How to find out who has changed the SYSADMIN password?

Hi,
Is there a way to trace who has changed the SYSADMIN password in an instance?
Regards,
Neeraj

of course, this is limited to any updates to the
user, e.g. added responsibility, etc. So, it
probably is very limited in value.That's why it is recommended to enable AuditTrail, which is a way of keeping track of changes made to important data in Oracle Application tables. AuditTrail keeps a history of the following three questions:
1. What changed
2. Who changed it
3. When did the change take place

Similar Messages

  • How to find out who has deleted the production Query

    Hi All,
    I have searche SD , i can find it for infoobject deletion but i couldn't find it for Query.
    Please let me know is there any possiblity to kow
        How to find out who has deleted the production Query
    Awaiting for your replies.
    cheers

    Hi Mahesh and all,
    Thanks for all your  inputs.
    I have tried with RSRREPDIR tabel , I am unable to see that query at all.
    If I use theT-code SLG1,
      please guide me on the steps with paramets to be given in the respective ..object, subobject etc..
    OR
    could you please suggest any other way.
    cheers
    leena

  • How to find out who has released the purchase order?

    Hi All,
    I have a PR number lets say 10231322 and somebody has release it. Could any one please tell me how to find out who has release it?
    Waiting for your kind replies......
    Thanks in advance.
    Regards,
    Faisal

    Hi,
    When you are in tr ME23N, use the menu: environment > header changes.
    Rgds,
    Suzy

  • System log - how to find out who has deleted the req from cube.

    ^hello friends
    how can i find out who has deleted the request from cube ?
    i wanted to check the system log , that who has deleted the request from cube .
    could you please let me know how to check the same ?
    regards
    manoj

    Hi,
    Did you try the method I had suggested. It will work.
    Also its better to try the path I had suggested as it will display the logs for that particular Cube only.
    But if go through SM37 > B_DEL* it will display all the logs for all the deletion jobs not just this cube and it will be difficult to find out.
    Try that and you should get the log.
    Thanks,
    JituK

  • How to find out who has deleted the postion

    Hi SRM Gurus,
    In the EBP org structure some one has deleted the position
    Around 1000 users were attached to the position. How to
    findout who has deleted the Position.what is the method is
    there any T.code.(or) any table to check?
    G.Ganesh Kumar

    pl check if follow thread helps
    Change business partner for purchasing organization.
    BR
    Dinesh

  • How to find out who has release the purchase requisition?

    Hi,
    I have a Purchase Requisition Number with me and I want to know who has released it. Can any body please help me how to find this?
    Waiting for your valuable responses! Thanks in advance.
    Regards
    Faisal

    Hi,
    Thanks for your response. However, is there not any tcode by which we can find it out?
    By the way I have done the following to find it. Kindly confirm if I have done it correctly:
    1. Executed tcode me23n
    2. Menu Purchase Requisition->Other requisition
    3. Specified the PR number.
    4.Menu Environment -> Item Changes
    5. Here in this screen, I got some information saying :
           Person responsible (user id), Date, Time, Transaction, Change Doc etc..
    Here it says that, one user executed tcode me54 and release indicator is changed to 3.
    I think this is only the user who has released it.
    Anyway, kindly confirm the same.
    Regards,
    Faisal

  • How to find out who had deleted the function moldule? S O S

    how to find out who had deleted the function moldule Thank you very much.

    if this fm was assigned to device class (package) you'll find it in
    tables tadir, e070, e071
    try with name of function module or function group
    hope that helps
    Andreas

  • How to find out who is using the shared library?

    Is there a way to find out who is listening to my music on my shared library and what they are listening to?

    After googling a lot I managed to run my application with libumem, generated a core file and succeeded to find some leak with mdb even if ::findleak reported nothing.
    Does anyone knows if the ::findleak (you need libumem and mdb) is supposed to find leak in the native part of the memory and a Java application using the JNI interface?
    Regards,
    Stéphan

  • How to find out who has deleted my query

    Dear SDNs,
    My query has been deleted in Prd system, so I want to know who did it.
    I try to get the log from SLG1 and SM21, but I can't get any information about the query deletion.
    I have also tried to read record from table RSRREPDIR, and this table can only supply the information of query which is not deleted.
    Could you tell you the way to find out it?
    Thanks a lot.
    Best regards
    Tianli

    Hi Pravender,
    I have tested it.
    If you delete the query var T-code RSZDELETE,then you can find the log in SLG1.But if you delete the query in query designer,you can find nothing in SLG1.

  • Find out who has given local administrator rights to standard domain user?

    In my Organization i have faced problems with domain administrator, it seem that all of a sudden a standard domain user is having Local administrator rights. Can anyone please help me how to find out who has given local administrator rights to that standard
    domain user account? 

    Hi,
    Based on your requirement, you need to enable the auditing in your Active Directory to identify the user/ group changes and WHO made the change etc.
    Checkout the below steps to enable auditing for AD User Changes,
    1. Open GPMC console, click Start --> Administrative Tools --> Group Policy Management.
    2. Right click the Default Domain Controllers Policy, and then click Edit.
    3. Navigate to Audit Policy node, “Computer Configuration/ Policies/ Windows Settings/ Security Settings/ Local Policies/ Audit Policy”.
    4. Now enable the Success auditing for - Audit Account Management and Audit Directory Service Access.
    5. Execute the command “GPUPDATE /FORCE” in the Domain Controller to force apply the GPO settings.
    For Windows Server 2008 R2 and later versions, additional configuration is required in  “Advanced Audit Policy Configuration” section in Default Domain Controller Policy.
    1. Go to the node DS Access (Computer Configuration/Policies/Windows Settings/Security Settings/Advanced Audit Policy Configuration/Audit Policies/DS Access.) 
        Enable Success auditing for the following settings
         - Audit Directory Service Changes
    2. Go to the node Account Management (Computer Configuration/Policies/Windows Settings/Security Settings/Advanced Audit Policy Configuration/Audit Policies/Account Management.) 
        Enable Success auditing for the following settings
        - Audit User Account Management
    After completing the audit settings, configure SACL in Active Directory Users and Computers console for enabling the geneartion of AD Change events in the eventlog as shown below,
    Checkout the below KB article on complete list on Event ID and Description for AD Changes,
    http://support.microsoft.com/kb/947226/en-us
    Regards,
    Gopi
    JiJi Technologies

  • Who has changed the Custom Field value?

    Dears,
    Need to know the information regarding how to fetch that who has changed the Custom field value from PWA/MPP.
    Example:
    There is a PDP (say ProjectInfo):
    There is a Custom Field added to that PDP (say Project Status = In Progress).
    Now for ProjectA, someone has checked out and changed the Custom Field "Project Status" from "In Progress" to "Closed".
    I need to fetch the information regarding who has changed that Custom field.
    In which direction should I move: Event Handlers, PSI???? Any other stuff?
    Thanks & Regards,
    Shravan

    Hi Shravan,
    I'm not a developer but I do know that you can use an event handler pushing the resource name and date in custom fields.
    Another way is to use a 3rd-party tool like
    FluentPro Audit Tool.
    Hope this helps,
    Guillaume Rouyre, MBA, MVP, P-Seller |

  • How to find out what are all the change pointers assoicated for an idoc ??

    Hi ,
    How to find out what are all the change pointers activated for an idoc ??
    Thanks,
    Varma

    Verma,
    You can check what are the active Change Pointers for the message type in tcode <b>BD50</b>
    Use tcode <b>BD61</b> to check whether change pointers are active or not??
    Hope this helps..

  • I'm having network security issues, how can I find out who has been seeing my information on my laptop

    How can I find out who has been loging on or attached to my network and on to my computer remotly.

    Dartrath--
    Please give us much more pecific information as to why you think someone is doing this?
    What signs and symptoms are you experiencing?

  • How to find out who deleted the directory in Unix

    Hi Experts,
    In my system some body tampered the directories, and more over some body deleted the bin directory under the /usr/sap/trans in Unix operating system. now i am checking to find out who deleted and for the more logs.
    i am unable to find out the user name and deleted directory logs..i know its completely related to the unix level but mean time i am searching for the same.
    Any ideas and clues will be heighly appreciated.
    -Srini

    To know the OS would have been helpful
    First ask the people around you if anybody did it, maybe he is man enough to admit...
    Try to find out who logged at the time when the directory was deleted.
    - check the OS syslog (/var/adm/syslog/syslog.log for hp-ux, /var/log/messages for linux)
    - try the last commando to get a list of who logged on when
    - check the command histories of the sidadm, root user, use the history command, or the h alias
    - check if there are scripts running, which regularly delete files
    As the trans directory might be NFS mounted to other servers, you might need to do the checks there too.
    Best regards, Michael

  • CRM Release confirmation for billing (how to find out who released)

    Hi All,
    Does anybody know how to find out who released a confirmation for billing. Tx for releasing is /BEA/CRMB02. After releasing the confirmation for billing it will show up in /BEA/CRMB01. But there is no way to find out who released the confirmation since there is no change log. Or is there a change log?
    Does anyone know the answer?

    You will need to use 'grep' from the CLI of your appliance(s) in order to view the mail_logs and gui_logs.  Use "released" in the mail_logs to get the timeframe of when the mails in question were released.  (You may need to verifiy the MID for the mails in order to verify the particular ones in question.)  
    Enter the regular expression to grep.
    []> released
    Then use 'grep' again to search the timeframe in gui_logs.  This should display who carried out the action, or what userID they were logged in with --- showing "user:<userID>" in the log line.
    I hope this helps!
    -Robert
    (*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

Maybe you are looking for

  • Win7 does not show "Adobe PDF" printer using Acrobat 8 Pro

    using Acrobat Pro 8.1.0 I cannot see or add Adobe PDF printer. I do see "Microsoft XPS Document Writer" as a printer.

  • Why my docking station doesn't works with iphone 4

    I HAVE 2 DOCKING STATIONS (JBL AND YAMAHA) none of them works, does any one know how to solve this problem. Best regards

  • Common BOM/Bill to Copy BOM/Bill

    Is there any process to Copy a BOM/Bill to same local-Org if its already enabled as Common BOM/Bill. Here is the detailed steps: 1) BOM/Bill# 800-123 exists Global-Organization. 2) Go to Bills Of Material --> Bills select Org = Global-Org and query 8

  • Download of purchased movie causes CTD...

    Hi, I purchased a movie on iTunes Store but I cannot download it due to CTD on every attempt. All apps are up to date. Any hint about it? Thanks in advance.

  • Help with folder that cannot be deleted-?

    I have a 1TB TC that is about 1 year old. A friend of mine copied a folder onto the TC a couple of months ago. I want to delete the folder and I cannot. I have tried locking and unlocking the folder before tyring to delete , it doesnt work I have cre