Configure Trusted Mode

[Randy Gelineau]

Can you configure trusted mode without using the sam gui?
I know you can use modprpw -m to change individual users but is it possible to set the system defaults with sam?

[Pete Randall]

Sure, use tsconvert and tsconvert -r to unconvert.


Pete

[Randy Gelineau]

Thanks. I do know how to convert the machine.
My problem is configuring the security options with trusted mode after it is converted. For example, to set the account lockout after 5 bad attempts. I dont want to have to bring up sam to do this.

Thanks for the help though.

[Jim Mallett]

I believe what you are looking for is modprdef. See the attachment, it is the bottom command.

Jim

[Pete Randall]

Sorry, Randy, I totally mis-read the question. Jim's got you covered though.


Pete

[Randy Gelineau]

Great Thanks! Is there a way to turn auditing on from the command line?

getprpw report audflg=1 but I dont see a getprdef audflg.

[Ron Luman_1]

Hi Randy,

Not sure exactly what you're looking for, but take a look at the audsys(1M) man page. It describes how to start/stop the auditing subsystem from the command line. Note that you'll need to be running in trusted mode for this to work.

Cheers,

--Ron