Disable password change

Hi friends,
I want to disable the password change for the user. We have few basis administrators with full authorization for SU01. So only the the user id of the respective user should have the authorization to change or modify the password...
As the user only has the rights to change his/her password. Other users are not authorized to modify the password and they can only reset the password...
thank you...

>
KINGS wrote:
> Hi friends,
> I want to disable the password change for the user. We have few basis administrators with full authorization for SU01. So only the the user id of the respective user should have the authorization to change or modify the password...
>
> As the user only has the rights to change his/her password. Other users are not authorized to modify the password and they can only reset the password...
>
> thank you...
Frankly speaking I do not understand the motivation for your inquiry.
A password is a private secret - supposed to be known only by the user him-/herself. For exactly that reason the system prompts the user to change the password if the password was set by an administrator (who then also knows the password) or when the password was generated (since then the password was not chosen by the user, as well).
That kind of password change (performed by the user) requires that the user is able to present a valid current password ("old password"). Only if the "old password" was valiated successfully (s)he can set a "new password". No special authorization is required for that action.
That's different from the operation an user administrator performs (using SU01): the admin sets a new password - without being forced to know the current password. But that action requires user administration authorizations.

Similar Messages

How to disable password change for you logon first time.

hi,
When i change the password of any user or when i create new user and login with the same user it ask to change the password again can sap have provided to disable this feature where in user won't be ask to change password again.
thanks,
- John

Hi,
I'm not quite sure, but you can try with some of these profile parameters.
Initial Password: Limited Validity
<i>login/password_max_new_valid</i> - Validity period for the passwords of newly created users
<i>login/password_max_reset_valid</i> - Validity period for reset passwords
Svetlin

Disabling password change

Hallo,
I'd like to disable possibility of portal users to change their passwords. I though, changing ume.logon.security_policy.password_change_allowed to FALSE (in sapum.properties.bak - I naturally cut the .bak suffix) is sufficient. But when I'm log in portal, I get an exception: "Unknown message (ID = Authentication error: credentials could not be verified.com.sap.security.api.AuthenticationFailedException: SAPSTAR_ACTIVATED)".
Can somebody help? Is there another way to do it?
Thanks, Pepa

Hi Pepa,
the way to do what you wanted:
System Administration - System Configuration - UM Configuration - Security Settings - Disable "Allow users to change passwords" - Save.
When you reactivated sapum.properties, it seems you also reactivated the sap* user. If this one is activated, nobody else can logon to the portal.
Hope it helps
Detlev

Disable AD user after first successful login (after password change) after x amount of days regardless of activity

I've been searching for over a week high and low now trying to find a way to do this via PS.
We'd like to lockout certain users (we can put them in a group/OU) 30 days after their first successful log in - the one requiring
password change by them.
And we'd like to disable it REGARDLESS of their activity.
All the tips and scripts I've found look for 'inactivity', date created etc.
Only parameters I need are 30 days AFTER the first log in. Accounts might be created 60 days before actual use, but still need to be disabled 30 days after their first successful log in.
Any tips would be GREATLY appreciated!

I don't think you're going to get the kind of solution you want via scripting. As jrv noted, usually this kind of issue is managed by using account expiration and password expiration. If that won't work for you, then I would recommend looking into supported
third party tools that can help you get where you need to go.
-- Bill Stewart [Bill_Stewart]
As Bill points out you need to look into third party tools. If there is any legitimate legal or industry need for this then there wil be third party tools. Having worked in medical software systems \I can tell you there is not. There are
old systems that use now-obsolete mechanisms that do things similar to what you are asking. They are no longer usable.
I think if you sat down with those asking you to do this and had them get the actual industry and government rules on the table you would see that this is not what they are asking you to do. It aslo doesn't make much sense from a technical standpoint.
Just set the password expiration. That is what it is designed for. To force reauth just set the account so the user cannot set the password. Use the reauth web page to allow the user to set a new password. Use the corporate disclaimer
or a desktop link to notify users what to do when the password expires.
¯\_(ツ)_/¯

TS2446 my apple id has been disabled i changed password but it's not works

my apple id has been disabled i changed password but it's not works

Try logging out of your account on the phone by tapping on your id in Settings > iTunes & App Stores and then log back in and see if that 'refreshes' the account on it
If that doesn't work then you might need to contact Apple : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page

Im keep on getting your app store id has been disabled. i change the password and its still doing it

im keep on getting your app store id has been disabled. i change the password and its still doing it

Check with iTS to see why.
iTunes Store Support
http://www.apple.com/emea/support/itunes/contact.html

ACS 'Password Change Rule' doesn't work with telnet

Hello:
I am trying to configure that users have to change their passwords when they enter to a network appliance the first time they log in.
I have an ACS 4.0 appliance, the option "Disable TELNET Change Password against this ACS and return the following message to the users telnet session" is disable. When I try to enter to a Catalyst 6500, for instance, I type user and pass and I get Rejected (RADIUS is the protocol used).
In the ACS' reports I can see it appears the next error 'Authen Failed - CS Password Expired'.
I only have enabled the option "Apply password change rule" in Group Settings, the others options for "Password Aging Rules" are deactivated.
Thanks for your help,
Francisco

You'll need to be using TACACS+ to get password change to work.
Doesnt work with RADIUS.

Password change from SSH in Cisco Secure ACS 4.1

I am using cisco ACS for windows Release 4.1(1) Build 23 Patch 5.
I have enable password aging for 30 days. after 30 days it is prompting me to change the password while i telnet to any client. it is working fine.\
Recently we have disabled telnet in all network devices and using ssh instead of telnet.
Am not able to change the password from putty. same if i connect through the telnet it is prompting to change the password.
Because of this i am not able to access any network devices after 30 days.
Suggestions will be greatly appreciated.
Thanks in advance.

Went through this painful exercise a couple
weeks ago. You need to use the IOS 12.4
K9 image on the routers because password change
only supports on ssh version 2. See example
below:
[Expert@P1-NGx]# ssh -2 -l ngx1 192.168.15.248
[email protected]'s password:
Password change request
Enter [email protected]'s old password:
Enter [email protected]'s new password:
Retype [email protected]'s new password:
C3640>sh ver
Cisco IOS Software, 3600 Software (C3640-JK9O3S-M), Version 12.4(13a), RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Tue 06-Mar-07 20:25 by prod_rel_team
ROM: System Bootstrap, Version 11.1(20)AA2, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
C3640 uptime is 1 week, 5 days, 13 hours, 5 minutes
System returned to ROM by reload at 03:18:41 UTC Fri Nov 28 2008
System restarted at 03:20:58 UTC Fri Nov 28 2008
System image file is "flash:c3640-jk9o3s-mz.124-13a.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
Cisco 3640 (R4700) processor (revision 0x00) with 98304K/32768K bytes of memory.
Processor board ID 24829119
R4700 CPU at 100MHz, Implementation 33, Rev 1.0
2 FastEthernet interfaces
4 Serial interfaces
1 HSSI interface
DRAM configuration is 64 bits wide with parity disabled.
125K bytes of NVRAM.
32768K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
C3640>
Easy right?

Disable password expiry in Portal V2

Hello,
Is it possible to disable password expiry in Portal V2 (ias902).
I do not password to expire for some users at all.
Thanks,
Ritendra.

Hi Kaustubh,
Refer this link:
how to disable the "change of password" field in login page of SAP portal?
Regards,
jithin

Can I Disable Password Lock When iPod is Docked in Digital Alarm Clock?

Hi. I bought a Jensen Docking Digital Clock Radio for iPod and set it up today. When I dock it on the Jensen and set the alarm to turn on and play a song, the password makes the alarm just buzz. I cannot find a way to keep the iPod unlocked -- is there a way to do so? I tried removing the password and cannot using Settings. Thanks in advance.

Hi Matt,
I understand your concern, although I wasn’t able to find a way to disable or change these embedded Windows messages.
With Account Lockout policy enabled, the risk that accounts being hacked has been reduced a lot. In addition, we can monitor security logs to determine whether hacking behaviors exist or not.
More information for you:
Audit Policy Recommendations
http://technet.microsoft.com/en-us/library/dn487457.aspx
Configuring Audit Policies
http://technet.microsoft.com/en-us/library/dd277403.aspx
Best Regards,
Amy

How to disable password updating ?

I log into an internal website multiple times a day. In the login form, I am required to enter a password.
The password I must enter is (ex.:) "boat123". Upon hitting the "Login" button, the code on the page changes the password to some other encrypted version then submits the information. Thus, the password I entered and the password submitted are different. Firefox sense this change and asks me if I want to update the password every single time. I find this behavior very annoying since I can't use the site with the "updated version" of the password, only the one I type in.
Is there a way to tell Firefox to not ask me to update my password OTHER THAN disabling password saving altogether ?
Thanks.

Follow my prior instruction and enter that website into the '''''Exceptions'''''
list and see what happens.

How to disable password

Hello. i need help.
how can i disable the password lock bb8700c? in the security options there is no point disable password. firmware version 4.5.0.182

Hi and Welcome to the Forums!
Often, if you have Content Protection enabled, then the password is required. You have to turn off content Protection:
KB11963How to change the setting for Content Protection on the BlackBerry smartphone
Alternatively, if your BB is part of a corporate BES environment, you may be required to have a device lock password...and there is nothing you can do to disable that requirement.
Good luck!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

How to disable password complexity

Ok, I have XE 10g installed with Apex 4.1 ...
The windows 2008 R2 server has Password Complexity Policy Disabled....
How do I disable Password Complexity in the Oracle Apex 4.1 it asking me to
change the admin password on initial loggin after I just changed in SQLPLUS ...
Another Great New Feature... I can see I'm never going to be able to upgrade pass 10g and 4.02 at
this rate....
Thank you....

See:
http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21678/adm_mg_service_set.htm#AEADM204
The first time you have to set a complex password. After changing the settings, you can change it to a simple password.

How to disable password complexity via command

hello
i have spent hours searching to find a command or script (powershell, cmd, VB, registry...) to disable group policy password complexity. few solutions has been delivered on the net but none of them works.
i wonder how what a pity if we can't do such simple thing in Microsoft windows
i really need that because i have created a script which contains many lines which automates windows customization which i always need in my classrooms for testing & teaching purposes
thanks in advanced

The answer is in your question: group policy password complexity. http://technet.microsoft.com/en-us/library/cc875814.aspx#ECAA
On a non-domain joined pc, this is governed by local policy.
Note that if your domain is on functional level 2008 or up, you can use fine grained password policies to have a different password policy on the systems your are deploying. http://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx
There
is no (supported) way to change the password policy applied to a computer. That is intended in the design because password complexity is one of the keys to protect against bruteforce attacks.
Why wouldn't your script be able to handle password complexity rules? I would recommend tackling this in
your script, not in password policy.
MCP/MCSA/MCTS/MCITP
hi SenneVL
i don't understand your sentence: "Why wouldn't your script be able to handle
password complexity rules? I would recommend tackling this in your script, not in password policy."
i exactly need a way to disable password complexity via an script. what script can do that
? as far as i searched, no script

How to "Disable Password Protected Sharing" it always switch back (PosReady7)

Hello,
I'am trying to disable password protected sharing within PosReady 7? When i'am trying to change it, its switching back.
I have tried to remove the password from the guest account but also no luck. The computer is not in in the domein.
Can someone help me with this?

Also not.
a workaround:
Start - Run - secpol.msc -> Local Policies -> Assign User Rights.
"Deny access to this computer from the network" right to search. (Double click)
correctly, is the user Support_ <number>, but ALL other users (including guest) must be removed

Disable password change

Similar Messages

Maybe you are looking for