SAP User Locks

Dear Guys
We have a problem, few users are getting locked by SAP while running the transaction automatically. User are getting messages that you are locked by administrator. But administrator is not lcking user ids. User is also not attmepting to relogin and to reched the login limit.
I dont know why user are getting locked autmoaticlly by SAP. Does any body have solution.

Hi,
Just run a BAPI to unlock the user <b>BAPI_USER_UNLOCK</b> , give the user name in this bapi and run this, the user will be unlocked
Regards
Sudheer

Similar Messages

How can I konw , Which computer name or IP Address make SAP User lock

Dear all,
I have one issues about SAP user lock,
Now I don't know which computer name or IP Address make user lock.
How can I check it or Can you tell me about the table that keep information about the ip address or computer name?
I can see the computer name when I use t-code al08 or sm04.
But I don't know the table that keep data from this t-code.
Pls suggest me for this issue.
Regards,
Pannee

In SM21
If you double click on the message "User XXXXX locked due to incorrect logon"
You'll see under details the name of the terminal
Terminal............ XXXXXXXXXXX
for IP address just ping the terminal.
Regards
Juan

How to lock sap users in os level

Dear consultants,
how to lock the sap users in OS level.please tell me any one.

Hi Pradeep,
The table is usr02. The command is as below:
update <schema>.usr02 set uflag=128;
in case you need to mention any particular user to be locked, mention in the where clause.
Before using this command, use the select statement to check the current status of the users.
Regards,
Meenu Hans

EREC : Lock SAP user ID for future date

Hi ,
Can anyone suggest a way to Lock an SAP user id for a Future Date .
Thanks in advance,
Tk

Hi,
Instead of locking you can better delimit so that you can have a history for audit reasons.
i dont find business requirement for locking user.
thanks
rafi

Opening the dashboard(XLF) file from BOE repository is locking of my SAP USER ID(SBOP) again again .....Urgently need solution. Don't know what the damn thing happening with me.

Hi Experts,
Since from 15 days I am working on one Dashboard with BEX query, now I have completed that I am able to run that till yesterday. But today my SAP USER ID expired(every 15 days it expires). I have updated same password in all places(CMC OLAP, UNV,IDT) and tried to open the same XLF (which was running fine till yesterday ) after opening that if I tried to edit query or tried to add query or clicked on preview....all ending with locking of my SAP USER ID(SBOP) ..............Don't know what the damn thing happening please seng if you know any solution.
Experts need help to solve this issue urgently .........:)
Thanks in Advance

Hi Mahantesh,
We have faced same scenario,this is happening due to SAP User ID password change.
Stop all the BO work and change the password of SAP everywhere used.Any single point will lock it again.
Try this.This has worked for us.
Regards,
Javed

Email alert to User on Outlook When their SAP user account is locked

Hello Gurus,
In a effort to reduce overhead to User Admin team, we are planning to automate notifications to SAP user.
Requirement Is: Email alert user when their account is locked on SAP for whatever reason.
I did some research on help sites, and I read people saying this is acheivable and ABAP+Security team can make it happen. Before I take this route I want to hear suggestions from our native SDN experts.
Your thoughts?
Thank You.

Purpose of Sending the mail in outlook.
I believe the reason is additional security. If for example the login is attempted by some other person and the account gets locked then the user will be notified on outlook and he will get alerted.
How to Achieve this?
Since implicit enhancement does not works in FG SUU0 (due to it being a part of central basis), this can be achieved through modification in the FM SUSR_USER_MAINT_WITH_DIALOG which can be used to code for LOCK and UNLOCK both.
This modification will be useful only if the user is locked and unlocked by the BASIS administrator using transaction SU01.
However, to achieve the automated email notification when the account gets locked due to multiple login failure you have to utilize the CCMS functionality.
You need to create your own Auto-reaction method under MTE class 'R3SyslogSecurity'.
This method will use your custom Function Module where you can set the user's email ID for the notification to be sent.
Regards,
Firoz.

Sap UM connector 9.1.2 trouble with "SAP User Management User Recon" task

Hello All,
i have a problem with Sap UM Connector version 9.1.2.
OIM version 11.1.1.5
Windows 2008 R2
Problem is:
Then accounts in Sap are created through direct provisioning feature of connector everything works ok (subsequent update or delete an account).
But if a user account is created in Sap using Sap GUI, scheduled task "SAP User Management User Recon" of connector doesn't create reconciliation event to link user.
Sometimes it does though, but for one user account created using Sap GUI in OIM created two reconciliation events, so corrsponding user in oim have two records for resource SAP.
In this reconciliation events, one have full set of attributes (Login, First Name, Last Name, E Mail, etc), another one - just these 3 attributes: IT Resource, User ID, Lock.
"SAP User Management Delete Recon" scheduled task works ok then user account has been deleted using Sap Gui.
How one can troubleshoot such behavior?
Can anyone advise please?

resolved the issue by updating sap um connector to version 9.1.2.5

How to unlock DDIC & SAP* user in 000 client-Sybase database

Dear Experts,
Accidentally DDIC and SAP* user in 000 client has locked. We are using SYBASE ASE database. I know how to unlock user in other database (eg:update <sid>.USR02 set UFLAG = 0 where BNAME = '<user id>'' and mandt = <clinet number>;).
what is the equal query in Sybase.
Thanks, Jyothish

Hi Jyothish,
Please try below commands
Login to Sybase ASE database using
isql -Usa -S<SID> ( it will prompt for password)
use <DBSID>
To check the account status
select UFLAG from USR02 where BNAME ='SAP*' and MANDT='000'
go
To unlock the account
update USR02 set UFLAG=0 where BNAME='SAP*' and MANDT='000'
go
You may add schema owner SAPSR3.USR02 in the query if above query does not work.
Hope this helps.
Regards,
Deepak Kori

SAP users identification - rename SAP Ids

Dear all,
We have a project to change the codification of our SAP users.
We will use the AD ids as SAP users instead of the current codification.
We will copy the current user to a new one and close the current.
After this operation, all the users will lost their layout variants, their user-settings ...
Do you know if it is possible to transfer all the user-specific objects to the new user ?
Do you know if a program exists to list all the program where the SAP user is used ?
thanks for you help.
Kind regards
Véronique

Dear Lynn,
We were in SAP ECC 6.0
We created a specific program to recreate old users to new users based on an input file.
We didn't rename the user to keep the old user and keep the possibility to check the complete settings of this user.
We deleted the old user one year after.
With the specific program :
1/ we created the new user
2/ we copied some settings : layout variant, workflow settings, user settings, power list settings (linked to SAP EP)
we have the possibility to close the old user (lock and validity date) but we did it after in a second step
I hope it is clear
thanks
regards

Best practise for SAP users who leave the company

Hi
Could anyone reccommend a best practise document or give advice on how to deal with SAP user ID's when employee's/contractors/consultants leave? I am the basis admin just starting an SAP implementation and we have no dedicated authorisation team at the moment, so I have been asked to look into this :
Currently we set the validity date in SU01 to the termination date.
We chack there are no background jobs scheduled under that user id, if there are, we change the job owner to a valid user (we try to run all background jobs under an admin account).
We do not delete the user as from an audit point of view I believe it restricts information you can report on and there are implications on change documents etc, so best to lock it with validity dates.
Can anyone advise further?
We are running SAP ECC 5.0 on Windows 2003 64 Bit/MS SQL 2000.
Thanks for any help.

Hi,
Different people will tell you different versions of what they believe is best practice, but in my opinion you are already doing reasonably well.
What I prefer is
1. Lock ID & set validity date.
2. Assign user to user group LEAVER or EXPIRED or something similar (helps with reporting) out of SUIM/S_BCE* reports.
3. Delete role assignment (should you need it, the role assignment will be in the change history docs anyway).
4. Check background jobs & act accordingly.
For ease of getting info I prefer not to delete the ID though plenty of people do.

User locked as ( Globally) locked by system manager in the central system"

Helo
I have an issue with unlocking a user id in Production, when i am trying to unlock a user in production system i am geting the message
"(Globally) locked by system manager in the central system"
could you please tel me how to unlock the user in regular way.
there is no CUA setup in our landscapes ,not sure what is wrong , please assist immediately
regards
jayu

> there is no CUA setup in our landscapes ,not sure what is wrong
No CUA setup but still error shows locked by system manager in the central system.Anyhow try to unlock the user by another method.use tcode ewz5 to unlock the user...let me know whether its working or not
> could you please tel me how to unlock the user in regular way.
http://www.sap-img.com/basis/different-methods-to-lock-or-unlock-sap-users.htm
Regards,
Rafikul

User lock failed.SU10

Dear experts,
I locked a mass users using SU10, one of the user locked and immediately prompted for pwd change.
USER1          31.01.2011     09:15:02     ADMIN           Lock Changed     0     Not locked     64     Administrator Lock               SU10
USER1          31.01.2011     09:16:56     USER1           Password Changed     Long Password 3          Long Password 4          KRNL
USER1          31.01.2011     09:16:56     USER1          Lock Changed     64     Administrator Lock     0     Not locked               KRNL
Please suggest why this is happening in my SAP ECC 6.00, Kernal:7.00.
Regards,
Siva.

USER1 31.01.2011 09:15:02 ADMIN Lock Changed 0 Not locked 64 Administrator Lock SU10
USER1 31.01.2011 09:16:56 USER1 Password Changed Long Password 3 Long Password 4 KRNL
USER1 31.01.2011 09:16:56 USER1 Lock Changed 64 Administrator Lock 0 Not locked KRNL
Above log is showing that only lock activity was happened from SU10 and after that User changed his password from other opened screen. Did you kick off that user from the system immediate after locking?
Regards,
Nick Loy

User Lock issue when processing IDOCS

Hi Folks,
We are pushing the data into SAP using IDOCS.During this process some IDOCS are getting failed due to User Lock on shipment header.Anyone here can share their experience in dealing with User Lock issues.
Thanks,
Kiran.

Kiran,
Only one can edit the document, it's standard fucntion. I think No note can resolve this. I can suggest you to run a back ground job very frequently ,which picks these status 51 IDOCs and reprocess. Report is :RBDMANi2
We can use Message class & error message number on selection screen, so that we can make sure that only those idocs which were failed due to Lock problem are taken by the job.
Reddy

SAP users master table

Hi,
What is the table name that stores SAP user's master data.
I want the User's First name and Last Name

Moderator message - Please search before asking - post locked
Rob

Users Locked after Patch Upgrade

Hello,
After a patch update all users locked .. how to find the reason ..
Thanks,
DereK

Hi DereK,
Please check the below documents : -
http://www.sapfans.com/forums/viewtopic.php?f=24&t=19370
http://help.sap.com/saphelp_nw04/helpdata/en/c4/f01241c738f423e10000000a155106/frameset.htm
http://help.sap.com/saphelp_nw70/helpdata/EN/0a/065e4278636255e10000000a155106/frameset.htm
Hoe it helps
Regards
Arun

SAP User Locks

Similar Messages

Maybe you are looking for