Restricted SAM Account Maintenance

[Paul Murray_1]

Dear Gurus,

I have set up restricted SAM interfaces for account maintenance by our helpdesk. Even though they are not allowed to remove the users listed in the rmuser.excl file, SAM still allows them to modify any user !!

Very dangerous when talking about admin accounts, I'm sure you'll agree.

Is there anyway of ensuring that no maintenance can be performed via rSAM on specific accounts ... root, oracle, bin, etc etc etc.

Thanks in advance for any help.

Paul.