05-15-2007 6:45 PM
HI ALL,
How do i delete the users which are locked in 000 or Master client!!!
05-16-2007 8:08 AM
Hi Abdul,
If you are speaking about SAP* and DDIC users in Client 000, then you can do the following:
Logon to your database with orasid as user id and run this sql:
Delete from sapSID.usr02 where bname='SAP*' and mandt='XXX';
commit;
- Where mandt is the client.
- Now you can login to the client using sap* and password pass.
Hope it helps.
Please award points if it is useful.
Thanks & Regards,
Santosh
05-16-2007 6:57 AM
You can do so using
SU01 (user by user)
or Mass User Deletion using
SU10
Or by creating a ECATT or CATT scripts
Hope this helps
Manohar
05-16-2007 8:08 AM
Hi Abdul,
If you are speaking about SAP* and DDIC users in Client 000, then you can do the following:
Logon to your database with orasid as user id and run this sql:
Delete from sapSID.usr02 where bname='SAP*' and mandt='XXX';
commit;
- Where mandt is the client.
- Now you can login to the client using sap* and password pass.
Hope it helps.
Please award points if it is useful.
Thanks & Regards,
Santosh
05-16-2007 8:29 AM
hope this solution does not work. If it does work you have a REAL problem
It SHOULD not be possible to logon this way, as this is the best know hack in an SAP system.
Ons should set the system parameter LOGIN/no_automatic_user_sapstar such that this is NOT possible.
05-16-2007 10:16 AM
Hi Auke,
It works because login/no_automatic_sers_sapstar is a cross client setting. You can login through any client where you have a access then you can set the parameter.
Thanks,
Harish
05-16-2007 10:29 AM
Hi abdul,
If all the users are locked, they can be unlocked by
a) GO to command prompt type <b>tp unlocksys <SID> pf=//usr/sap/trans/bin/TP_DOMAIN_<SID>.pfl;</b>
b) or else try this command at ur sql plus query level
Go to cmd prompt.
Sqlplus /nolog
conn /as sysdba
this will take you to the sqlprompt.
Just execute the earlier commands there.
sqlplus><b>UPDATE SAP<schema>.usr02 set uflag=0 where mandt=<CLNT NO> and uflag=64;</b>
this statement actually unlocks the users of that particular client. So, try for every client in that sap system.
c) You can delete sap*
Go to cmd prompt.
Sqlplus /nolog
conn /as sysdba
sqlplus><b>DELETE SAP<SID>.usr02 where mandt='CLIENT.NO' and bname=SAP*;</b>
<b>Note:- After doing this restart the system. So, that a new user with the name "sap" gets generated with password "pass". Provided the parameter is set login/no_automatic_user_sapstar= 0 (Automatic user SAP is permitted).</b>
regards,
kanthi