Log off as the Windows administrator; log on as the domain user.
Launch the 3270-TLS session either in Recent Documents or by launching the product and the session.
NOTE: The settings for PAN Redaction Rules (Step 8: 4) are checked and cannot be changed without entering the administrator credentials.
NOTE: The TLS Connection settings (Step 8: 5) are restricted and cannot be changed by the domain user without entering administrator credentials.
Your test in Step 11 confirms that the company requirements to lock down the desktop are met:
Applications are hardened (locked down) to ensure company security mandates are enforced.
PCI compliance policies are enforced (with the PAN Redaction Rules).
Implementing centralized management and security does not disrupt the end-user experience.
________________________________________________________________________________
Related topic: