Locking out users with FND_USER

At fiscal year-end here, we did a cold back-up and then only allowed core accounting users into eBiz the next day until they’d done all their roll-over stuff and made sure they hadn’t messed anything up in the process. Then we let everyone else back in.
The way we did it was by end-dating accounts in FND_USER with SQL, but we ran into some problems with that.
I coded up a PL/SQL procedure that would end-date everyone except for select people (i.e. critical IT and accounting folks) and used that to lock everyone out. Based on a switch, the same procedure re-enabled everyone that I'd locked previously out when we were ready.
We had something weird happen though. The next day, some people couldn't get logged in. They'd enter their user name and password and then get an "unexpected error" directing them to the system administrator. This wasn't everyone, just some people. I figured out through trial and error that if I went into their user record through the application, end-dated them, saved, then un-end-dated them and saved again, that they were fine.
Later I got a call from a user that was logged in but had no responsibilities. So I end-dated all his responsibilities through the application, saved, then un-end-dated them, and that fixed him. We had a couple more show up like that, but only a couple.
Has anyone else experienced this problem?

Hi,
Please post the application release along with the database version and the OS.
We had something weird happen though. The next day, some people couldn't get logged in. They'd enter their user name and password and then get an "unexpected error" directing them to the system administrator. This wasn't everyone, just some people. I figured out through trial and error that if I went into their user record through the application, end-dated them, saved, then un-end-dated them and saved again, that they were fine.Can you find any errors in Apache log files (error_log* and access_log*)?
Later I got a call from a user that was logged in but had no responsibilities. So I end-dated all his responsibilities through the application, saved, then un-end-dated them, and that fixed him. We had a couple more show up like that, but only a couple.
Has anyone else experienced this problem?There are couple of reported issues about this behavior and we have discussed in the forum many times before -- Please see old threads for details.
Missing Responsibilities
http://forums.oracle.com/forums/search.jspa?threadID=&q=Missing+Responsibilities&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Thanks,
Hussein

Similar Messages

Locking Application Users with Time

In Oracle Applications 11.5.9,
I am trying to lock the user with time, But in Users Form available in System Administrator Resp. i can only give a end date. There i am not able to specify a time. Is there any ways to lock a user with time.
Thanks,

Hi Periyasamy
you could not get the time in the front end.you can find the time in the table fnd_user available at the applsys schema.
Hope this helps.
Regards
Sudhakar

Transporting a business function: lock out users and suspend batch?

Hi gurus,
SAP advises in help.sap.com to lock out all users and suspend batch jobs before activating a business function in development. I did that in development, activated the business function, and saved it to a transport. Does the same recommendation to lock out users and suspend batch jobs hold true in the QA and Production systems when the transport is moved in? ... or is it ok to transport it during a time when there is user and batch activity going on?
Warm Regards,
CM

You do have to lock out users and suspend batch, even using a transport. There is a pdf called
SAP Enhancement Packages Selecting and Activating Business Functions, In it, it says to lock out users and stop batch activity in all systems,

Locking out user

We are running 8i on win2003 using asp pages to update the database with clients on xp and 2k via oraoledb.
We have a recurring problem where after 2wks-2mons users start getting locked out and no longer being able to update.
The only solution so far is to shut down and restart the database which has an obviously deleterious affect on production.

Glen,
"...after 2wks-2mons users start getting locked out and no longer being able to update."
Do you mean users can still connect to the database but cannot update database?
Please provide detailed OraOLEDB version number and detailed error you get.
Sinclair

Trying to connect to a Windows share locks out users Windows account.

Right then I’m coming to the end of my tether !!!
I've got a user who needs to access a share on a Windows server. All is well and the user gets the challenge prompt but instead of letting him in it constantly challenges him locking out his windows account.
Now the share is on a DC so i cant make him a local Admin and the only way i can get this working is to have him in the domain admin group which is NOT the way forward, so i'm looking at permissions i guess.
Can anyone point me in the right direction to fix this .. Arhhhh

The Seagate drive at Amazon should work fine.
Your Maintenance & Service Guide may be helpful:
http://h10025.www1.hp.com/ewfrf/wc/manualCategory?cc=us&dlc=en&docname=c03898001&lc=en&product=54381...
******Clicking the Thumbs-Up button is a way to say -Thanks!.******
**Click Accept as Solution on a Reply that solves your issue to help others**

Sharepoint 2010 locking out users after changing user login

We have changed several users logon UPN to match our proactis.com domain in azure / office 365 in preparation for sync our active directory.
But since doing so it would appear that users are no longer getting access to our sharepoint 2010 server randomly. It prompts the user for their username and password. When they then enter this, it rejects it and locks their accounts.
Has anyone seen this behavior before?

Hi Proactis,
Based on your description, my understanding is that the users with changed UPN cannot access SharePoint Online in Office 365.
If I misunderstood, please feel free to correct me.
This issue may be due to that the changes aren't synced by the Azure Active Directory Sync tool after you change the UPN of a user account to use a different federated domain.
I recommend to run the following command to see if the issue still occurs:
Set-MsolUserPrincipalName -UserPrincipalName [email protected] -NewUserPrincipalName
[email protected]
You can refer to the link below for detailed steps:
http://support.microsoft.com/kb/2669550
Thanks,
Victoria
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Victoria Xia
TechNet Community Support

How to lock a user with a report in batch?

Hi experts,
is it possible to lock a range of users with a report which runs in batch? I decide to modify the report EWULKUSR, because I can't run this report in batch. But maybe there is any other report?
Any idea?
Thanks and best regards
Max

Hi Sim,
I mean, locking the user in the system.
Thanks for your answer.
Best regards,
Max

Lock out startup with an HPE-150f Pavilion

Does this model of desktop contain a password-preventive method for locking out Windows for even starting? Both User and Supervisor passwords are enabled but the system proceeds to starting Windows to the point of needing the Windows password to go further. My other desktops and laptops stopped the startup process cold as soon as it was given power. Thanks for your help.

Hello,
It sounds like you want a BIOS Password. If so, enable a Supervisor Password in the BIOS.
-Chris
I work for HP.
Support Forums are now on your mobile phone: http://m.hp.com/supportforum

Time Machine locks out User Folder

suddenly our TM (1TB TimeCapsule) has locked us out of the backups for a user account. when navigating TM, a little negative sign appears on all the folders. it's as if TM doesn't recognize the login credentials…
totally hosed unless i can figure out a solution. any advice would be very much appreciated. thanks.

have you changed anything about your TM or user setup? log in as the user in question enter TM and scroll back in time. select a file or folder with do not enter sign and enter command+i. in the resulting popup look in the permissions section at the bottom. what does it say?

Lock out users

I want to keep my kids off my computer when I'm not home but I do not want to wipe out their user. How can I make it so they can't sign in unless I let them??

Your signature says you are on 10.4.1, but this is the Leopard forum. In Leopard, you can set up Parental Controls to limit access hours (System Preferences>Accounts, click on the account in question and click 'Parental Controls').
However in Tiger you cannot do this, you can only limit access to certain applications. You would need to get a third-party program such as Intego's ContentBarrier which provides comprehensive filtering, control and reporting.
The only other way would be to set a password for each of their accounts, but not tell them what it is: you would have to log them in (and make sure they can't watch the keyboard).
There might be hardware solutions which would enable you to lock USB ports out so they couldn't plug a keyboard in.

How to Find out Users with Hardware Phones

Hi,
Is there anyway that i can create a report that which Users are using IP Phones (Physical) and which users are using soft Phone (Lync Client on PC).
Regards
Usman Ghani
Usman Ghani - MCITP Exchange 2010

Hello Usman,
If you have a monitoring server, you can see the Physical Phones.
Access your monitorin server by:
http://<ip_monitoring>/Reports or
http://<ip_monitoring>/Reports_<Instance_Name>
LyncServerReports > Reports Home Page and then click IP Phone Inventory Report and you will see all the physicals phone.
If you don't have a monitoring server, access this...
http://www.mcse.eti.br/Installing-and-Configuring-Monitoring-Server.html
“Vote As Helpful” and/or “Mark As Answered” - Thiago Mendes da Silva - MCSE Communication - ITIL v3 Foundation - http://www.mcse.eti.br

Office 2010 & 2007 - Excel and Access File Locking Out On the Network With Multiple Users

This is also posted in the Office 2010 - IT Pro General Discussions, but was suggested to repost here, since a definitive answer was not found.
Hi,
An issue that's happening is that Excel and Access files are locking on the network. We're currently using Office 2007 and 2010.
Here are some different scenarios that are happening:
When opening the file it is locked out by “User X” which is the person that has the file locked out and no one else can open the file.
When opening the file it is locked out by “User Y” which is NOT the actual person, but is locked out by “User X” and no one else can access the file.
When opening the file it is locked out by “…another user” which is generic and no one else can access the file.
The two more common events are incident 1 and 2 with 3 happening the less common.
This message will continue until the sessions are closed through computer management on the file server.
The file server is running Windows Server 2003.
This does happen on both Windows XP and Windows 7 clients.
This does happen for users using Office 2007 and Office 2010.
There are two sets of Office 2010 Users when it comes to patches. Everyone has the most current patches with Office 2010 SP2 while anyone that has Microsoft Project 2010 is using all the current update before Office 2010 SP2.
All users that are using Office 2007 have all the current patches and service packs.
Another variable is that we have users that will leave a file open on the network for 3+ days and after a while it will lock the file out.
Also we have Shadow Copy that runs daily on the system which I'm not for sure if that impacts anything if a file is opening during that time.
Any ideas on how to mitigate the lock out issues would be appreciated.
Thanks,
Binary Process
Edit November 12, 2013: This issue can occur if and if not another person actually has the file open. If the person doesn't have the file open then there is a hung connection which needs to be disconnected by going to the Computer Management of the File
server.

Hi Binary,
I know that the description of the hotfix does not relate to the issue. The purpose is to install it for upgrading SMB related file.
A similar issue I encountered before:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/b7fcc59b-52d9-4a02-863a-1a529bcb8cb1/temp-doc-etc-files-dont-close-after-a-file-closes-this-causes-locked-files?forum=winserverfiles
It is resolved by upgrading SMB files so maybe it will help on your case.
Another hotfix which may related:
http://support.microsoft.com/kb/983458
If you have any feedback on our support, please send to [email protected]

Locked out with file vault. Did fix by setting up new user account but cannot access old account with files but I can't get back into my old account with all my doc's and pics

I was locked out by File Vault. I set up a new account by fooling the notebook it was a new start up. Now I cannot access my old account with all of my files. I can see it in Accounts but it will not let me access. Help

I managed to get a few Time Machine Back Ups before I passed away
I'm not sure whether a ghost can do this, but if you were still alive, you could do as follows.
First make sure you have read & write access to the folder you're trying to restore to. You should be able to see its contents in the Finder, and to move files in and out of it.
This is an exception to the rule that you should never make any changes to backup data. I've tested this procedure in OS X 10.8 only. It should work with later versions, but I don't know whether it works in earlier versions. Use it only for files that were backed up from your home folder, or a folder on another volume created by you, and would normally be writable by you. Do not touch backups of system or application files.
In the Finder (not in the time-travel view), navigate to the backup volume, then to the folder named "Backups.backupdb", and then to the snapshot you want to restore from. The snapshots are folders labeled with the date when they were created. Inside each of those folders is a file hierarchy like the one on the volume that was backed up. Descend through the hierarchy until you come to a folder named "Users," and inside that, a folder with your user name. The procedure will be different if you're trying to restore files on another volume.
Select the folder and open the Info dialog (command-I). Click the padlock icon in the lower right corner of the window and authenticate. In the Sharing & Permissions section, give your account Read & Write access. You may have to close the dialog and repeat this step in order for the change to show up. Then click the gear icon and select
Apply to Enclosed Items
from the popup menu.
Try the restore operation again, in the time-travel interface.

Unity Connection - Users with system default password getting locked out

Hi all, hope everyone is well !!
I am experiencing a strange problem and hope someone can give me some direction on where to start digging on this issue.
I am getting a good number of users reporting they are getting locked out of their voice mail and they all claim that they have not changed their password and some user even got their greeting recorded by someone else. One thing in common for the users who reported the issue is that they all using the system default password. I am trying to trace to find out who/what has access to these users' mailbox but so far I have not had any luck.
Thanks in advance !!
Danny

Thanks, yes am doing that now and cant really find any new/unique pattern. Plus the trace is pretty hard to follow. Cant really figure out any times stamps in the trace also. The current trace file is defaultTrace.18.trc and it has very simiiar content as some of the older ones before the problem. Right now the ESS portal is working and the slddsuser password is not locked. It seems the problem takes place on start up?
/usr/sap/ESS/JC77/j2ee/cluster/server0/log
Tough thing to test in production.
I wonder what takes place at startup that would kick this problem off?
brad

I am locked out of my ipod mini. i have a new apple password and new apple user id. what more do i need to do?

i am locked out of my apple ipad mini. i have reset the apple user id and password through the computer. what do i do next?

Sign out of old Apple ID and sign in with new.
Settings>iTunes & App Store>Apple ID>Sign out

Locking out users with FND_USER

Similar Messages

Maybe you are looking for