A request that includes the AS DEFAULT option has no effect on the logon access granted to or revoked from specific user names.
The following rules apply to the AS DEFAULT option:
| Statement | Privileges Assumed |
|---|---|
| REVOKE LOGON | The user cannot access the applicable client even if that client has an assigned default of GRANT. |
| GRANT LOGON | The user can always access the applicable client even if that client has an assigned default of REVOKE. |
Note in the following examples that these two requests do not have the same semantics:
REVOKE LOGON ON ALL AS DEFAULT; REVOKE LOGON ON ALL FROM "DEFAULT";
The first request revokes logon privileges on any source through which a logon is attempted, including the Vantage Console, without residual conditions. Note that the string AS DEFAULT in this request is a keyword phrase and does not identify a user.
In the second request, Vantage treats "DEFAULT" as a string literal that identifies a user, not as a keyword, and the request revokes logon privileges on all logon sources for the user named DEFAULT. Because DEFAULT is a dummy user name and cannot log on to Vantage, the second request, though syntactically valid, essentially has no effect.