protect internal´s password

[pando]

Its´really easy to change internal´s password I was wondering if a DBA could restrict orapwd utility to people with system administrator only? Or any thing that secures no one can change internal´s password except the DBA?

[aracnid]

On unix this is not possible (the file is market as Security file)
and only the user with permition of exec can execute the file.

[aji.thm]

hai,
This is possible in Windows NT also, provided the orapwd utility is in the NTFS file system.

Right click on the exe select security tab, choose only the usernames which you want to give access.

hope this will help you..