Creating different users with a different password expiry time

[Former Member]

Hi

I have been asked to change our password expiry time (currently 32 days) to 90 days but only for a certain group of users.

Is there a way of doing this?

The only way I can think of at the moment is to write schedule job that changes the expiry date for those users passwords.

Any ideas appreciated.

Thanks

JP

Edited by: JP on Nov 11, 2010 3:59 PM

[Former Member · Accepted solution]

Yes, program is required.. which checks table USR02

no other option in RZ10......

[Former Member]

Hi JP,

This can be achieved with setting up password policies to differrent set of users. Check the below Wiki:

https://wiki.sdn.sap.com/wiki/display/Security/Abilitytoassignsecuritypoliciestospecific+users

Rgds,

Raghu

[Former Member]

Hi JP,

Yes it can be done.

If you have access At database level (not in R/3), you can easily solve this problem: in the table USR02, just set a date far in the future for the field BCDA1 (password last change). For example, if you want to set it so user SMITH does not have to change his password until 2010, you can use the following SQL script : update USR02 set BCDA1 = '20101231' where BNAME='SMITH' Just replace the values for BCDA1 and BNAME with your own values ! This script is for MS SQL Server + R/3 46B and 46C, but the syntax should not be very different for other database systems and R/3 versions.

Please raise this kind of issues in Security forum.

Regards,

Rama