to
lnotes-l <at> ozzie.notesnic.net

To
Multiple recipients of list <lnotes-l <at> ozzie.notesnic.net>
cc
(Continue reading)

kenyee | 1 Feb 2006 08:40

Lotus Notes/Domino Frequently Asked Questions (FAQ) Site - Feb 2006


This is an automated monthly reminder message for new users.
The Lotus Notes/Domino Frequently Asked Questions (FAQ) Site has
answers to the most commonly asked questions in this mailing list.
  http://www.keysolutions.com/NotesFAQ
Please check it before posting a question.  It is updated at least
once per month, includes how to unsubscribe from the mailing list, and
includes pointers to archives of this list so you can search for past
topics.
You should also check the online Lotus KnowledgeBase at
http://www.ibm.com/software/lotus/support

Roger Kober | 1 Feb 2006 11:16

Re: Dropping users

In the admin-help is a document called 'Marking a database "out of
service"'. Never used that - just noticed the doc in the help.

Maybe it helps ...

Roger

1 Feb 2006 04:57:30 -0000, development <at> phoenix.gov <development <at> phoenix.gov=
>:
> This is a multipart message in MIME format.
> --=3D_alternative 0017963487257108_=3D
> Content-Type: text/plain; charset=3D"US-ASCII"
>
> Yup - you can't really drop a user from a single datbase from the
> administrator - and keep them out.  I believe what you will have to do
> is...
>
> 1) Drop all the users and issue a servercommand to >set config
> server_restricted=3D2  which I believe prevents everyone from logging in
> until you reset the value or reboot.
> Might be a good option if you do your work in the evening.
>
> or
>
> 2) Drop only the users in your db - then lock up the ACL temporarily whil=
e
> you do your work.
>
>
>
(Continue reading)

Patrick Trapp | 1 Feb 2006 15:46
Favicon

Re: Dropping users

According to my notes, server_restricted=2 is persistent -- it remains in 
effect until it is manually reset; server_restricted=1 is temporary and 
will be reset after a server restart (or manual reset, of course)

Patrick

development <at> phoenix.gov 
Sent by: lnotes-l <at> ozzie.notesnic.net
01/31/2006 10:57 PM
Please respond to
lnotes-l <at> ozzie.notesnic.net

To
Multiple recipients of list LNOTES-L <lnotes-l <at> ozzie.notesnic.net>
cc

Subject
Re: Dropping users

This is a multipart message in MIME format.
--=_alternative 0017963487257108_=
Content-Type: text/plain; charset="US-ASCII"

Yup - you can't really drop a user from a single datbase from the 
administrator - and keep them out.  I believe what you will have to do 
is...

1) Drop all the users and issue a servercommand to >set config 
server_restricted=2  which I believe prevents everyone from logging in 
until you reset the value or reboot.
(Continue reading)

Patrick Trapp | 1 Feb 2006 15:56
Favicon

Re: Dropping users

Interesting - if it works as advertised, it appears you've found the 
perfect answer for the question.  Well done!

Patrick

Roger Kober <roger.kober <at> googlemail.com> 
Sent by: lnotes-l <at> ozzie.notesnic.net
02/01/2006 04:16 AM
Please respond to
lnotes-l <at> ozzie.notesnic.net

To
Multiple recipients of list LNOTES-L <lnotes-l <at> ozzie.notesnic.net>
cc

Subject
Re: Dropping users

In the admin-help is a document called 'Marking a database "out of
service"'. Never used that - just noticed the doc in the help.

Maybe it helps ...

Roger

1 Feb 2006 04:57:30 -0000, development <at> phoenix.gov 
<development <at> phoenix.gov=
>:
> This is a multipart message in MIME format.
> --=3D_alternative 0017963487257108_=3D
(Continue reading)

Ben Rodway | 1 Feb 2006 16:06

Re: Dropping users

Note - This will only work on clustered servers....

Ben

Roger Kober wrote:

>In the admin-help is a document called 'Marking a database "out of
>service"'. Never used that - just noticed the doc in the help.
>
>Maybe it helps ...
>
>Roger
>
>
>1 Feb 2006 04:57:30 -0000, development <at> phoenix.gov <development <at> phoenix.gov=
>  
>
>>:
>>This is a multipart message in MIME format.
>>--=3D_alternative 0017963487257108_=3D
>>Content-Type: text/plain; charset=3D"US-ASCII"
>>
>>Yup - you can't really drop a user from a single datbase from the
>>administrator - and keep them out.  I believe what you will have to do
>>is...
>>
>>1) Drop all the users and issue a servercommand to >set config
>>server_restricted=3D2  which I believe prevents everyone from logging in
>>until you reset the value or reboot.
>>Might be a good option if you do your work in the evening.
(Continue reading)

Patrick Trapp | 1 Feb 2006 16:14
Favicon

Re: Dropping users
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(Continue reading)

andy_stewart | 1 Feb 2006 16:34
Picon

Re: Dropping users

This is a multipart message in MIME format.
--=_alternative 0051CDDF80257108_=
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

A slight side comment - as far as I am aware, if a database is marked 'Out 
of service', this only applies to users, not Administrators. I discovered 
this by accident as whilst playing with clusters one day I marked my mail 
file on the primary cluster as 'Out of service'. I then had to rush off 
and fix something and completely forgot what I had done. However Notes 
allowed me to carry on using the mail file. It was only when colleagues 
(co-workers for USA) tried to access my calendar and received an error 
along the lines of 'You cannot access this because an administrator has 
denied access (not exact wording) that I realised what was going on. 
Typically, 95% of the accesses to my calendar where by other Domino admins 
who received no error.

lnotes-l <at> ozzie.notesnic.net wrote on 01/02/2006 15:06:14:

> Multiple recipients of list LNOTES-L <lnotes-l <at> ozzie.notesnic.net>
> 
> Note - This will only work on clustered servers....

----------------------------------------------------------------------------=
----------------------------------------------------------------------------=
------------------------------------
The information contained in this e-mail and any attachments
is intended for the addressee only and may contain legally
privileged or confidential information. If you are not the
intended recipient you must not use, disclose, copy,
(Continue reading)

mikejkemp | 1 Feb 2006 16:51
Picon
Favicon

Re: Dropping users

I wondered when you were all going to get there!

I've spent many happy hours dropping users to make changes to, usually, 
their own mail file.  I developed a technique using two PCs, both with 
Admin Client running so I could drop them with one (with one hand on the 
laptop) and quickly switch to the other to do the lock-out before they 
could get back in again.

I've also made use of the Notes.ini setting, but often that used cause 
even more hassle because the users then logged calls to say they were 
'locked out' of that server - they had failed to read or comprehend any 
warning notice sent.

I confess that I didn't post a suggestion 'cos I'de forgotten the 
parameters - the 1's and 2's etc. and hadn't found time to break away from 
my current Access and Trapeze-Routewise duties to look up the detail.

Happy Locking Out :o)

Mike Kemp
Lotus Notes Specialist
mikejkemp <at> aol.com

Esther_Strom | 1 Feb 2006 16:55

Re: Dropping users

Bob, I'm planning on changing the ACL. The issue is, how do I make sure
everyone is out of the database when the ACL change takes effect? If
someone is already in a database when I remove their name from the ACL, it
doesn't take effect for them until they close the database, which means
that unless I can force them out of it, they can keep working as if there
had been no change.

Esther

                                                                           
             Robert A LaRock                                               
             <rlarock <at> standard                                             
             abrasives.com>                                             To 
             Sent by:                  Multiple recipients of list         
             lnotes-l <at> ozzie.no         LNOTES-L                            
             tesnic.net                <lnotes-l <at> ozzie.notesnic.net>       
                                                                        cc 

             01/31/2006 05:16                                      Subject 
             PM                        Re: Dropping users                  

                                                                           
             Please respond to                                             
             lnotes-l <at> ozzie.no                                             
                tesnic.net                                                 

It's my understanding that clients can reconnect after being dropped.  The
only way I can think of preventing them from reconnecting is to change the
database ACL before doing the drop.  Then change it back after the agent
completes.
(Continue reading)


Gmane