RFC user getting blocked, how to trace origin?

[former_member283791]

Hey guys,

Firstly let me say I'm not 100% sure if this is the right place to ask this quesion so if isn't please direct me to the right spot.

Now for the question itself. We have an RFC user which is the same on every system/client and on one perticular client this RFC user is getting locked due to incorrect logins. Problem we are having is that we can nog seem to find where these incorrect logins are comming from.

Can anyone advice us a course of action in order to trace this problem back and fix it?

Thx in advance.

[former_member420332]

Tcode SM20 & SM21.

Also check the following post: http://scn.sap.com/thread/1456385

[MaheshKumar]

Hi

Check audit log for that rfc user name u can find terminal name.