SAP* user

[Former Member]

Hi All,

Can anyone plz clarify me on how to deactivate the spl features of the user SAP*?

For example,it has got the initial(default) password of 06071992 in client 000 and PASS in any new copied clients.How can we protect the systems from the unauthorised access with these users?

Awaiting your replies:')

Ramkumar Chandramohan

[Former Member]

Hi Ram,

Set the below mentioned parameter login/no_automatic_user_sapstar=1and restart the server.

This parameter will deactivated the Automatic user SAP* .

But need to have other super user for the back end purpose.

Regards,

Reddy.

[Bernhard_SAP]

Hi Ramkumar,

this is all well documented (documentation and also SAP-.notes 8852,68048,2383)

b.rgds, Bernhard

[Former Member]

Hi,

SAP* has two passwords

1. 07061992

2. PASS

The userid SAP* is delivered with SAP in clients 000 and 001,In these 2 clients, the default password is 07061992

SAP* has PASS as the default password to login into the newly created client once the client copy is performed

There are ways to delete SAP* with password 07061992

1.Delete SAP* user using ABAP code

Delete from from table USR02 where bname = 'SAP' and mandt = '**' (Client)

2.Another way is to change the SAP* password which is done through SU01

If you give userid as SAP* in SU01 then it will display as user does not exist.

Create a super user using the SAP* login and default password and assign SAP_ALL profile, and by logging into the newly created user you can change the password of the SAP* from SU01 screen

For protection of SAP* with "PASS" password you can perform this by changing the parameter

login/no_automatic_user_sapstar > 0

Rakesh

[Former Member]

Hi Ram,

If u copy a client , the user "SAP*" is always availlable. this users does not have a master record, and is programmed into the system code. to protect the user from unauthorised access you should create a user master record for this user . create "Super user" with full authorizations.

You can deactivate the special properties of SAP*. To do this, you must

set the system profile parameter login/no_automatic_user_sapstar to a

value greater than zero. If the parameter is active, SAP* no longer has

any special properties. If the user master record SAP* is deleted, the

logon with PASS no longer works.

• If you want to reinstate the old behavior of SAP*, you must first reset the

parameter and restart the system.