Is there a way to determine what TSO procedure a user actually used to signon to TSO with?
If a site defines TSO logonids with the TSOFSCRN and LGN-PROC attributes(Bit field) set and the GSO TSO FSRETAIN set, the logonid's CONTROL(TSO) records will contain the TSOPROC that the user last used to logon to TSO.
The CONTROL(TSO) records retain the logon parameters specified during the most recent TSO logon. When the full-screen retention facility is active, CA ACF2 assumes that the logon parameters desired are those specified in the user's logonid record. When those parameters differ from the logonid record, a retention record is created in the Infostorage database. The user's logonid becomes the name of that user's retention record ID.
The fields contained in the user's CONTROL(TSO) record include the following.
Details on these fields can be found in Chapter 14: Maintaining Global System Options Records in section 'TSO Full-Screen Logon Retention Records' of the CA ACF2 for z/OS Administration Guide.
To display the TSO PROC that a logonid last logged onto to TSO with the logonid's CONTROL(TSO) record can be displayed from TSO, ACF as shown in the following example.
USER002 LAST CHANGED BY logonid ON 10/02/14-10:29
ATTR1(60) ATTR2(00) ATTR3(00) PROC(PROC123) RGN-0M
Details on the logonid TSOFSCRN and LGN-PROC fields can be found in Chapter 3: Maintaining Logonid Records in section 'Logonid Record Fields' of the CA ACF2 for z/OS Administration Guide.