Saprouter service on windows - which user rights are required?

[Former Member]

Hi,

We have the saprouter service running in a windows 2003 server, this service is started by a user account named 'saprouter' which has its password set to never expires.

Due to security concerns, our IT Security Deparment have ask us to apply all the following restrictions to the 'saprouter' user:

1) 'Logon locally' user right is disabled

2) Userid is not a member of the Administrators group

3) Deny access to the user rights: 'Access this computer from network' and 'Logon through Terminal Services'

As per our security policy, non-expiring passwords are allowed only for users that can meet all the conditions listed above.

The questions are ¿Which user rights should be granted to the user account that starts the saprouter service? ¿Could we apply the conditions listed above without impact the saprouter service?

Thank you for your kind attention.

Sokram

[Former Member]

Hi,

SAP Router service require logon authorization of the users by which you have generated credential file (Cred_V2) file at the time of SAP router configuration.

Use the same user which you have used for configuring SAP Router.

Regards.

Rajesh Narkhede

[rupali_karbhari3]

following permissions are required to set SAPRouter working :

1. password never expires

2. user never change the password

3. should be member of administrator

4. profile --> home folder :c:\user\sap\saprouter (path of instllables)

5. end disconnected session : never , active session limit : never , idle session limit : never

check if you can apply above points for your users

Regards,

[former_member182034]

hi,

please have look on following note

Note 41054 - Installation of the SAPRouter as NT Service

Regards,

[Former Member]

Thank you Majamil..

I had already taken a look at that SAP Note before, but it do not mention anything about the user rights requirements for the saprouter service.