Rao, We have far fewer people who can log onto our Unix servers as root than we have local admins on any given Windows server. So for us at least, this alone makes it a LOT easier to secure a Unix QMgr. Add in all the inherent problems with Windows user security, viruses and worms, OS stability, throughput and scalability, and Unix boxes start to look a lot more competitive with Windows boxes in terms of total cost of ownership.
-- T.Rob -----Original Message----- From: Adiraju, Rao [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 10, 2004 3:18 PM To: [EMAIL PROTECTED] Subject: Re: Locking down MQ files/registry on Windows Rob Even I was looking for a silver-bullet solution earlier in this regard. But your response raised a curious question - if you are NOT hosting QMgrs on Windows for the fear of "maverick" (I call them as Cow-boys) administrators where do you host your QMGrs then. It will be the same case in UNIX world and as well as z/OS (One could hope for lesser of that category in z/OS). Those who got authority to logon as "root" users on any unix platform also can do anything they want on the MQSeries. Once in one of our SUN boxes, somehow, who lost the entire MQ log directory - what else one can do in these situations. Giving the due credit to them is a good starting point. Accepting that no responsible employee will cut the corners unless it was Ok with their line manager. If the line managers are different for MQ admins and Window admins, my suggestion is to articulate clearly the roles and responsibilities and escalate any violations to the senior management. Cheers Rao Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
