| Previous | Contents | Index |
In general, the command descriptions in this manual include full command names, command options, and service names. However, the software recognizes abbreviations. Note that abbreviations are not recommended for use in batch jobs and command procedures.
You can abbreviate any command option by typing enough letters to distinguish it from other command options. The following is an example of the SET AUDIT POLICY command:
$ ADMINISTER LANDOFOZ\\TINMAN> SET AUD POLI /FAILURE=(LOGONOFF,PROCESS) - _LANDOFOZ\\TINMAN>/AUDIT/SUCCESS=(ALL) %PWRK-S-AUDPOLSET, audit policy set for domain "LANDOFOZ" LANDOFOZ\\TINMAN> |
Note the use of the continuation character (-) to enter this long command string.
You can abbreviate options and qualifiers as illustrated in the following example:
$ ADMIN LANDOFOZ\\TINMAN> SET AUD POLICY/FAIL=(LOG,PROC)/AUD/SUCCESS=(ALL) %PWRK-S-AUDPOLSET, audit policy set for domain "LANDOFOZ" LANDOFOZ\\TINMAN> |
You can manage a server with batch jobs that you set up. The .COM files can contain the ADMINISTER commands you would otherwise enter interactively. The following example (EVT_CLEANUP.COM) saves an event log, then clears it:
$ TYPE EVT_CLEANUP.COM $ ADMINISTER SAVE EVENTS/TYPE=SECURITY SYS$BACKUP:PW-SECURITY.EVT $ ADMINISTER CLEAR EVENTS/TYPE=SECURITY/NOCONFIRM $ EXIT |
For commands that have confirmation responses (selectable using
/CONFIRM and /NOCONFIRM qualifiers), the default in batch mode is to
not ask for confirmation. In other words, /NOCONFIRM is the default
action for batch jobs.
2.1.9 Universal Naming Convention (UNC) for Path Names
When using the Universal Naming Convention (UNC) for specifying the path to a shared directory or file, the UNC path has the form
\\server-name\share-name\path
where:
| server-name | is the name of the server where the directory or file resides. |
| share-name | is the name of the shared resource containing the directory or file. |
| path | specifies the path to the directory or file within the shared resource. |
The server-name portion of the UNC, if omitted, defaults to the server currently being administered (the server to which commands are directed). You can omit the backslash before the share-name if you omit the server-name.
Except for the TAKE FILE OWNERSHIP command, you can use standard DOS
wildcards within file names, but not for directories. The TAKE FILE
OWNERSHIP command does not accept wildcards for the UNC path.
2.1.10 Extended Character Set Characters
As an alternative to the conventional ASCII and ISO Latin-1 (ISO-8859-1) character sets, the Advanced Server can use any one of several other ISO-8859-n character sets. Each character set supports one or more languages. The character set used by the Advanced Server depends on the language selected during configuration. Only one character set can be configured for use by the server at a time. (The Compaq Advanced Server for OpenVMS Server Administrator's Guide lists the available ISO-8859 character sets.) Each of these character sets include extended character sets (or Unicode UCS-2) characters, called code points, with values of hexadecimal 0080 or higher. Thus, a broader set of characters is available for ADMINISTER commands when specifying, for example, names of file and directory shares (and their path names), print shares, users, and groups. These characters can also be specified in text strings (such as descriptions) that users can specify for these objects. (These characters are not supported in computer names, alias names, domain names, and trusted domain names.)
Use the ADMINISTER SET MODE command to determine the display format for
such characters and to enable handling of such characters for input.
For more information, see the SET MODE command, and also refer to
the Compaq Advanced Server for OpenVMS Server Administrator's Guide. To set up a language for your Advanced Server for OpenVMS, refer to
the Compaq Advanced Server for OpenVMS Server Installation and Configuration Guide.
2.1.11 Parameter Restrictions
The ADMINISTER command parameters listed in Table 2-2, ADMINISTER Command Parameter Restrictions, cannot contain the following characters:
" / \ [ ] : ; | = , + * ? < >
When using ADMINISTER commands, note the parameter restrictions listed in Table 2-2, ADMINISTER Command Parameter Restrictions:
| Parameter | Restriction |
|---|---|
| [domain-name\] server-user-name | |
| Specifies the Advanced Server user name to be mapped to a Compaq OpenVMS server name. An Advanced Server user can be mapped to only one OpenVMS user. Optionally, you can specify a network user in a trusted domain. To specify a network user, include the domain name ( domain-name\) with the user name, as in KANSAS\DOLE, where KANSAS is the trusted domain in which the network user account resides, and DOLE is the user name of the user account in the trusted domain. | |
| host-user-name | Specifies the OpenVMS user name to which the Advanced Server user name is to be mapped. More than one Advanced Server user can be mapped to the same OpenVMS user. |
| computer-name |
Specifies a computer name as a name that identifies the computer on the
network. The
computer-name must be unique in the network.
The maximum number of characters is 15. |
| domain-name |
Specifies the name of the domain. Except where noted, the default is
the domain currently being administered.
The maximum number of characters is 15. |
| server-name |
Specifies the name of a server that is a member of the domain. The
default is the server currently being administered.
The maximum number of characters is 15. |
| full-user-name |
Specifies the full, or complete, name for the user. Enclose the
full-user-name in quotation marks if it contains lowercase
letters, blanks (spaces) or other nonalphanumeric characters.
The maximum number of characters is 256. |
| group-name |
Specifies the name of an Advanced Server group. A group name cannot be
identical to any other group or user name of the domain or computer
being administered.
The maximum number of characters is 20. |
| [domain-name\] member-name | |
|
Specifies the users or groups as members of the group. Enclose the
member-name in quotation marks if it contains blanks (spaces)
or other nonalphanumeric characters.
When adding members to, or removing members from, a local group, you can specify user accounts or global groups from the domain being administered and from domains it trusts. To specify a user account or global group in a trusted domain, enter a domain-qualified name in the format domain-name\member-name, such as KANSAS\DOLE, where KANSAS is the name of the trusted domain, and DOLE is the user or group name defined in the trusted domain. The maximum number of characters is 20. |
|
| password |
Specifies the password for the user. Passwords are case sensitive.
Enclose the
password in quotation marks if it contains lowercase letters,
blanks (spaces) or other nonalphanumeric characters. If you enter
/PASSWORD with no value or an asterisk (*), you are prompted for the
password and its confirmation; the password is not echoed on your
terminal. When you are prompted, you need not use quotation marks.
The maximum number of characters is 14. The default minimum is 0. |
| old-password |
Specifies the current password for the user account. Passwords are case
sensitive. Enclose the
old-password in quotation marks if it contains lowercase
letters, blanks (spaces) or other nonalphanumeric characters. If you do
not specify
old-password, or specify it as an asterisk (*), you are
prompted for the password, which is not echoed on your terminal. When
you are prompted, you need not include quotation marks.
The maximum number of characters is 14. |
| queue-name | Specifies the name of the queue. The maximum number of characters is 12, where the characters are any uppercase and lowercase letters, digits, the underscore (_), and dollar sign ($). When you specify characters other than these supported characters, such as Unicode characters, the Advanced Server creates an OpenVMS queue using the standard ODS-2 format for these characters: __ XX, where XX is the 8-bit code in the server character set. Because the Advanced Server must use the standard ODS-2 four-character substitution in the queue name for each unsupported character in the print share name, the length of an Advanced Server print share name is restricted accordingly. For example, seven characters is the maximum length for a print share name consisting entirely of unsupported characters. |
| share-name |
The name of the share. If MS-DOS computers will connect to the share,
the
share-name can be up to 8 characters long, optionally followed
by a period and up to 3 more characters.
The maximum number of characters is 12. |
| string |
Specifies descriptive information. Enclose the
string in quotation marks if it contains lowercase letters,
blanks (spaces) or other nonalphanumeric characters.
The maximum number of characters is 256. |
| user-name |
Specifies the name of the user to be added. The
user-name must be unique within the domain or computer being
administered.
The maximum number of characters is 20. |
| new-user-name |
Specifies the user name for the new user account.
The maximum number of characters is 20. |
| workstation-name |
Specifies a workstation from which the user can log on to the domain.
The
workstation-name is the name of a workstation, or an asterisk
(*), to specify all workstations.
The maximum number of characters is 15. |
Adds a computer account to a domain's security database (the domain-wide user accounts database). Before a computer can join a domain, a computer account must be added to the domain's security database.The ADD COMPUTER command is useful only if you do not wish to give out the user name and password of an Administrator account in your domain to the administrator of the computer that will join your domain. If you do not wish to supply this information, use the ADD COMPUTER command to add the computer account to your domain before the computer's administrator joins the domain. If you supply password information to the administrator of the other computer, the administrator can use it when joining and the computer account will be added to the domain automatically.
The ADD COMPUTER command is not necessary for the primary domain controller; that computer is added automatically.
Note that until the intended computer account actually joins the domain, it is possible for a malicious user to give a different computer that computer name, and then have it join the domain using the computer account you have just created. If the added computer is a backup domain controller when it joins, it receives a copy of the domain's security database.
ADD COMPUTER computer-name [/qualifiers]
Use of this command requires membership in the Administrators local group.
REMOVE COMPUTER
SET COMPUTER
SHOW COMPUTERS
computer-name
Specifies a 1 to 15 character name for the computer account to be added to the domain. The specified name cannot be the same as any other computer or domain name in the network.
/DOMAIN=domain-name
Specifies the name of the domain to which to add the computer account. The default is the domain currently being administered. Do not specify both /DOMAIN and /SERVER on the same command line./ROLE=role-type
Specifies the computer's role in the network. (Note that to change the role of a backup domain controller to a primary domain controller, or vice versa, use the SET COMPUTER/ROLE command. To change the role of an Advanced Server domain controller to a member server, or of an Advanced Server member server to a domain controller, you must use the SYS$UPDATE:PWRK$CONFIG command procedure. ) The role-type keyword can be one of the following:
Role-Type Specify if the computer is: BACKUP_DOMAIN_CONTROLLER A Windows NT or compatible backup domain controller. SERVER Windows NT or compatible server, but not a primary or backup domain controller. WORKSTATION A Windows NT Workstation. This is the default. /SERVER=server-name
Specifies the name of a server that is a member of the domain to which to add the computer account. Do not specify both /DOMAIN and /SERVER on the same command line.
LANDOFOZ\\TINMAN> ADD COMPUTER DOROTHY/ROLE=SERVER
%PWRK-S-COMPADD, computer "DOROTHY" added to domain "LANDOFOZ"
|
This example adds the computer named DOROTHY to the default domain (LANDOFOZ), as a Windows NT compatible server.
Adds a local or global group to a domain's security database, and optionally adds members to the group.
ADD GROUP group-name [/qualifiers]
Use of this command requires membership in the Administrators or Account Operators local group.
COPY GROUP
MODIFY GROUP
REMOVE GROUP
SHOW GROUPS
group-name
Specifies a 1 to 20 character name for the group to be added. A group name cannot be identical to any other group or user name of the domain or server being administered. It can contain any uppercase or lowercase characters except for the following:" / \ [ ] : ; | = , + * ? < >
/DESCRIPTION="string"
/NODESCRIPTION
Specifies a string of up to 256 characters used to provide descriptive information about the group. Enclose the string in quotation marks if it contains lowercase letters, blanks (spaces) or other nonalphanumeric characters. /NODESCRIPTION, the default, indicates that the description is to be blank./DOMAIN=domain-name
Specifies the name of the domain to which to add the group. The default is the domain currently being administered. Do not specify both /DOMAIN and /SERVER on the same command line./GLOBAL
Indicates that the specified group is to be added as a global group. This is the default if neither /GLOBAL nor /LOCAL are specified. Do not specify both /GLOBAL and /LOCAL on the same command line./LOCAL
Indicates that the specified group is to be added as a local group. By default, a group is added as a global group. Do not specify both /GLOBAL and /LOCAL on the same command line./MEMBERS=([domain-name]\member-name[,...])
Adds the specified members to the membership list of the group. If the group being added is a local group, you can add user accounts and global groups from the domain being administered and from domains it trusts.To specify a user account or global group in a trusted domain, enter a domain-qualified name (domain-name\member-name), such as KANSAS\DOLE, where KANSAS is the name of the trusted domain, and DOLE is the user or group name defined in the trusted domain. If you omit a domain name, the user or group is assumed to be defined in the domain being administered.
If the group being added is a global group, you can add user accounts only from the domain being administered.
/SERVER=server-name
Specifies the name of a server that is a member of the domain to which to add the group. Do not specify both /DOMAIN and /SERVER on the same command line.
| #1 |
|---|
LANDOFOZ\\TINMAN> ADD GROUP MUNCHKINS/MEMBERS=(SCARECROW,STRAWMAN)
%PWRK-S-GROUPADD, group "MUNCHKINS" added to domain "LANDOFOZ"
|
This example adds the global group named MUNCHKINS to the default domain being administered (LANDOFOZ). The group will contain as members, the users named SCARECROW and STRAWMAN. The group is added as a global group because neither the /GLOBAL nor /LOCAL qualifiers were specified, and /GLOBAL is the default.
| #2 |
|---|
LANDOFOZ\\TINMAN> ADD GROUP WINKIES/LOCAL -
_LANDOFOZ\\TINMAN> /MEMBERS=(MUNCHKINS,KANSAS\WIZARD)
%PWRK-S-GROUPADD, group "WINKIES" added to domain "LANDOFOZ"
|
This example adds the local group named WINKIES to the default domain being administered (LANDOFOZ). The group will contain as members, the global group MUNCHKINS from the LANDOFOZ domain, and the user WIZARD from the trusted domain KANSAS.
Adds a user account mapping between a Compaq OpenVMS server user account and an OpenVMS user account.
ADD HOSTMAP [domain-name\]server-user-name host-user-name [/qualifier]
Use of this command requires membership in the Administrators local group. This command is valid only for Compaq OpenVMS servers.
REMOVE HOSTMAP
SHOW HOSTMAP
[domain-name\]server-user-name
Specifies the Advanced Server user name to be mapped to an OpenVMS user name. You can map a network user in a trusted domain to an OpenVMS user. Specify the domain-qualified user name in the format domain-name\server-user-name, such as KANSAS\DOLE, where KANSAS is the trusted domain, and DOLE is the user name of the user account defined in the trusted domain. If you omit a domain name, the user account is assumed to be defined in the domain of the server currently being administered.An Advanced Server user can be mapped to only one OpenVMS user.
host-user-name
Specifies the OpenVMS user name to which the Advanced Server user name is to be mapped. More than one Advanced Server user can be mapped to the same OpenVMS user.
/SERVER=server-name
Specifies the name of the server to which to add the host account mapping. The default is the server currently being administered.
LANDOFOZ\\TINMAN>ADD HOSTMAP SCARECROW STRAWMAN
%PWRK-S-HOSTMAPADD, user "SCARECROW" mapped to host user "STRAWMAN"
|
This example adds a user account mapping for the Advanced Server user SCARECROW, to the OpenVMS user STRAWMAN, on the server currently being administered (TINMAN).
Creates an Advanced Server print queue. A print queue can be one of the following:
- Printer queue, which is a queue associated with a physical printing device (equivalent to an OpenVMS execution queue)
- Routing queue, which is a queue that routes print requests to one or more printer queues (equivalent to an OpenVMS generic queue)
ADD PRINT QUEUE queue-name {/PRINTER | /ROUTE_TO} [/qualifiers]
Use of this command requires membership in the Administrators, Server Operators, or Print Operators local group. This command is valid only to Compaq OpenVMS servers.
ADD SHARE/PRINT
CONTINUE PRINT QUEUE
PAUSE PRINT QUEUE
REMOVE PRINT QUEUE
SET PRINT QUEUE
SHOW PRINT QUEUES
queue-name
Specifies a name for the queue to be added. The queue name may be 1 to 12 characters, where the characters are any uppercase and lowercase letters, digits, the underscore (_), and dollar sign ($). When you specify characters other than these supported characters, such as Unicode characters, the length is limited further. For example, seven characters is the maximum length for a print share name consisting entirely of unsupported characters.You specify the type of queue, printer or routing, with the /PRINTER and /ROUTE_TO qualifiers, respectively.
/DESCRIPTION="string"
/NODESCRIPTION
Specifies a string of up to 48 characters used to provide descriptive information about the queue. Enclose the string in quotation marks if it contains lowercase letters, blanks (spaces) or other nonalphanumeric characters. /NODESCRIPTION, the default, indicates that the description is to be blank./PRINTER=device-name
Indicates that the queue to be added is a printer queue, and specifies the physical device name or port to which the printer is physically connected. This is the actual OpenVMS system device, for example, OPA0, TTA2, TXA7, or LTA201. You must specify either the /PRINTER or /ROUTE_TO qualifier. Do not specify both /PRINTER and /ROUTE_TO on the same command line./ROUTE_TO=(print-queue[,...])
Indicates that the queue to be added is a routing queue, and specifies one or more printer queues to which to route print jobs. You must specify either the /PRINTER or /ROUTE_TO qualifier. Do not specify both /PRINTER and /ROUTE_TO on the same command line./SERVER=server-name
Specifies the name of the server on which to create the queue. The default is the server currently being administered./TYPE=printer-type
Specifies the type of printer when adding a printer queue. Do not use the /TYPE qualifier with the /ROUTE_TO qualifier. The printer-type keyword can be one of the following:
Printer-Type Type of Printer DL1100 DEClaser 1100 DL2100 DEClaser 2100 DL2100P DEClaser 2100 Plus DL2200 DEClaser 2200 DL2200P DEClaser 2200 Plus DL3200 DEClaser 3200 LN03 DIGITAL LN03 LN03P DIGITAL LN03 Plus LA50 DIGITAL LA50 LA70 DIGITAL LA70 LA75 DIGITAL LA75 LA210 DIGITAL LA210 LA324 DIGITAL LA324 LG01 DIGITAL LG01 LG02 DIGITAL LG02 LG06 DIGITAL LG06 LG31 DIGITAL LG31 LJ250 DIGITAL LJ250 FX850 EPSON FX850 FX1050 EPSON FX1050 HP_LASERJET Hewlett-Packard LaserJet IID PROPRINTER IBM Proprinter SILENTWRITER NEC Silentwriter 2, model 290 (not PostScript) GENERIC All other printer types (the default)
| #1 |
|---|
LANDOFOZ\\TINMAN> ADD PRINT QUEUE TOTO/PRINTER=LTA201/TYPE=DL3200 -
_LANDOFOZ\\TINMAN> /DESCRIPTION="Dot's Printer"
%PWRK-S-QUEADD, queue "TOTO" added on server "TINMAN"
|
This example adds the printer queue TOTO to the server currently being administered (TINMAN). The printer is connected to LTA201 and is a DEClaser 3200. The description for the print queue is "Dot's Printer."
| #2 |
|---|
LANDOFOZ\\TINMAN> ADD PRINT QUEUE GLENDA/ROUTE_TO=(TOTO,WIZ) -
_LANDOFOZ\\TINMAN>) /DESCRIPTION="Printers in the Land of Oz"
%PWRK-S-QUEADD, queue "GLENDA" added on server "TINMAN"
|
This example adds a routing queue named GLENDA to the server currently being administered (TINMAN). The print jobs are routed to either of the two printer queues: TOTO or WIZ. The description for the print queue is "Printers in the Land of Oz."
| Previous | Next | Contents | Index |