Security pills: Check User with the default password

I welcome Steve Pitcher‘s suggestion from this Linkedin Post: a simple SQL statement to get the list of users with default passwords who haven’t been SIGNON for some time:

select * from qsys2.user_info where user_default_password = 'YES' and previous_signon <current date - 60 days and status = '* ENABLED';

Of course, we can also check all users with default passwords and not limit ourselves to those who have not logged in for 60 days.

The advice is to disable these users or to set a non-default password with CHGUSRPRF.

Have you found any? I do … more than one!