EVID's 4738 with no changed attributes

Hi,
We are seeing "Event Id 4738 - User Account Changed" events from the DC. But we are not able to find out what attributes were changed on the account. I would very much appreciate any help regarding this.
Changed Attributes:
                SAM Account Name:      -
                Display Name:                   -
                User Principal Name:      -
                Home Directory:
                Home Drive:                       -
                Script Path:                         -
                Profile Path:                       -
                User Workstations:         -
                Password Last Set:          -
                Account Expires:
                Primary Group ID:            -
                AllowedToDelegateTo: -
                Old UAC Value:                 -
                New UAC Value:
                User Account Control:   -
                User Parameters:            -
                SID History:                         -
                Logon Hours:                     -
Thanks,
Manu

Hi,
Based on my understanding, something was changed to the user, but not logged in the event. To check whethe this is true, we can reset some attributes listed in the event, and then check the event logs. In addition, we reset an attribute not listed in the
event log and then check event logs again.
The standard event 4738: A user account was changed like below:
http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=4738
Regards,
Yan Li
Regards, Yan Li

Similar Messages

Trouble with OAM Change Attribute Workflow

We're trying to setup a Change Attribute workflow but cannot get the Request to Modify button to appear on the modify profile. Our first test was to:
1) Assign Modify rights for Full Name to anyone & anonymous roles
2) Using QuickStart, generate a change attribute workflow for Full Name
3) Login as orcladmin
4) Open up a user profile for modification
We're assuming the Full Name field should no longer be editable, but should show a Request to Modify button on its right. This doesn't happen. The field is still editable and no button appears. Are we missing something?

Thanks for the help. Having reinstalled OID/OAM a bunch of times to properly add our custom user object, nothing seems absurd. I tried running through your steps, but I'm still not getting the workflow button. I've customized create and delete workflows properly, but the change attribute is a mystery.
I did the following:
1) Selected a custom attribute in Attribute Access Control
2) Changed its read access to Anyone
3) Saved
4) Changed its modify access to Anyone
5) Saved
6) Added a new Change Attribute workflow for the custom attribute
7) Action #1: Request, added Anyone as participant and saved
8) Action #2: External Action, selected attribute is the custom one
9) Action #3: Commit
10) Saved and enabled the workflow
11) Restarted the Identity server
12) Picked a user
13) Opened his user profile
14) Clicked Modify
The custom attribute is still editable and has no Request a Change button.

HT4972 When I Copy & Paste, what results in the Paste is NOT what I copied. With enough shaking, eventually a box appears saying "Undo Change attributes", which fixes it. HOW do I turn off "Change attributes" in iOS 5.1?

When I Copy & Paste, what results in the Paste is NOT what I copied. With enough shaking, eventually a box appears saying "Undo Change attributes", which fixes it. HOW do I turn off "Change attributes" in iOS 5.1?

Did you ever figure out which output worked the best? I have the same original footage; trying to determine the best output settings to make a dvd for tv.
thanks!

User change attribute workflow with approval problem

Hello,
I have a requirement to add account numbers to user entry through workflow with approval process. and also same user can have multiple account numbers. when approver approves the User request then it's account number will be added into the user entity in ldap.
So, i have created a Change Attribute workflow for that account number with these steps as : initiate, Approval, Commit, Error_report
this workflow i am able to invoke through IdentityXML call and from OIM interfaces approvers able to approve and that account number is persisting under the User entity.
Problem is: Actually above request is staging system. when user requests, it is in initiate step, when approver approves the request then only commits the info. so, there are 2 stages here.
When i am requesting two consecutive account number requests then both requests are in initial stage. Then approver approves the 1st request then it is persisting into User entity. after that approver approves the 2nd request then this account number is overwriting the previous one. so, here is the problem i am finding. worflow is not adding the new account number.. instead its replacing the last value in the list of account numbers for an User entity.
I hope the above problem make understandable..
Really its a very much helpful to find the solution on this.
Thanks in advance,
Srini.

Thanks for the help. Having reinstalled OID/OAM a bunch of times to properly add our custom user object, nothing seems absurd. I tried running through your steps, but I'm still not getting the workflow button. I've customized create and delete workflows properly, but the change attribute is a mystery.
I did the following:
1) Selected a custom attribute in Attribute Access Control
2) Changed its read access to Anyone
3) Saved
4) Changed its modify access to Anyone
5) Saved
6) Added a new Change Attribute workflow for the custom attribute
7) Action #1: Request, added Anyone as participant and saved
8) Action #2: External Action, selected attribute is the custom one
9) Action #3: Commit
10) Saved and enabled the workflow
11) Restarted the Identity server
12) Picked a user
13) Opened his user profile
14) Clicked Modify
The custom attribute is still editable and has no Request a Change button.

Manager is not able to change attribute

Hello SRM Guru,
As per my knowledge Managers can change the attributes defined for their organizational unit(s) or for users in their organizational unit(s) using the Web application Changing Attributes BBPATTRMAINT. In my case manager is only able to only change attributes defined for their organizational unit(s) not for the users in the organizational unit(s).
Could you please suggest what could be the setting I am missing? I have also tried with standrad manager and administrator role.
Thanks,
Jack

Jack
It seems that you are trying to change the attribute value which is inherited.
If the user attributes are inherited from the parent org unit level, then you cannot change them at user level. You need to go to the parent level where attributes are set and change there. This will affect to all levels down the line wherever inherited. Be careful while doing this.
If you do not want those attributes to get inherited down the line then remove the value at parent level. Then you can add new value to that attribute at the user level.
Regards
Jagdish

Operation ' Change Attribute TSTATE ' could not be carried out

Hi All,
When I attempt to compress an infocube I get the following error messages:
@5C\QError@ Operation ' Change Attribute TSTATE ' could not be carried out for Request 1114486
@5C\QError@ Termination in problem report 'RSS2_DTP_RNR_SUBSEQ_PROC_SET' in row '255'
I checked the request 1114486 in infocube and saw that its status is green however the overall status in the load monitor was "deleted".
How can I fix the problem with this request ?
It is a very old request and it was already uploaded to several other targets.
Thanks in advance..
Berna

hi,
It can be due to large data volume which might require more system resources then usual, see if there is any dump related to this in ST22, Also check whether any request is currently running on cubefor data loaded to cubeor getting load to further targets
try compression for less requests say 3 or 4, see if it works or not
hope it helps
regards
laksh

Rich Text Editor with Custom Text Attribute

Hello All,
We are using the latest version of Oracle Portal 10G. I have a need to create custom Attributes of the type text to let people enter a lot of text. But when User are in edit mode of an item where this custom attribute is used, the Rich Text Editor is not shown for entering the Text for the Custom Text Attribute. It shows a normal html text area. Has anyone ever used RTE with Custom Attribute?
I request you guys for help.
Thanks.

The Problem with the Custom Attribute is not solved, but I have now compromised with the Situation and now I am not using a Custom attribute.
Rather, Now I am creating a Custom Item Type using Base Text Type (earlier i wanted to create custom item type at my own without any base item type). In this case now I will not be able to change the Lable of the RTE (that is "Text", when the Custom Item is in Edit Mode), but I hope that my users can understand that much.
I have created a template for portal pages. In the Template I can edit the Region Properties. When I edit the Region property of the region where I want to display my Custom Items. I get two Tabs on the top, Main and Attributes/Style. ON the main tab I can tell what type of region it should be, width etc, in my case it is item type region. And on the Attributes/Style tab, I can select from the availabe Attributes as which all Attributes I want to display. Here if i select only "Associated Functions" Attribute then normally portal should not render anything by default on the Page. It should rather make a call to the procedure which is associated with the Custom Item and as when I was creating the custom item type, I had clicked on "Display Procedure Results With Item", so portal should now display the result of my Procedure. So far it works without problem.
But the problem is that the Portal displays the text at its own also. As i have written that Portal should not display anything at its own, this doesn't work in this version of Portal for a Custom Item Type that is made using Base Text Item Type. For all others it has worked till now (I have create 50s of Custom item types).
You can better understand by going to the following URL. Just have a look between the two dotted lines (Dotted line is also a seperate Custom Item Type). Between the two Dotted Lines is a custom item, in general it would be a Custom News Item having title, image and so on.
http://sunnode1.edvz.sbg.ac.at:7778/portal/page?_pageid=79,56047&_dad=portal&_schema=PORTAL
I have really programmed a lot with portal but now at this stage where I am near to end, I am getting problems which are coming from Product. I request you for help.

Changing attribute order in a planning layout

Hi all,
I have a planning layout with one characteristic in lead column and 4 others attributes to be displayed with. The attributes appear with the following order:
-standard infoobject (sort by technical name).
-all other custom infoobjects /(sort by technical name too).
Is it possible to change this order?
Thanks for help
Vincent

No
I dont think that is possible.
Chirag S

How to Synchronize an association with Database Changes

Hi,
I was wondering if someone has any ideas about how to manage FK changes with the BC associations. In general my questions center around tooling support for re-factoring associations and syncing them with db changes. I have read the following but all these discuss entity attribute related changes which are simple to manage.
http://download.oracle.com/docs/cd/E14571_01/web.1111/b31974/bcentities.htm#ADFFD169
http://jdeveloperfaq.blogspot.com/2010/02/faq-15-how-to-synchronize-adf-entity.html
Re: How to manage ADF BC components in the case of datamodel changes
I have 4 use cases.
Case 1: When an association is added to the db, how does one bring it to the BC layer.
Case 2: Deletion of an association from db is easy to manage because once it exists in bc layer, it can be treated as a valid one at the model later regardless of its existence on the db.
Case 3: When an association is modeled in BC layer and a corresponding FK does not exist in DB. How does one turn that association into a physical FK in the db if one wants to install a FK. What is the naming convention for installing such a db FK constraint that can sync easily with tooling. I understand that it is not necessary to have a physical FK as the BC layer will take care of enforcing the relationship. But my requirement is that first the modeling at bc layer can go on and then the constraint can be implemented at a later date.
Case 4: When a FK is renamed in db how does one reconcile that with a previously created association at the model layer based on an old fk with a different name.
Thanks,

The synchronize with DB will pick up new FK defined in the DB and will suggest to add them to your ADF BC layer.
You can also generate DB objects from your ADF BC layer.
Drag your ADF BC into an ADF BC diagram, select all of them, right click and select Generate Business Object->Database Objects
This will create the objects in the DB - note though that this will override your DB objects.

IAM-3056160:Modify User Profile request cannot set or change attribute Job Code, since it is not defined in the corresponding data set.

I am trying to modify the value of the field "Job Code" through API I am getting the following error.(OIM11gr2). I do not get this error when updating the other fields. There is a field by the name USR_JOB_CODE in the database. When I poked around I found that there is no Job Code field in the User Form. Any ideas?
IAM-3056160:Modify User Profile request cannot set or change attribute Job Code, since it is not defined in the corresponding data set.:Modify User Profile:Job Code
oracle.iam.identity.exception.ValidationFailedException: IAM-3056160:Modify User Profile request cannot set or change attribute Job Code, since it is not defined in the corresponding data set.:Modify User Profile:Job Code
 at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:237)
 at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:348)
 at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:259)
 at oracle.iam.identity.usermgmt.api.UserManager_nimav7_UserManagerRemoteImpl_1036_WLStub.modifyx(Unknown Source)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
 at java.lang.reflect.Method.invoke(Unknown Source)
 at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
 at $Proxy2.modifyx(Unknown Source)
 at oracle.iam.identity.usermgmt.api.UserManagerDelegate.modify(Unknown Source)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke

THanks for your reply. Here is the snippet from User.xml that contains info about job code.
<entity-attribute>Job Code</entity-attribute>
<target-field>usr_job_code</target-field>
<field name="usr_job_code">
<type>string</type>
<required>false</required>
</field>
<attribute name="Job Code">
<type>string</type>
<required>false</required>
<searchable>true</searchable>
<multi-valued>false</multi-valued>
<MLS>false</MLS>
<multi-represented>false</multi-represented>
<attribute-group>Basic</attribute-group>
<metadata-attachment>
<metadata>
<name>multi-valued</name>
<value>false</value>
<category>properties</category>
</metadata>
<metadata>
<name>user-searchable</name>
<value>true</value>
<category>properties</category>
</metadata>
<metadata>
<name>category</name>
<value>Preferences</value>
<category>properties</category>
</metadata>
<metadata>
<name>bulk-updatable</name>
<value>true</value>
<category>properties</category>
</metadata>
<metadata>
<name>read-only</name>
<value>false</value>
<category>properties</category>
</metadata>
<metadata>
<name>visible</name>
<value>true</value>
<category>properties</category>
</metadata>
<metadata>
<name>encryption</name>
<value>CLEAR</value>
<category>properties</category>
</metadata>
<metadata>
<name>display-type</name>
<value>TEXT</value>
<category>properties</category>
</metadata>
<metadata>
<name>system-controlled</name>
<value>false</value>
<category>properties</category>
</metadata>
<metadata>
<name>max-size</name>
<value>512</value>
<category>properties</category>
</metadata>
<metadata>
<name>custom</name>
<value>false</value>
<category>properties</category>
</metadata>
</metadata-attachment>
</attribute>
I am able to retrieve the value of the Job Code attribute without any problem with the following code.
System.out.println("JOB Code: "+user.getAttribute("Job Code"));

[Workflow]Change Attribute - Request to Modify

Hi,
Im working with Oracle Identity Administration.
I create a workflow type Change Attribute with Approval. As I expected, a button will appear next to the attribute on profile panel but I could not see that button.
So all the changes was commit without any approval.
Please help to configure the workflow so the manager could receive an email with ticket to approve change request.
Thanks.

Hi,
You need to set the access to this attribute. You need to give 'modify' permission to the 'manager', and 'read' as well, the user MUST ONLY have 'read' permission this attribute.

Transfer values from change attributes

Hi All,
I have created custom field on change attribute screen, need to pass the value from this field to shopping cart full function screen field(same custom field on full function screen).
Please let me know, what badi should I use and method, and what structure should I need to update with this field if required.
Also internet service object for change attributes .
Thanks in advance
jog

Hi
HTML - Internet Services (using Transaction SE80)
BBPATTRMAINT
BBPDYNATTR
Try the BADIs ->
BBP_DOD_CHANGE_BADI
BBP_DETERMINE_DYNATR
Related links ->
Re: unable to change the attributes of the user.
Manager is not able to change attribute
Re: Change password using service BBPAT04
http://help.sap.com/saphelp_srm50/helpdata/en/b8/bdfc373db56203e10000009b38f842/frameset.htm
http://help.sap.com/saphelp_srm50/helpdata/en/05/45796b2b88fa4eb49fb4bc781a7d50/frameset.htm
Hope this will help.
Regards
- Atul

How to retrieve all records with its all attributes???

Hi,
I am trying to query LDAP to get all the records with is all attributes using InitialDirContext.search method.
But I am getting exception as "Invalid Attribute exception".
For the search method i used filer as
String filter = "(&( uid =* ))";
String[] filterAttr = { "uid" };
SearchControls searchControl = new SearchControls();
searchControl.setSearchScope( SearchControls.SUBTREE_SCOPE );
results = dctx.search( PPL_DN, filter, searchControl );
Please help to resolve this...
Thanks in Advance
Regards,
Peri

Thanks for the reply,
It is working fine now.
I see with the outer part [(&(uid=*))] in filter is working fine in 32 bit JRE. where as in 64 bit JRE it is not working with the outer part.
In 64 bit i changed the filter to [uid=*] and it worked fine.
Can you please tell me why this difference is required in filter with respect to JRE.
Thanks in advance.
Regards,
Peri
Edited by: Peri K on Dec 28, 2011 8:27 AM

I have to select a file – get Info – and change – open with and change from preview to another program and CHANGE ALL everytime I boot up

Why do I have to select a file – get Info – select – open with – and change from Preview to another program and click CHANGE ALL with every file extention everytime I boot up.

Back up all data.
This procedure will unlock all your user files (not system files) and reset their ownership and access-control lists to the default. If you've set special values for those attributes on any of your files, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it.
Step 1
If you have more than one user account, and the one in question is not an administrator account, then temporarily promote it to administrator status in the Users & Groups preference pane. To do that, unlock the preference pane using the credentials of an administrator, check the box marked Allow user to administer this computer, then reboot. You can demote the problem account back to standard status when this step has been completed.
Triple-click the following line to select it. Copy the selected text to the Clipboard (command-C):
{ sudo chflags -R nouchg,nouappnd ~ $TMPDIR.. ; sudo chown -Rh $UID:staff ~ $_ ; sudo chmod -R u+rwX ~ $_ ; chmod -R -N ~ $_ ; } 2> /dev/null
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window (command-V). You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.
The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear, then quit Terminal.
Step 2 (optional)
The first step should give you usable permissions in your home folder. This step will restore special attributes set by OS X on some user folders to protect them from unintended deletion or renaming. You can skip this step if you don't consider that protection to be necessary.
Boot into Recovery by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
When the OS X Utilities screen appears, select
Utilities ▹ Terminal
from the menu bar. A Terminal window will open.
In the Terminal window, type this:
resetpassword
That's one word, all lower case, with no spaces. Then press return. A Reset Password window will open. You’re not going to reset a password.
Select your boot volume ("Macintosh HD," unless you gave it a different name) if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Under Reset Home Directory Permissions and ACLs, click the Reset button.
Select
 ▹ Restart
from the menu bar.

Change attributes

Hi all,
How do I change attributes of an item in a screen and in a table control at runtime
Thanks,
Rathul.

Hi,
You can do it by using the modify screen statement.
Syntax
MODIFY SCREEN .
Effect
This statement can be used in the statement block after LOOP AT SCREEN only and makes sense only during PBO processing. If FROM is not specified, MODIFY SCREEN modifies the attributes of the current screen element with the values from the predefined screen work area. If a wa work area is specified, its contents are used for the modification.
The wa work area must have the same data type as screen. The name component must contain the name of the current screen element, otherwise the statement is not executed. nweisung nicht ausgeführt. Up to the group1 to group4 and length components, all remaining components of screen and wa must contain either the value 0 or 1. The value 0 deactivates the corresponding field attribute, and 1 activates it.
If MODIFY SCREEN is executed during PBO processing, the modified attributes for the display of the screen affect the current dynpro after PBO processing. The attributes of the screen element of the dynpro are reset to their static attributes at the start of each PBO processing, so that the execution of MODIFY SCREEN during PAI processing does not effect the display of the following screen.
The active component
The active component is used to set the input, output and invisible components at once. At the start of PBO processing, the active component always has the value 1. If active is set to 0 with MODIFY SCREEN, input and output are automatically set to 0 and invisible is set to 1. Other values in input, output and invisible are ignored. Conversely, setting input and output to 0 and invisible to 1 automatically sets active to 0 and a different value in active is ignored.
Modifications in Table Controls and Step Loops
During processing of a table control or a step loop, the changes affect the current line of the table control or the current step loop group. Before the processing of a table control, the change to the attributes of a screen element that is part of a line in the table control does not effect the table control, since the values are transferred from the structure created using CONTROLS. Before a step loop is processed, the change to the attributes of a screen elements that is part of a step loop group affects all groups in the step loop.
Modifications to Tabstrip Controls
If the active component for a tab title of a tabstrip control is set to 0, the whole tabstrip page is hidden.
Example
In the following PBO module, an input field called val is made mandatory and converted to display in the foreground.
MODULE modify_0100 OUTPUT.
LOOP AT SCREEN.
    IF screen-name = 'VAL'.
      screen-required    = '1'.
      screen-intensified = '1'.
      MODIFY SCREEN.
    ENDIF.
ENDLOOP.
ENDMODULE.
In table contol also you can use the same logic.
Regards,
Renjith Michael.

EVID's 4738 with no changed attributes

Similar Messages

Maybe you are looking for