Unlock users

Do you have advice for this possibly occurring issue:
How can users be unlocked when they are all locked in a SAP application for example in R/3 ?
Is a standard SAP System account available to unlock users?
Is a standard workinstruction available for this case?
Thanks in advance.

Vincent,
The SAP* user will be your escape route. There are several threads, notes and other webpages about how to re-activate it with its default password and without a lock. That may require a system bounce but when everyone is locked a bounce won't disturb too many processes
Jurjen
P.S.
I hope the "possibly occuring issue" isn't part of a job interview

Similar Messages

Dobj.schtm_invalid_dup error in oim while unlocking user

When trying to unlock a user in oim 9.1.0.2 we get the following error.
We have customized task created for this functionality to work.The task Xs Unlock User from UF to PF is getting rejected giving the following error
Error Details
Feb 20, 2013: Adapter error encountered while updating UD_OID_USR_LOCK.Setting task status... "DATABASE_ERROR" does not correspond to a known Response Code. Using "UNKNOWN".
Please assist .

This error is seen only for few users .

ABAP Program to unlock users

Hi Everyone,
I am trying to develop a ABAP Program to unlock users in sap client. Please if anyone can help me I will be thankful to them.
Thanks in advance.
Regards,
Gaurav.

eh, such a functionality already exists. in SU01 you got a button for that.

How to unlock users in a SAP system if all of them are locked

How to unlock users in a SAP system if all of them are locked
Posted: Mar 21, 2007 10:07 AM         Reply      E-mail this post
Hello Experts,
In any SAP System,if a user having authorizations has mistakingly locked all the users of the SAP system,then how wll we unlock those users bcoz we wont be able to logon into the SAP System. Requested to revert your valuable replies at earliest.This happened with us,how to resolve it.My Email Id is [email protected] .
Regards,
Saumya

Hello Siva And Manas,
Thanx for ur replies .
Manas: These SQL statements we hv to run at the Command Prompt level only na.......
Siva : U r telling to delete the SAP* user ,u dont mean with the System created default user SAP* rite but u mean to delete our self created SAP*/any super user rite? Secondly how to delete tat user at the database level?
Regards,
Saumya
If all the users are locked , they can only be unlocked via sql.
Actually waht happens is if the uflag field of an user in table usr02 is 0 then the user is unlocked. Different values of the uflag field in table USR02 mean:
0          User not locked
32         Locked by CUA central administrator
64         Locked by administrator
128       Locked after failed logon
Incase all the users are locked execute the following sql to unlock them
update sap<sid>.usr02   (means update sapd01.usr02 or sapq01.usr02 etc)
set uflag='0' ;
commit.;
This unlocks all the users.
update sap<sid>.usr02
set uflag='0' where bname='xxx';
commit.;
This unlocksonly the user xxx.

Restrict SU01 to only lock and unlock user passwords

how to restrict SU01 to only lock and unlock user passwords,(should not have acces to create users) What is the auth.obj I need to change ? please suggest.
Thanks
sr
Message was edited by:
sunny raj

Restrict authorization object S_USER_GRP to activity '05'
Cheers,
Ben

EWZ5 unlock users after client copy does not work

Hi All
I have following problem, i made client copy and i locked user in EWZ5 on both systems (source and target). Than I made client copy with profile SAP_CUSV (customizing with variants). The problem is that after the copy i am unable to unlock users on the targat client in EWZ5. I see users locked in the transaction but when i click unlock than no one is unlocked (result like there are no locked users) and users still remains locked (i tried to log on). On source system unlocking was working ok.
Any suggestion are highly appreciated.
JM

Hi Josef,
Did you checked syslogs? You can also execute the sql statement, below, on sqlplus;
update <owner>.usr02 set uflag='0' where bname='EWZ5';
commit work;
Best regards,
Orkun

Unlock User and Reset Password via DB

Hi,
I've a SAP FI running on Oracle. I have the SAP ID but no password.
I've the access to the Oracle DB. How do I unlock the ID and reset the password via the DB.
Please advise.
TIA !
Desmond

Hi Desmond,
You can unlock SAP user id from DB level, but there is no way you can reset password for SAP user id from DB level.
Below is the command for unlocking user id from DB level.
Connect to orasid.
sqlplus "/as sysdba"
SQL>update sapr3.user02 set uflag=0 where bname='userid' and mandt='<clientno>'; -- for older SAP versions
From ECC 5
SQL>update sap<SID>.user02 set uflag=0 where bname='userid' and mandt='<clientno>';
Thanks,
Phani.

Unlocking user account...

The Oracle 10g database seems to have locked a user out. The problem is that the user that has been locked out is the administrator and only the administrator can unlock a user.
How to unlock an administrator?
Thanks!

If you are in Unix probably you can connect with the oracle user (the one that owns the oracle installation) and connect as "/as sysdba" and unlock the user.
Example:
/home/oracle] $ sqlplus
SQL*Plus: Release 9.2.0.6.0 - Production on Tue Dec 19 18:49:36 2006
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
Enter user-name: /as sysdba
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.6.0 - 64bit Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.6.0 - Production
SQL> alter user administrator account unlock;
User altered.In windows you can do the following:
D:\>set ORACLE_SID=DBA
D:\>sqlplus /nolog
SQL*Plus: Release 10.2.0.1.0 - Production on Tue Dec 19 18:56:41 2006
Copyright (c) 1982, 2005, Oracle. All rights reserved.
connect /as sysdba;
connect /as sysdba;> connect /as sysdba;
Connected.
[email protected]> alter administrator account unlock;
User altered.
[email protected]>Message was edited by:
Delfino Nunez

CUP 5.3 - Mandatory RA for Unlock User Workflow Faulty

Good day All.
I have a mandatory Risk Analysis on Workflow stage Unlock User account that is not working. The workflow is supposed to request a mandatory Risk Analysis from the CUP request Approver.
My config is as follows;
1) Request Type = Unlock Acc with Assigned Action, Unlock_User
2) Workflow Initiator =Unlock Acc with Attribute, Condition = And, Attribute = Request Type & Value Unlock Acc
3) Stage = Unlock Acc with Additional Config > Risk Analysis Mandatory = Yes*
4) Path = Stage 1 > Unlock Acc
I have re-created the Initiator, Stage and Path, but the problem still persists. Please advise.
Many thanks,
Mike Hannie

Good day All.
Please see the update from SAPAG Below - There could be a bug in the CUP Workflow for Unlock Acc
09.12.2009 - 22:10:09 CET - Info for Customer by SAP
Dear Michael,
I am sending my analysis results to the support developers after
testing internally. Analysis is not triggered in an unlock request.
The next update you receive will be from them.
Thank you in advance for your patience.
Warm Regards,
Kelly Erickson
Customer Assurance
Governance, Risk, and Compliance
SAP BusinessObjects Division
Regards,
M Hannie

Unlock User

Hi,
I have created an user called helpdesk with Unlock User Capability assigned to him, and when i login as helpdesk when i click Unlock after selecting an user it is showing an error message "User has no resource accounts that support the Unlock feature" but an resource is assigned to that user.
when i try unlocking the same user by logging in as configurator i could get the Unlock User page.
Kindly give me a solution ASAP.

Please, do not unlock user. Moreover, you already get answer in this other one. And if answers doesn't sastify you, say it in the same thread by posting new post, but do no create confusion by adding a thread.
Thanks,
Nicolas.

Querry to unlock users in sql2005

hi,
all my users are locked i have to unlock the users by sql2005 querry analyser can you send me the full command..
thanks
gajinder Singh
sap basis

HI Tushar
command will be
update USR02 set UFLAG=0 where BNAME='username' and MANDT='100'
other way is
tp unlocksys <SID> pf=//usr/sap/trans/bin/TP_DOMAIN_<SID>.pfl
Please read
http://www.uber-goober.com/forums/showthread.php?t=100690
Re: How to unlock users in a SAP system if all of them are locked
Hope this will help you ,,
Regards
dEE

[PowerShell] Delegate user to unlock users

Hi all,
I'm trying to delegate users to unlock users.
I'm using the following command, but I receive some errors. (I've removed the domain name)
dsacls " OU=Users,OU=DelegatedProvider00,DC=bla,DC=bla,DC=bla" /I:s /G "bla\Unlockers":rpwp;lockoutTime;user
lockoutTime : The term 'lockoutTime' is not recognized as the name of a cmdlet, function, script file, or operable prog
ram. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:131
+ ... unlockers":rpwp;lockoutTime;user
+                    ~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (lockoutTime:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException
user : The term 'user' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the
spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:143
+ ... wp;lockoutTime;user
+                    ~~~~
    + CategoryInfo          : ObjectNotFound: (user:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException
Can someone please tell me what i'm during wrong?
Using the gui works perfect, no issues there.
There is a user in the group
Thanks in advance,
Br,
Kristof

For a one time update please use the AD delegation wizard. For instructions on how to use it please post in the Directory Services forum. Manually setting AD security is a very bad idea.
You can also just place the users in the "Account Operators" group. THat is what it is intended to be used for.
¯\_(ツ)_/¯

How to set permissions to unlock user?

Hello,
I'd like to set up a group of users, whose only mission is to unlock users.
I've tried doing this but haven't had any success...
Does this only have to do with the 'Permissions' of the group (and which?), or does the group have to be administrator or approver of something?
Thanks in advance

I've found out what my problem was...
The group needs to be administrator of the user group "ALL USERS" and of the organization "Xellerate Users" (every user in my scenario belongs to this org).

Unlock user view

I have a problem with view locking in activeSync. If a user is logged in to IdM user site (and thus lock a user view), and that activeSync receives an update for the same user, activeSync will fail and skip that change number. This causes certain changes are not processed by activeSync.
Does anyone know how can I unlock a user view by using xpress/java code? In that way I can make sure activeSync process always unlock a user before any process, and thus resolve the issue.
Thanks!

I am also facing the similar problem where AS events are getting missed because the user is locked.
Few questions
1) I have checked that there is a unlockobject XPRESS call available to unlock the object. How efficient is it? If I assign "unlock user" capability to the admin will that admin have rights to unlock the object.
<Action id='0' application='com.waveset.session.WorkflowServices'>
<Argument name='op' value='unlockObject'/>
<Argument name='type' value='User'/>
<Argument name='name'>
<ref>userId</ref>
</Argument>
<Argument name='authorized' value='true'/>
<Argument name='subject'>
<ref>WF_CASE_OWNER</ref>
</Argument>
</Action>
2) What is the implication if I reduce the unlocktimeout in the repository configuration to 1 min or 30 sec?

Unlock User - Create a resource

Hi!
I have a bussiness process that need to create a resource with fuction Unlock_User (as the same as unlock user button on Xellerate user form).
It´s possible to create a adapter like this?

Yes.
Unlock user has the big advantage that it is not triggered by an event from a trusted source which means that it makes sense to implement is as an RO.
(I have spent many hours explaining that re enabling users in OIM that has been disabled in the trusted source is not a terrible good idea)
Best regards
/Martin

Unlock users

Similar Messages

Maybe you are looking for