How to do the IP Trace

[Former Member]

Hi

One of our systems important User ID is getting locked repeatedly. Is there any way to find so as from which terminal this is being done. Its clear that some one is trying to login by that ID without knowing the password.

Thanks in advance

[Former Member]

Dear Sanjay,

Yes this is possible if you activate user trace.

Steps are as follows:

Activating Security Audit

1) Go to transaction code SM19

2) SM19 Create a new profile

3) Select options.Give client detail and choose all options in AUDIT class.

4) SAVE

5)Click Yes(Do you want to distribute the profile)

6) Activate the Profile by clicking on the Activate button or Cntrl+F3

7)LOGOUT and again LOGIN

Viewing security Audit

1) Go to transaction code SM20

2) Select from and to date, User, transaction and Click on u201CReread Audit Logu201D

3) Get the details by clicking read audit log

This would surely work for you

From this you will easily find out from which terminal sombody is deliberately playing.

PS:You have 8 unresolved questions out of the total 8 you have.Close your open question or at least follow your thread.

Please read the 'Rules of Engagement' once

Regards,

Ashutosh

[Former Member]

Ashutosh

Thanks for your very quick reply. I used Transaction SM20 and I found entry also where it was locked but its not showing terminal No.

Can you please tell why this? and how can I find terminal No.?

[Former Member]

Dear Sanjay,

Same way,but don't think you will get the terminal number,you will get terminal name.With the terminal name you can easily find out who is playing with the ID.Even if that person is accessing it from outside the company you will get to know it via terminal name.

For all user detail put '*' in the user option and then click read audit log( F8).

PS: Did you read Rules of Engagement?

Regards,

Ashutosh

[Former Member]

I am not getting terminal name also in that entry?