Mainframe console access

[aarvalar1]

Hello Everyone,

We have a requirement to restrict the mainframe console access.

Problem:

User is accessing the mainframe console through a Remote Desktop Connection to a VM and then using an IP address, spool name and port number he can directly log into the console and giving operator command without being prompted for mainframe ID and password. How to restrict this bypass access?

Hope the VM is automatically providing credentials to the mainframe (via scripts or save sessions), how can we disable that and enforcing the user to enter mainframe credentials and password to issue any operator commands?

Thanks,
Usha