GRC Unlock Account - BUG ?

Hi All,
This is regarding an issue we found in our GRC system.
A UserID has been locked in ECC system sometime back.
For example: Valid From - 01-Jan-2014 and Valid To - 05-Jan-2014
UserID is in locked state and validity dates are as mentioned above.
Now User wants this account to be unlocked and raising a GRC Unlock Request.
User is selecting the system during Unlock Account creation and system is added with validity dates as shown below.
Valid From - Today's date
Valid To - 05-Jan-2014 [Existing UserID Valid To date in ECC system]
According to me validity dates for the system should be added as shown below
Valid From - Today's date
Valid To - 31.12.9999
Is this a bug? or Is this the standard behaviour? I hope this would be issue for most of the customers.
Please provide your suggestions on this.
Regards,
Madhu.

Hi Alessandro and Colleen,
Thanks for your inputs.
Actually the issue is, the same unlock process is working with VALID TO date as 31.12.9999 in GRC 5.3.
Now after upgrading to GRC 10.0, this was changed. Hence users are raising it as a concern.
I understand that system cannot recognize VALID TO date as it can be any date depending on customer requirement, but since it was working in 5.3 client is expecting the same in 10.0
While raising termination requests they are updating valid To date to the same day and submitting the requests.
For the terminated users, later if they need access again, Unlock account request is being raised and here they are not selecting any VALID TO date as it was updating with 31.12.9999 Valid To date in GRC 5.3 and now it is updating with VALID TO date based on SU01 record.
We raised this to SAP and I assume that this could be desired behavior as mentioned by you. Once SAP also confirms we will include this in our training material to make users used to it.
If there was any update from SAP will keep you posted.
Regards,
Madhu.

Similar Messages

CUP 5.3: unlock account type request

Hello,
Has anyone implemented request type for unlock account type without psw verification for LDAP authentication..but it still limits the user to only be able to unlock themselves, not anyone else?
I think Password self service should have included automatic unlocking of the userid as well..since most PSS requests are when the userid is locked in a system due to incorrect logons..so the unlocking request shouldn't have been separate from PSS.. It's a two step process to do currently..the user has to first do an unlock id request and then do a PSS to reset their psw.
But for those clients that are authenticating GRC system against a SAP system, there's no workaround to not require SAP id and psw ..but how can the user tell you the psw when they're locked out of that system to begin with..due to incorrect logon. SAP has no solution for it. They do need to come up with a solution for that and also automatically unlock the userid for PSS processes instead of having them go thru another request to unlock it.
Would greatly appreciate other ppl's feedback who have implemented PSS and unlock requests with LDAP authentication without psw verification.. otherwise, I would think anyone can unlock anyone without psw verification. The unlock request in order to automate the option to only unlock yourself but still be able to process requests of change or new account for others, is not available. It's either all or nothing in configuration.
Alley

Hello,
Has anyone implemented request type for unlock account type without psw verification for LDAP authentication..but it still limits the user to only be able to unlock themselves, not anyone else?
I think Password self service should have included automatic unlocking of the userid as well..since most PSS requests are when the userid is locked in a system due to incorrect logons..so the unlocking request shouldn't have been separate from PSS.. It's a two step process to do currently..the user has to first do an unlock id request and then do a PSS to reset their psw.
But for those clients that are authenticating GRC system against a SAP system, there's no workaround to not require SAP id and psw ..but how can the user tell you the psw when they're locked out of that system to begin with..due to incorrect logon. SAP has no solution for it. They do need to come up with a solution for that and also automatically unlock the userid for PSS processes instead of having them go thru another request to unlock it.
Would greatly appreciate other ppl's feedback who have implemented PSS and unlock requests with LDAP authentication without psw verification.. otherwise, I would think anyone can unlock anyone without psw verification. The unlock request in order to automate the option to only unlock yourself but still be able to process requests of change or new account for others, is not available. It's either all or nothing in configuration.
Alley

EUP Personalizaion - Delete/Lock/Unlock account

Hi,
I have followed a couple of links herein over EUP personalization, but didn't find the solutions on one scenario:
If I am going to raise the request for Delete/Lock/Unlock account then there is no need to have the tabs: Risk violation and custom tabs as enabled. So, is there any way to make these tabs disabled/invisible.
Would appreciate quick and positive response.
Thanks,
Ameet

Neeraj,
I doubt if you understood my question.
My concern is with restricting the tabs: Risk analysis and Custom tabs while raising the request for Delete..lock..unlock account.
I am aware of the procedures to follow through for making risk-analysis-criteria as visible/non-editable or so.. But that is not which I need to get clarifications on.
I tried to make the template based request where I don't find any option to make the tabs (risk analysis and custom) to make invisible once you are raising request for delete/lock/unlock account. As these tabs are irrelevant for such request types.
Hope this is clear to you now!!
Ameet

Unlock account with oiddas

Hello,
I want some users to be able to unlock accounts through oiddas.
Which is the minimum role I have to grant these (portal)lightweight users to do so?
Even a portal administrator doesn't have the 'account' subtab in the 'directory' tab.
orcladmin does have the tab, but don't want to share that account :-)
Thanks,
Ton

Good luck
Apple - Concierge

Self Unlock Accounts

Is there a way to self-unlock account. In our environment, 3 password typo's locks an account in IDM.
The user than has to contact help desk to have the account unlocked.
I know there is a "Forgot Your Password" self password reset capability using pre-enrolled chanllenge/response questions. But the same does not work for locked accounts.
Any body run into this....
Thanks,

In the Dafault Lighthouse Account Policy there is a field called "Locked accounts expire in " . Here you can specify the value in minutes,hours,days ,etc.
I think this will solve your problem

OIM - SAP CUA Connector - Unlocking Accounts

Hello All
We are implementing the Oracle Identity Manager connector for SAP CUA, and have the following concern:
If a user is locked manually by the SAP Security Administrator in a target SAP System (Prod for example), what is to prevent the End User from logging into OIM Self Service and unlocking themselves?
The OIM Connector Doc seems to state that the target system is unlocked regardless of locked state (meaning it sends an unlock request regardless of whether the user is locked or not).
How does this take Maintenance/Downtimes into consideration (where no business/end users should be in the system)? What about fraudulent or suspicious accounts (where the Security team has frozen/locked someone's account to prevent further activity)?
My thinking is that if an SAP Security Admin has locked an account, OIM should not unlock the account. The only unlocks which should take place are for Incorrect Passwords?
Just wondering if anyone has experience with OIM connecting to SAP CUA

>
Nigel Wyman wrote:
> My thinking is that if an SAP Security Admin has locked an account, OIM should not unlock the account. The only unlocks which should take place are for Incorrect Passwords?
>
> Just wondering if anyone has experience with OIM connecting to SAP CUA
Not worked with OIM, but worked with SAP IDM/GRC:
But I was asking why you would use CUA once you will have OIM working ?
1.you should have only a single point of user administration, why dont you lock the user from OIM instead of logging into CUA.
2.In our present project , DEV and QA we are using ACCESS enforcer for all user administration purposes with approval workflows, it works very well. security should not login to the systems without approval.

Windows 2008 R2 Domain Controller, Tracking of helpdesk staff invloved in unlock account, password reset

Dear All,
We recently gave permissions to group of level 1 staff to unlock OR reset password of users. In case user calls and report his account is locked OR if his password expires.
I want to track by auditing just in case something goes wrong, I can check in auditing. I have created a new GPO and select success/failure for Computer Config > Windows Settings > Security Settings > Local Policies > Audit Policy "Audi
Account Management"
applied it on domain top level and I did not changed settings of 'default Domain Policy' which is also linked on top level of domain.
But after applying this I am unable to see any event 4724 of password re-set when I attempted to test this GPO. What else is required to be done in order to trace users in group 'level1' if they change any body password.
Please assist.
thank you

Hello,
Total two DC's in our environment. But now I figured out and it is working now. It was supposed to set in Advanced audit policy > User account management, I enabled it for success and failure and my newly created GPO is applied on domian top in addition
to default domain policy.
I am able to see unlock events, password change events in my security log. So, it is working.
Thank you,
Wajeeh

Palm Pre 2 Unlocked NA Bug

Hello, I would like to let everyone know that there is a bug with the unlock screen on the palm pre 2. There are a number of people who have this problem and I am one of them. I have ordered two phones already and they have this problem.
The Problem: When Turning the phone on there is a slow "fade effect" when trying to unlock the phone with the lock icon takes multiple tries. The operating system seems to delay significantly on boot up. Below is video proof of what I am explaining.
http://www.youtube.com/watch?v=UERYi-isktw
Post relates to: Pre 2 p102una (Unlocked NA)

I can reproduce this too but only if I'm instantly trying to unlock the device the split moment after hitting the power button, same thing on my Sprint Pre. It works just fine if a give it at least 3/4 a second after hitting the power button. This isn't a bug but I can log this for improvements opportunities. Would you be able to send us a log of that device? Please let me know and I'll PM you the steps. Dont forget if you need that screen to be on really fast you can pull out the keyboard to bypass the screenlock all together

Multiple iTunes Accounts Bug?

Hi,
I have an iPad 1 that did belong to my boss but I bought it from him when he had to let me go. So, there are 3 iTunes accounts linked to it. His personal account, a work related account, and my personal account. Apps have been purchased under each account.
Now that the iPad is mine and I no longer work there I don't need any apps that I didn't purchase myself. However, it's tricky remembering who bought which apps. If I go to the update tab of the app store on the iPad I have lots of updates. My understanding was that if I click to update an app and it's not associated with the account that's currently signed in, it will ask for authorisation for the associated account, which I can choose to cancel. However, it looks like once I've signed in with a valid iTunes account, clicking update will update the app, or if it's not associated with that account, then it will purchase it from scratch. Is this correct?
I think I'm gonna be charged for app purchases that I didn't intend to make and don't want.

Philly_Phan wrote:
iLee wrote:
"Not exactly accurate. You will always get reminders that updates are available and you CAN update them if you know the password for the "correct" account. You can NOT update them with the "wrong" account. If nothing else, the reminders are annoying.
Hmmm, this is the bug I'm experiencing though. I just inadvertently updated Omnifocus which I'm sure was a work app. In fact, I did it just to check my theory that it wouldn't be able to update, but it did, with my personal account signed in!
As I say, I will have to wait and see if I'm billed for it.
I wouldn't bet on it but I think that I know what's happening. Is there any possibility that you used the same password for your work account as you do for your personal account? If that is true, the work account may have appeared on the popup window and you didn't realize it. Then, when you acced the correct password, you got the update.
No. Besides, the other accounts passwords have been changed now.

Guest Account Bug Resets User Accounts and Deletes Files on Snow Leopard

Hi Everyone
Well basically, I hadn't used my Guest Account since upgrading to snow leopard, and I accidentaly clicked it instead of my user account this morning, to find that when I logged into my normal account ALL my files, settings, mail etc had been reset.
So I'm posting this to let people know, (and hopefully Apple if they don't know about this) what's happening.
Here's the post I sent to Apple Feedback:
Hi,
Well basically, I upgraded to snow leopard recently, everything was working fine, I've upgraded to 10.6.1 and have all the latest software updates etc, so anyway this morning I turned my computer on and accidentaly clicked on the Guest Account on the login screen instead of my normal one, so it started trying to load the guest account (which I hadn't loaded since before the upgrade).
So I wait about two minutes, and nothing atall happens apart from it loading on the logon page, so I pressed Enter to return me to the login window.
So once I was returned I logged on as my normal user, to find my Desktop reset, my Dock reset, my Documents, Music and Photos reset and all my software reset.
So I restarted my computer and logged on again, it was exactly the same, everything gone. At which point I looked in the Users folder to find that my User profile had been removed and replaced with a fresh one with the same name. So I then spent half an hour restoring everything from my Time Machine backup.
I hope Apple are aware of this issue and would greatly appreciate to hear back on the status of what's happening about it, as it doesn't seem to be an isolated issue it's been happening to other people over the last month.
Here's a few posts from other people who've had this problem, and an article on the CNET site MacFixIt about the bug:
http://discussions.apple.com/message.jspa?messageID=10123656#10123656
http://discussions.apple.com/thread.jspa?threadID=2157518&start=15&tstart=0
http://discussions.apple.com/thread.jspa?threadID=2171494&tstart=0
http://discussions.apple.com/thread.jspa?threadID=2142272&start=30&tstart=0
Reports on the Internet:
http://9to5mac.com/snowleopards_eatusers
http://reviews.cnet.com/8301-13727_7-10346974-263.htmll?tag=mncol;txt
To clarify, I have an iMac (aluminium 20" one), with a 2.4ghz processor and 3GB of Ram, please update me on anything that's going on with this issue as I don't want it to continue happening to others who might not have backups,
Thanks,
Daniel.
So if anybody else expieriences this issue your not alone, there's a couple of other posts from people who've had problems above in the middle of my feedback letter. Unfortunately in my case it deleted my Home folder and replaced it with a new one, so if this happens to you then your only option is to restore from a backup. You can attempt to use file recovery software if you don't have one, but I haven't tried this and don't know how well it would work.
Hope I've helped clarify things for anybody who this has happened to,
Daniel.
Message was edited by: dbferrari

Maybe it will be usefull but last days I tried to login as *Guest* (because I didn't want to logout as my user). In *system preferences* I allowed guest login, then I fast switched to *Guest Account*, do some changes in profile like mouse movement and so on, then I correctly logged out and logged once more to my account. Now I affraid off rebooting macbook (I always hybernate system with changed default settings which store memory into HDD) until the fix will be released. Probably the data was not removed, because I was logged in as me and */Users/$USER* was still in use. Now I am wondering if I can reboot safelly macbook without losing my data..
For backup do I need to use some command for backuping home to windows machine through *SMB*? because unix like systems have links and so on.. (in *AIX OS* I have to use "*rsync*" command, which copy whole data exactly as it is stored on filesystem - if there is link it will copy only that link, not file which is linked...)

Help unlocking account

I have several Verizon phone numbers on different accounts. Through the Verizon Wireless website I have been trying to access the usage details on one of the phones that is being used by an employee, but Verizon has the account "locked" and the message I get says I have to reset the password. The problem is that I do not want a text message sent to that phone to tip off the employee I suspect is using the phone for things they shouldn't be, and customer service is not available by phone or chat at this hour of night when the usage details are needed. Is there a way to either bypass the block on the account or to ensure that resetting the password will not result in a text message being sent to that phone?

Have a Look at this it was from a Few years Back but the Person is a Verizon Employee and advised this person on how to Unlock there account maybe with this Info it can still be done for ya Have a Look at the Link i Posted:. 1. Re: HELP with my Account Good Luck b33

Spam from phone # asking for private info to unlock account

I got a text to unlock my account from a phone number 917-564-5996 this is spam, is anyone else getting this?

I've not heard of this, so I would say it's spam. If you'd like to report it to Verizon, I've copied and pasted a how-to. I borrowed it from a March CNN Tech article and used it to report a spam text from Wal-Mart. It worked as intended. Here's how:
When you receive a spam text message on your phone, forward that text to the shortcode 7726 (which spells "SPAM"). You'll then receive an automated message from your wireless carrier, asking you then to enter the phone number from which the spam text was sent.

Ordering Prints - "Create New Account" Bug

I would like to order some prints through Aperture. However, when it asks me to sign in, I enter my information and it takes me to a "Create New Account" page. My Apple ID is valid and works will all other Apple products. Anyone else experiencing this bug?
I'm using a RD MacBook Pro, and the latest version of Apeture 3.
Thanks everyone.

Just enter all your current information, as if it was asking to "confirm" it, not "create" a new account. You may even have to do this twice, for reasons I've never been able to figure out, but it WILL work if you just input your current information. It's weird.

Need to unlock account

Hi, I tried to make an account a while back but I messed it up I guess because now it's locked.
I tried calling to get it unlocked, but I was told I could not do that because I have a prepaid account and have not paid for this month yet.
However, I'm getting a new phone and I just want to switch numbers, so I don't want to pay for two phone bills.
Is there any way I can unlock my account or switch numbers without an account?
Thanks.

Hello penny_lane97!
If you are setting up a new account, you can just register as a new line. To have your existing account unlocked, you can call our prepay team at 888-294-6804.
Thank you,
MichelleH_VZW
Follow us on Twitter @VZWSupport

Unlock Screen Bug

Z30, latest update for USA/Verizon.
Have setting so one must hit the top button and swipe the screen up to unlock....
Or so I thought.
If I happen (or anything happens) to be touching the screen more than halfway up it will unlock automatically and go to the home screen.
Issue: Unlocks in my pocket if the top button happens to be depressed (which it will do easily). Then if I have a password it will ask until I hit the limit of tries to unlock the phone.
When I got my original phone with the older software this was not a bug...

I Also noticed the clock app is no longer a solid black It used to blend in with black wallpaper but not after iOS 8.3

GRC Unlock Account - BUG ?

Similar Messages

Maybe you are looking for