topic Re: DELETE USERS in Application Development and Automation Discussions

DELETE USERS

Former Member — Tue, 15 May 2007 17:45:47 GMT

HI ALL,

How do i delete the users which are locked in 000 or Master client!!!

Re: DELETE USERS

manohar_kappala2 — Wed, 16 May 2007 05:57:16 GMT

You can do so using

SU01 (user by user)

or Mass User Deletion using

SU10

Or by creating a ECATT or CATT scripts

Hope this helps

Manohar

Re: DELETE USERS

Former Member — Wed, 16 May 2007 07:08:16 GMT

Hi Abdul,

If you are speaking about SAP* and DDIC users in Client 000, then you can do the following:

Logon to your database with orasid as user id and run this sql:

Delete from sapSID.usr02 where bname='SAP*' and mandt='XXX';

commit;

- Where mandt is the client.

- Now you can login to the client using sap* and password pass.

Hope it helps.

Please award points if it is useful.

Thanks & Regards,

Santosh

Re: DELETE USERS

Former Member — Wed, 16 May 2007 07:29:57 GMT

hope this solution does not work. If it does work you have a REAL problem

It SHOULD not be possible to logon this way, as this is the best know hack in an SAP system.

Ons should set the system parameter LOGIN/no_automatic_user_sapstar such that this is NOT possible.

Re: DELETE USERS

Former Member — Wed, 16 May 2007 09:16:00 GMT

Hi Auke,

It works because login/no_automatic_sers_sapstar is a cross client setting. You can login through any client where you have a access then you can set the parameter.

Thanks,

Harish

Re: DELETE USERS

Former Member — Wed, 16 May 2007 09:29:42 GMT

Hi abdul,

If all the users are locked, they can be unlocked by

a) GO to command prompt type tp unlocksys <SID> pf=//usr/sap/trans/bin/TP_DOMAIN_<SID>.pfl;

b) or else try this command at ur sql plus query level

Go to cmd prompt.

Sqlplus /nolog

conn /as sysdba

this will take you to the sqlprompt.

Just execute the earlier commands there.

sqlplus>UPDATE SAP<schema>.usr02 set uflag=0 where mandt=<CLNT NO> and uflag=64;

this statement actually unlocks the users of that particular client. So, try for every client in that sap system.

c) You can delete sap*

Go to cmd prompt.

Sqlplus /nolog

conn /as sysdba

sqlplus>DELETE SAP<SID>.usr02 where mandt='CLIENT.NO' and bname=SAP*;

Note:- After doing this restart the system. So, that a new user with the name "sap" gets generated with password "pass". Provided the parameter is set login/no_automatic_user_sapstar= 0 (Automatic user SAP is permitted).

regards,

kanthi