How to unlock a client

[Former Member]

Hi everyone

I have an issue..

Can anybody tell me how to unlock a client from client 000..

In client 800 all users are locked.

Is there a way to do that..

thank you.

Kiran kumar.

[beyhan_meyrali]

Open tcode dbacockpit on any other client and go to SQL Editor and run

To check data

select * from USR02 where bname = 'XXXXX'

To fix data

update USR02 set uflag = '0' where mandt = '010' and bname = 'XXXXX'

commit

And a small dbacockpit tutorial by me .

[Former Member]

I thank everyone who answered this thread..

actually i did resolved the issue..soon after

i posted this log..

Anyhow i now know other ways of doing it..

Thank you

Kiran deverla..

[Former Member]

Hi Kiran,

1. To lock or unlock a client only in an in R/3 System, run the following functions via tcode SE37:

1. SSCR_LOCK_CLIENT

2. SSCR_UNLOCK_CLIENT

Once we run these functions with a client as input, that client will be locked/unlocked. Actually this function set flag '' Client is locked temporarily for client copy" in client maintenance menu. And the client will be available for users DDIC and SAP*. If you try to login in that client as any user, system gives message that ' Client locked temporarily'.

Procedure to unlock the client

1. Goto SE37

2. Specify function module as SSCR_UNLOCK_CLIENT

3. Click on icon Single test or F8.

4. Specify the client which you want to lock and click on execute(F8).

2. If all the users are locked, they can be unlocked by

a) GO to command prompt type tp unlocksys <SID> pf=//usr/sap/trans/bin/TP_DOMAIN_<SID>.pfl;

b) or else try this command at ur sql plus query level

Go to cmd prompt.

Sqlplus /nolog

conn /as sysdba

this will take you to the sqlprompt.

Just execute the earlier commands there.

sqlplus>UPDATE SAP<schema>.usr02 set uflag=0 where mandt=<CLNT NO> and uflag=64;

this statement actually unlocks the users of that particular client. So, try for every client in that sap system.

c) You can delete sap*

Go to cmd prompt.

Sqlplus /nolog

conn /as sysdba

sqlplus>DELETE SAP<SID>.usr02 where mandt='CLIENT.NO' and bname=SAP*;

after doing this restart the system. So, that a new user with the name "sap" gets generated with password "pass". Provided the parameter is set login/no_automatic_user_sapstar= 0 (Automatic user SAP is permitted).

[andreas_herzog]

^^ this is wrong...

"<i>after doing this restart the system. So, that a new user with the name "sap*" gets generated with password "pass".</i>"

a) after deleting sap* you're able to logon to the client with (the hard coded) sap*/pass

b) the "user" sap* with pwd <pass> does not have a user account...it is written into the code! only if an user account sap* exists it can be deleted...sap recommends to deactivate the account or supply it with no administrative/super user rights...

c) so: you will not need to restart the sap system!

d) only if the profile parameter "login/no_automatic_user_sapstar= 0" is set, you'll need to change that and restart the system (after having deleted the user account sap*)

<b>=> plz do not mix up the different users...sap* with account and sap* written hard coded into abap</b>

GreetZ, AH

[Former Member]

Hi Kiran,

If all the users are locked , they can only be unlocked via sql.

Actually waht happens is if the uflag field of an user in table usr02 is 0 then the user is unlocked. Different values of the uflag field in table USR02 mean:

0 User not locked

32 Locked by CUA central administrator

64 Locked by administrator

128 Locked after failed logon

Incase all the users are locked execute the following sql to unlock them

update sap<sid>.usr02 (means update sapd01.usr02 or sapq01.usr02 etc)

set uflag='0' where mandt = <client no> ;

commit.;

This unlocks all the users.

update sap<sid>.usr02

set uflag='0' where bname='xxx'and mandt =<client>;

commit.;

This unlocksonly the user xxx.

This will resolve your problem.

This has been already discussed in the following thread in this forum

Pl dont forget to award points.

Regards