tracing what causes an sap userid to be locked

[Former Member]

Hello Folks - often I run into situations (especially when BW is involved) where various users like ALEREMOTE or similar users are getting locked due to too many incorrect logon attempts.  If I know from where (could be within the system or some external SAP system) it is that is calling into this system w/ the wrong pwd, I can fix it.  But it gets tricky when I don't.  I know to scour ST22/SM21 to look for clues but do not think those will give information on which (external) system for sure is calling in and locking the user.

I am aware ST01 gives you opportunity to turn on a trace but not sure that is the best way to solve these situations.  Appreciate any tips you can share.  Thanks

[former_member185954 · Accepted solution]

Hello Ben,

You can switch on audit logs transactions SM18/SM19/SM20 to track where these logins are generated from.

Regards,

Siddhesh

[Former Member · Accepted solution]

thanks - yeah that makes sense

[hemanth2 · Accepted solution]

Hi Ben,

Hope you are doing good.

There is a nice wiki which has the details of the exact steps :

How to analyze user lock issue - Security and Identity Management - SCN Wiki

Hope this helps.

_ _ _ _ _ _ _ _ _

Kind Regards,

Hemanth
SAP AGS
_ _ _ _ _ _ _ _ _