QLMTSECOFR
From MidrangeWiki
This prevents these users from signing on to workstations in remote locations without your knowledge. The system value QLMTSECOFR (limit security officer) allows you to do this. If you set QLMTSECOFR to 1, users with all-object (*ALLOBJ) or service (*SERVICE) special authority can sign on only at the console or other workstations you designate.
QLMTSECOFR restricts the security officer, users with authority over all the objects on the system, and service personnel to the console.
