Restrict SAP user ID login on certain PC

Hi,
Is there a way to restrict the SAP user ID to login only on certain PC?
Example User ID A can only login at computer A. He cannot login SAP if he using computer B.
Kindly please advise. Thank you.

Hi Li,
Find below two steps: a) To track the user in SAP with any number of logon's and other to restric user from a single login prespective:
Single PC login:
Implement Note 748424.
All logons are then entered with the terminal ID, the user ID, the SAP GUI version, patch level and how many time logged in.
e.g.
Terminal ID User Operating System SAPGUI Version Patch Level Logins
PC111555 USER1 WINDOWS 710 22 7
Tracking user in SAP with multi logins:
It is possible to track the audit log filters using SM19 transaction code. Once the filter is applied, the system will start tracking all the activities of the users (Based on the options you select in the filter.)
You can further use SM20 transaction code to analyze the audit logs where you can find the user login/logout time, transaction executed by the user, amount of time he spent in each screen etc.,
As the audit logs occupy more space, you should be careful while choosing the filter option. The old audit logs can be deleted using SM18 transaction code.
There is also a background system house keeping job that deletes the old logs from the system.
Do let me know if this helps you.
Thanks
Madhu

Similar Messages

How to restrict a user to login twice

hei evryone!
Here's my prob... I need to restrict a user to login more than once meaning, if a certain user account is currently login , that account cannot be used concurrently using another window or machine... If another user attempts to login, using that same account an error message will be displayed saying "this user account is already logged in".. i tried to do this in javascript but the code that i've got only works for IE and its kinda hard to capture the event for closing window.. plus using onunload is not advisable with my situation since my webpage can be redirected to other codes meaning the cause of unloading the page could either be closing the browser or redirecting the window to another page such as window.location="anothercode.jsp";... I was wondering if there's a way to do this in jsp...
Any suggestions, ideas, or sample codes would be deeply appreciated. Thanks in advance!
btw, i need to generate a code that is cross browser.. What i really need to accomplish is to be able to determine when the browser is closed either by clicking the X button on the window, alt f4 or my own close button and not when the page is unloaded.
Here's a sample code : This only works in IE =(
---------- default.jsp-------------------------
<html>
<head>
<script language="Javascript">
     onunload=function(e) {
     winX = navigator.appName=="Microsoft Internet Explorer" ? window.event.clientX : e.screenX;
     winY =navigator.appName=="Microsoft Internet Explorer" ? window.event.clientY :e.screenY;
if (winX<0 && winY<0)
          // redirect to logout.jsp n do some stuff
</script>
</head>
<body>
Logout
List
View Schedules
</body>
</html>
the default screen would be the code above: "default.jsp" wherein there are many ways that the page
can be unloaded such as :
- clicking the logout link
- click the View Schedules
- click the x button the left side of the window
- alt f4
- if the window is minimized , right click then select close option
Now, what i needed to do is to determined when the browser is closed so i reset the login flag of the account and can be used later on.

hei everyone!
im tryin to resolve this prob by adding a session id field on the users table. Everytime a user logs in i will update the session id field so that if anyone attempts to use the same account i will redirect the later into the login page with a warning msg. I'll do this by comparing the session id that u got from the dbase and the session id from request.getSessionId() of the browser. However, my prolem now is how to cleanup my database.. i need the cleanup coz i have a user tracking screen wherein i cud show who's account are login n who's not. I have created an applet and embed it in all of jsp files so that i cud catch the event for closing window whether by using the x button of the window or a power intrerruption. However, i need to find a way where i cud determine whether the event was really a close window or just a redirection from another page. I mean , you could leave the page either by viewing another screen or by actually closing the window.. For instance, my main page has main menu which are (1) View Users and (2) View Schedule .By default, im in the "View Users" screen . These two menus have their corresponding jsp n both jsp files have an embeded applet. So if the user click the "View Schedules " screen or if the user chooses to click the logout button or window's x button to exit the browser, then the applet will call the stop method. This what i meant by how will i determine if the user really exits on my application or not.. Coz if the user clicks from one screen to another then, user actually does not leave my application the user only exit on my application if the user logs out or close the window..
Please help me out on this matter... Thanks in advance!

Restrict regular users to use only certain ldm command options

I would like to restrict regular users to use only certain ldm command options, for example only list, bind/unbind, stop/start
What is the best practice to do it?
Thanks

Solution provided by one of my colleagues:
Installing sudo and configure sudoers file "User privilege specification" section similar to the following example:
# User privilege specification
root ALL=(ALL) ALL
user1 host1 = /opt/SUNWldm/bin/ldm ls *
user1 host1 = /opt/SUNWldm/bin/ldm stop *
user1 host1 = /opt/SUNWldm/bin/ldm stop -f *
user1 host1 = /opt/SUNWldm/bin/ldm start *
user1 host1 = /opt/SUNWldm/bin/ldm bind *
user1 host1 = /opt/SUNWldm/bin/ldm unbind *
**Note*: asterisk should be at the end of each row. They are not displayed in the posted message...*

Restrict AD users from login sharepoint?

Dear all,
I have setup User Profile Sync with my AD for particular AD group "Sharepoint Users" only. After the sync timer job run, I can see the user profiles built up. However, there is a user "outsider" not in "Sharepoint Users"
group is able to login Sharepoint. After he login his user profile is auto built in Sharepoint.
May I know is it default setting? If so how can I restrict only "Sharepoint Users" can login Sharepoint? Thanks.
Mark

Hi Mark,
This is by design. When a user logs in to SharePoint, SharePoint checks to see if this user has permissions in the current site (or list/item). If the user has permissions, he can log in to SharePoint, it doesn't matter if he has a user profile or not.
I think the user has permissions on the site he is trying to access. These can be permissions given to him directly, or he is member of a AD security group that allows him to access the site.
You can check this by going to Site Actions -> Site Settings -> Site Permissions. In the ribbon, click "Check Permissions". Enter the username for that user and you can see how the user is given permissions to the site.
Nico Martens - MCTS, MCITP
SharePoint 2010 Infrastructure Consultant / Trainer

Restrict ESS user to login via sapgui

Hello All,
Can anyone pl suggest if the ESS users can be restricted by some means to access into the R/3 via the sapgui.
Thanks in advance

Shiva,
By design SAP B1 permits two instances for one user login. Therefore the same user/ password will be permitted to login on 2 clients at the same time.
I do not think this can be changed.
Suda

OBIEE 11g:Restrict Admin user (Weblogic) to upload certain set of files

Hello All,
We are running OBIEE 11.1.1.7.1 on local machine. We have a requirement which should limit Weblogic (Admin user) to upload .exe, .bat, .dll file etc or any such unwanted file in catalog or should only be able to upload required files. I am struggling to achieve this.
Could any one help us in this?
We do not want to remove upload permission from Weblogic user.
Thanks in advance.
Regards,
Andy

its not possible to restrict only certain type of files. the only option you have is to take out upload privileges for weblogic user and then follow the manual process of copying the catalog items like opening the catalog manager(offline and online) and copy the required items as required,So in that you way you can restrict the copy of other extensions apart from .catalog
by the way may i know who is that person who want to upload the other extension files into catalog folder with Admin user? Because only couple of them will have access to weblogic user to be able to make or do any changes.

Restrict witch users can login at wiki

Hello
can anyone tell me if I can restrict users on the server to login at the WiKi, I'm thinking from a security aspect that it would be nice to only have a group or selected users on the server that can login on the wiki service...

Hi Mark,
This is by design. When a user logs in to SharePoint, SharePoint checks to see if this user has permissions in the current site (or list/item). If the user has permissions, he can log in to SharePoint, it doesn't matter if he has a user profile or not.
I think the user has permissions on the site he is trying to access. These can be permissions given to him directly, or he is member of a AD security group that allows him to access the site.
You can check this by going to Site Actions -> Site Settings -> Site Permissions. In the ribbon, click "Check Permissions". Enter the username for that user and you can see how the user is given permissions to the site.
Nico Martens - MCTS, MCITP
SharePoint 2010 Infrastructure Consultant / Trainer

How to restrict end-user from not using certain movement-types in MB1B

Dear Gurus,
My client wants that end user has access to only particular movement types in MB1B.i.e only to 311 and 412,421E.
They do not want any other movement types to be access by end-users in MB1B
How to go about this requirement?
Thanks in advance
Regards
Ram
Edited by: RAMKUMAR WARIYAR on Jun 27, 2009 2:14 PM

hi,
This is possible you can restrict and allow user for movement type which they can do through any t code.
Contact yours BASIS consultant for that
Regards,
Vishal
Edited by: VS on Jun 27, 2009 5:46 PM

Restricting the Oracle user from Login

Hi,
I want to restrict the users from login depending on two parameters usind Database logon trigger,
i.e
1. MODULE (like SQL*Plus...)
2. USERNAME
I can get USERNAME from
select SYS_CONTEXT('USERENV','CURRENT_USER') from dual
But, select SYS_CONTEXT('USERENV','MODULE') from dual says invalid parameter.
Can anybody help me?
Ronald.

Both are working fine i saw
SQL> select SYS_CONTEXT('USERENV','CURRENT_USER') from dual
2 ;
SYS_CONTEXT('USERENV','CURRENT_USER')
APPS
SQL> select SYS_CONTEXT('USERENV','MODULE') from dual ;
SYS_CONTEXT('USERENV','MODULE')
SQL*Plus

Restricting users to login multiple times on the same machine..

Hi everyone,
Is it possible to restrict the users to login multiple times on the same machine...did someone implemented this kind of process.Please help me how can i achieve this or any suggestions.
Thanks in advance.
Phani..

Hello,
I decided to answer you in the original thread - Identify currently active users – as I believe that the outline background of the issue is important to better understand it.
Regards,
Arie.

Hyperion - Shared Services (Can I restrict a user based on a member?)

In the Shared Services Management Console can I restrict a users access to only certain members in a dimension?
Example: If someone is trying to retrieve data in excel from Hyperion can I restrict that users information to only their geographic market?

To expand on what SeanV told you, Filters are not created in Shared Services, but in Essbase (EAS or MAxL). They are however applied in Shared services

How can I restrict Lion to only allow certain network users to login when bound to an Active Directory?

Hi,
I'm trying to find a way to configure which network users can login to a lab of iMacs running 10.7.4. They're being deployed using DeployStudio, and the Macs are bound to an MS Active Directory by a script that runs as part of the workflow. I'd like to have another script run after the AD binding to permit only users in certain AD groups to be able login to them.
I'm halfway there, in that using dseditgroup I can easily add AD groups or individual users to the relevant group (deseditgroup -o edit -a <domain\\group name> -t group com.apple.loginwindow.netaccounts. After running this I can see the desired groups added to the list in Sys Prefs -> Users & Groups -> Login Options -> Options. However, membership of this group is deemed irrelevant by the fact the radio button above this list for 'Allow these users to log in at login window' is still set to 'All network users' and not 'Only these network users'.
Does anyone know of a way to enable the 'Only these network users' option via the Terminal/a shell script?
Thanks,
Chris

I tried that, thinking it was exactly what I wanted, but it still sends stuff as SMS (green bubble).

How to set restriction for user in sap

Hi,
I have created a user,now i need to restrict the user to work only for 8 hrs per day.HOw can i set timing for the user.Kindly help out regarding this.
Regards
sekar

Sekar,
If you use external authetnication for users when they logon to SAP, then you can control the times they can logon and which days of week (if required). For example, it is possible to use Active Directory authentication to authenticate users to SAP application via SNC or using a custom login module in WebAS Java, and in AD you can set times when logons are allowed. This might be what you are looking for ?
If you want to log somebody off SAP when they have been using it for a period of time, then this can be dangerous if they are in the middle of a complex transaction when they are logged off. Also, I don't think this functionality is included in SAP product. If you don't want somebody to use SAP at certain times of day, then it might be better to force a screen saver at workstation instead, if this is what you want.
Regards,
Tim

Parallel How many times user can login to the SAP system through ITS

Hello all
We are using the ITS ---620 and following 46D R/3 system
R/3 system details:
Kernal :
kernel release :46D
O/S :SunOS 5.8 Generic_108528-05 sun4us
We would like to now, At a time How many times user can login to the SAP system through ITS
Kindly letus know if any one have idea about parameter which can restrict the end users to u201CNu201D times/ sessions.
Transaction SITSPMON/SMICM are not working in R/3 system as it is 46D.
We found that parameter u201Clogin/disable_multi_gui_loginu201D works with SAPgui logons.
System logons using the Internet Transaction Server (ITS) or Remote Function Call (RFC) are not affected by this Parameter u201Clogin/disable_multi_gui_loginu201D
I need similar parameter u201Clogin/disable_multi_gui_loginu201D for the ITS users.
Thanks

I have searched all docs and notes.
Everytime the answer is PArameter for multi_gui_logonis not applicable for SAP Gui for HTML ( Browser )
The functionality does not exist for SAP Gui for HTML.
Regards,

User exit or badi to restrict PROO in Sales Order for certain sales organisation

Hi SAP SD experts,
I would like to know the User exit or badi to restrict PROO in Sales Order for certain sales organization. This can be done by making condition type as D but will affect all sales org and we to restrict for a certain sales org only.
thanks,
SG

Kindly explained how you have solved others may benefit..
regards
Arunkumar

Restrict SAP user ID login on certain PC

Similar Messages

Maybe you are looking for