racf will solve a myrid of issues but our security folks wanted me to set all the system/service/linux machines to nolog and I think this solution will be better all the way around :-)
Make sure you define a RACF class to allow AUTOLOG1 to AUTOLOG/XAUTOLOG the various service machines you want to use, unless you have moved startup processing to OPERATOR's profile (not a good idea).
