Changing OOTB "xelsysadm" system account ID

Hi,
My client requests the OOTB system account "xelsysadm" to be changed to another value (the reason being that "xelsysadm" is a well known string, and that the account may therefore be compromised). Anyway, is this even possible? If yes, how?
Thanks !

OIM 11g console does not allow changing "xelsysadm" ID, but I know it can be changed using the OIM 10g APIs. You may also change it directly in the USR table.
Your next question may be - will it impact anything? Per my knowledge, you will have to change any other external client that uses "xelsysadm" ID. Other than that, I don't think this ID is hard-coded anywhere within OIM server.
Gurus, please share your insights on this...

Similar Messages

A friend's eMac was working fine until the name of the administrator was changed incorrectly in Systems Accounts

I am trying to fix a friend’s eMac. It was working fine until the name of the administrator was changed incorrectly in Systems Accounts. Upon restart the computer failed to mount. I tried to reinstall Tiger and could not. The destination to do this install could not be found. While in Disk Utilities I tried to repair and then zero out erase the hard drive, this also could not be successfully done. The hard drive was working perfectly before the name change. I may try to load Tiger from the eMac onto an external drive and then hope to erase the eMac internal drive.
Thank you for your thoughts on this as it would be a shame to retire this trusted computer.
Nick M.

Hello,
Thank you very much for your attention to this. Yesterday I was able to get the eMac to install Leopard onto an external drive. I had hoped that once done I would be able to initialize or erase the content of the internal drive in Disk Utility, but was not able to do so, I only received error messages telling me my request failed. This was also true when I tried to create partitions on it. So in effect, the computer runs, but only from the external drive. I could not even find the internal drive while running from the external drive. Where is it? And the internal drive only occasionally shows up in Disk Utility.
As for holding Option and Alt, the internal drive did not show up.
And Leopard was running on the eMac when I lost contact with it. Again, all failed when a name of the administrator was changed, but was not properly done. Or something like this.
Is there anyway I can use Terminal to help reach the internal drive?
I realize I am asking a lot of questions.
And I thank you for your time,
Nick M.

DDIC and SAP* changing into usertype system

In order to secure the Standard Users DDIC and SAP* against misuse i
planned to change them into SYSTEM accounts instead of DIALOG.
Is there, in case of a standard SAP implementation, any indications that
we shouldn´t do this?
In the guidelines and forums i couldn't find any arguments against
such a situation.
The SAP* accounts is further secured by setting the system profile
parameter 'logon/no_automatic_user_sapstar' to 1.
Thanks in advance for your reactions.
With kind regards,
Edwin Stam

As of release 7.00 EhP1 there is a new procedure for this.
See --> Lock DDIC user but keep the RDD* jobs working. and the link to the help.sap.com documentation.
The users are already blocked from authenticating via trusted RFC. Changing the user type to system will also prevent them from being used on the issuing system for SAP Logon Tickets as well as attaching a SAPGui to a logon session in the backend systems. You can also disable the password in SU01 (which will delete the password hash).
Alcatraz for standard users...
Cheers,
Julius
Edited by: Julius Bussche on Dec 16, 2009 3:28 PM

Ifweb60 processes run as local system account on w2k- how do i change?

i am running forms 6i on an 2000 box using
the forms servlet config and oc4j with 9ias.
this runs fine except that the ifweb60 processes
are owned by the local system account. this in
turn means i can't map the forms60_path to a
network drive because i can't give network
privileges to a local system account. so,
how do i change the account that spawns the
ifweb60 processes?
thanks,
marta

Never mind, resolved this myself by using the netbios name to substitute the value I need on each individual domain.
$domain = Get-ADDomain | Select-Object -expandproperty netbiosname
Set-Location "dc=$domain,dc=dom,dc=co,dc=uk'
Sets location as:
PS AD:\dc=a,dc=dom,dc=co,dc=uk>
ON another domain same script results
PS AD:\dc=b,dc=dom,dc=co,dc=uk>
Exactly what I needed!

The password for the account "account name" was not changed. Your system administrator may not allow you to change your password or there was some other problem with your password. Contact your system administrator for help.

I have a user who's Active Directory password is going to expire. I had her reset her password by going to apple > system prefs > user > and clicking change password. She received the error "The password for the account "account name" was not changed. Your system administrator may not allow you to change your password or there was some other problem with your password. Contact your system administrator for help."
I had her change her password via the kpasswd command in terminal and that changed her password on the server sucessfully however the laptop has FileVault on it. Filevault is not recognizing the new password just the old password.
I have deleted the keychain which didn't resolve and now I am going to decrypt and reencrypt the drive. I'm hoping this is an isolated issue I have over 25 laptops configured like this.

I "think" the trick was unbinding and rebinding the computer account.
After unencrypting and trying to reencrypt Filevault would still not take the new password.
Rebooted the prompt to update the keychain appeared. Updated the keychain. Filevault would still not take the new password.
Unbinded and rebinded the computer account. It worked and let me add the user to filevault.

System not changing the G/L account when material group is changed in Pr

Hi Experts,
Issue- System not changing the G/L account when material group is changed in Purchase requistion.
Process followed:
1. Create Service Pr with material group 5040 which is assigned to valuation class 3511 and 3511 is assigned to g/l account 51370000
2. Changed Service PR material group from 5040 to 5050. 5050 is assigned to valuation class 3512 and 3512 is assigned to G/L account 51260000
The issue is when we changed the material group from 5040 to 5050 system is not picking the g/l account which is assigned to 5050 i.e. 51260000
instead the g/l remains remains as before which is there for 5040 i.e. 51370000
Please let me know how can we resolve this problem and pick the correct g/l. Please find the attachments
Regards
Badri

Hello Badari,
if you are using the item category D "Services", explanation from note 663983 - ME22(N), ME52(N): No new G/L account from material group applies:
Please consider the following:
You can maintain the material group both at item level and at service line level. If you subsequently change the material group at item level, the material groups remain unchanged in the services. As a result, the G/L account is not redetermined at service line level.
In order for the G/L account to be redetermined, you must explicitly change the material group in the service line.
Kind Regards
TomT

User account changes to system account

I created a few pages and approved them. When I goto View All Site Content>>Pages
I see that "Modified by" column shows "System Account" instead of my user id.
Any one had this problem ?

Hi,
You've probably used your account as a system account for SharePoint, when you installed it. SharePoint automatically changes the name of the system account to 'System Account', instead of DOMAIN\Administrator or something like that.
So, it's by design. You can fix it by changing the system account to another account in SharePoint.
- Mart

Change system account to username?

HI,
I have created out-of-box workflow ,in the version history the modifiedby column showing as system account instead of username.
so want to display actual username instead of system account.
help is appreciated.
Thanks.

Hi,
You can check it from
central administration > operations > security configuration > service accounts > credential management > web application pool and you can also change the account. But you’d better use the account which has same
permissions with your current account, or you will encounter more other issues.
Besides, if it is not application pool account, please go to
Central Administration > Application Management > Policy for Web Application.
Then select your web app and if you find your account in the list, click it. In the Edit Users page, clear the
Account operates as System checkbox. That should fix this particular problem.
Hope it is helpful!
Seven

How can I change the active iCloud account in my Mac

My doughter set up the cloud in my mac, but she used her apple id. Now I cannot change the icloud active account from hers to mine. What can I do?

Click the apple >> system preferences >> iCloud >> sign out. Then sign back in with the desired apple id. Some data will be removed when you sign out. You can export data you want to keep first, sign out, then reimport. If it's just your daughter's info, then this probably won't matter to you.

Change ownership from "system" on mounted volume?

I have an external firewire drive with 3 partitions all of which are mounted on an iMac, and which until recently all had the same ownership and permission settings under my admin account. One of the volumes (the one storing all the users' iTunes songs) somehow changed ownership to "system" and group to "wheel". I can no longer access the volume nor can the other user accounts on the iMac, although it shows up as a mounted volume when viewed in Disk Utility. "Repair permissions" is unavailable for this volume in Disk Utility. The other two volumes are unaffected and retain the original ownership settings. I'd like to reset ownership from "system" to my admin account, but do not know how to do so as apparently it needs to be done through unix commands using Terminal. What do I need to do?
iMac Mac OS X (10.4.8)

"...under Ownership & Permissions, click on the lock, enter your password, and change the Owner to you, with R&W access and the Group to admin, also w/R&W access, and click o Apply to enclosed items. Click the lock and close the Info window. No need to use Unix commands in the Terminal app."
I first tried that approach but unfortunately the procedure does not work. Under Ownership & Permissions it says "You have No Access". I can click on the lock and select my name under Details: Owner, but once I click to relock, Owner just reverts back to "system".

Cannot Retrieve referenced URL in wscript file from Local System Account, but not other accounts on the computer.

Hello,
I have a WScript File that includes an external resource (js file).
It works on one computer and it does not work on another computer.
If I run this file from a normal admin command prompt everything runs fine on both computers.
If I run this file from the Local System account using PsExec it runs fine on one of the computers and throws an error "Cannot Retrieve referenced URL" on the other computer.
The reason I want it to run from the Local System account is that it is executed from a Windows Service.
Is there some setting or some way for the IE cache to get corrupt on the Local System account or something like that?

JRV,
You are by far the worst 'support' person I've ever seen. If you aren't going to be thoughtful in providing support, don't pretend. If you're going to pretend, leave your condescension on the shelf. You have provided no thoughtfulness whatsoever to his issue,
and have in no way improved the discourse. You are arrogant and condescending without exhibiting any intelligence whatsoever. I'm impressed Matt kept calm through your demeaning, counterproductive diatribes.
Matt,
First I'd check UAC settings, because I believe that can change how elevation works substantially.
Second, I would check the versions of wscript.exe on both machines, both in System32 and SysWow, and I'd check for updates bypassing WSUS to make sure there's not something silly going on there (totally a shot in the dark, catch-all theory).
Have you made any headway in the last few weeks?
-John
This is not a support forum and it is not for assistance in fixing broken configurations. It is a scripting forum. The OP proved that the issue is not the script but the environment it is running in. You should not get mad just because you are
not getting satisfaction.
¯\_(ツ)_/¯

Can no longer change the G/L account in AO90

Hi!
I have a problem changing the G/L account in AO90 for an account determination where I have posted the wrong account. Since I have already created assets with an account determination that includes this account, it says that I "can no longer change the value '124000' for the G/L account.
I have found some threads with info f.ex:
- AC476 in transaction OBMSG, but it require SAP entry
- reverse the posting values in transaction ABF1, but I'm not 100% sure how to reverse it...
How can I remove the asset/reverse asset values so it will be possible for me to post the correct account? I'm currently working in a dev system, so these are fictive assets that I can delete (which I cannot do as there are values on them). But i have to get this in order to transport the correct properties to the test system.
All help much appreciated!
Regards
Haakon Bekkestad

Its Very Simple.
To change GL Account for asset class first remove GL Account in A090 i.e.
put it as blank and save it.
Come out from AO90 transaction code and change gl account.
It will posted.

Client object model - Usage of System account

We are about to start using Client object model (C#) for SharePoint 2010. We have been using Server object model and used Run with elevated privileges for most of the SP operations.
In Client object model, there is an option to use system account credentials as the context credentials.
Is there a security hole with this approach or is it advised to proceed with this approach?
Refer the below link where it is mentioned as a security hole.
http://stackoverflow.com/questions/8496322/sharepoint-2010-change-context-for-runwithelevatedprivileges
Reason for adopting COM - We want to use ASP MVC 4, Web API 2 for writing API for our application which uses SP 2010 as a backend. As SP2010 does not support .net runtime 4.0, we wanted to use COM and host the API separately.

I will suggest you to pass credentials of a user with site admin permissions in your code which can act similar to elevated privileges for all SP operations.
I have used in almost similar requirement where I was using ASP.NET MVC and SharePoint 2013, and using SharePoint for document management.
Adnan Amin MCT, SharePoint Architect | If you find this post useful kindly please mark it as an answer.

JDK 1.6+ 32bit version on Vista 64 - SYSTEM account issue

Hello,
I am just fishing for experience here with installing the Java JDK 1.6 (32 bit version) on Vista64 using the SYSTEM account. My test case that I am using is I can download any of the 1.6 JDK exe versions then create a simple task to run as SYSTEM that will execute the exe with the /passive (tried /qn as well) option this fails with "return code 1619" which is something about package can not be opened. However when the task is changed to run with an admin account this task completes return code 0 and the the JDK is installed.
The root problem here is we are attempting to install apps that require the 32 bit version of the JDK to be present to install where everything is being installed through SMS using the SYSTEM account.
Any insight anyone might have on this would awesome

Zia wrote:
but my OS is 64 bit as "uname -a" command shows.No ...
i686 i686 i386... these are part of the x86 family, which is 32-bit.

Workflow Task not able to be completed due to "System Account" in Requested By field not resolving.

I have a workflow firing on create and update in a list. The list is a calendar that is email enabled. The tasks are assigned with the requested by set to be the System Account, which shows underlined in red when trying to complete the workflow task. This
is a sharepoint designer 2010 workflow using the assing approval task action. I was hoping to see a variable used when assigning the task to allow changing that from the system account to the created by on the original list, which I am able to assign for the
approval workflow starting notification since that also was trying to go to the system account.
Here is the task as it looks which will not allow completion even by site collection administrator.
If the workflow starts with direct entry in the list, all works fine. This is related to the system account creating the initial item, but was hoping to override that during the task process.
Anyone else run into this and have solution?

Hi Alan,
I can’t reproduce your issue, but you can change the requested by on the task form to “created by” column. Go to SharePoint
designer, open the workflow, under forms section, click task type form workname.xsn to open it in InfoPath form, then you can change the requested by to created by.
For more information, see
http://blogs.msdn.com/b/edhild/archive/2011/06/01/creating-custom-workflow-task-approval-forms-with-sharepoint-designer-2010.aspx
Best Regards.
Kelly Chen
TechNet Community Support

Changing OOTB "xelsysadm" system account ID

Similar Messages

Maybe you are looking for