GUI Login password change after 90 days !

[former_member622718]

we want all user to get password change at 90 days!

"login/password_expiration_time " we search this parameter in rz10 but i didnt got this parameter..!

help me how to get it done.. can we create new parameter and edit it ?

[kashyap_shah3]

Hi Manoj,

You'll need to restart SAP system for the parameter login/password_expiration_time to take effect.

To apply/test above parameter to only a user or a subset of users, you need to make use of security policy which is user specific. To get a brief on security policy, use transaction SPRO and navigate to --> Display SAP Reference IMG (F5) --> SAP NetWeaver --> Application Server --> System Administration --> Users and Authorizations --> Security Policies and click on the glass on note icon besides Create Security Policies

If you change above parameter on 1-Jan-2020, the system will check last password change date of a user logging on to the system and will prompt for password change 90 days from that date and not 1-Jan-2020.

To answer your other question about password change pop-up for users created on 20-Jan-2020 after parameter change: It'll depend when user sets the production password (which gets captured as last password change date) as the one that you as an administrator will set is treated as initial password and validity of which depends on parameter login/password_max_idle_initial. So again 90 days from last password change date is when a logging user will be prompted to change the password.

I hope above clarifies some of your doubts.

Best Regards,
Kashyap Shah

[former_member522291]

Hello,

login/password_expiration_time is not

Dynamic Parameter?you have to restart the application to make it effect.

you can also add into the default profile which means effect on all application servers, or the instance profile which means only effect on this instance.

Thanks Neil

[former_member622718]

hello jianchao cai thank you for your response.

shall i include/create " login/password_expiration_time" parameter in default profile !

actually there are 3 profile name in rz10 , so shall i add in default profile ?

thanks advance !!!

[FredericGirod]

https://help.sap.com/doc/saphelp_nwpi71/7.1/en-US/22/41c43ac23cef2fe10000000a114084/content.htm?no_c...

read the orange part : Default

[former_member622718]

hi

i have small doubt,

i have 100 user in development system and i changed "login/password_expiration_time" to 90 days from 1 January 2020 !!

so after 90 days from 1st January 2020 password reset pop-up will appear right ? what if i created a new user on 20 January, when will that user get password rest pop up ??

[former_member522291]

Hello,

you have to create it in RZ10, then you will find it next time.

Also you can edit the profile in OS level and restart the application instance to make it effect.

Thanks,

Neil

[former_member622718]

hello ,

i have 3 profiles in rz10 first is default.

after creating parameter in rz10 and changing value will it effect immediately or after server restarts?

can we make this to one user for testing purpose ?

[Nicolas]

You have to restart the server. Since it is a system parameter, you cannot test it for one user.

[former_member622718]

hi jianchao cai,

i have created login/password_expiration_time and parameters is set to 1 in rz10 but its not showing in rz11 !

[former_member622718]

Thank you it worked, i have set parameters to 90 days, what if some user got created after 2 days, does he will get notification to change password on 90th day or from the day which his id got created?

how newly created user in between will get pop up to change password ? which 90 days either 90th day of rz10 setting or 90th days from user id created ?

thank you advance

[former_member622718]

hi

i have small doubt,

i have 100 user in development system and i changed "login/password_expiration_time" to 90 days from 1 January 2020 !!

so after 90 days from 1st January 2020 password reset pop-up will appear right ? what if i created a new user on 20 January, when will that user get password rest pop up ??

[Nicolas]

Hello,

It is strange since this is the correct parameter for your purpose. Did you check the existence of this parameter in RZ11 ?

Regards, Nicolas

[former_member622718]

hello nicolas

in rz11 its there but i coud not find in rz10.. how to find and make it done !

thank you advance!

[Nicolas]

You have to add this parameter manually in RZ10. Check this "how to" : https://wiki.scn.sap.com/wiki/display/SL/Changing+the+profile+parameters+in+RZ10+transaction

Regards, Nicolas

[former_member622718]

shall i include/create " login/password_expiration_time" parameterin default profile !

actually there are 3 profile name in rz10 , so shall i add in default profile ?

thanks advance !!!

[former_member622718]

i have created login/password_expiration_time and parameters is set to 1 in rz10 but its not showing in rz11 !

[Nicolas]

Did you restart your server ?

[former_member622718]

hi

i have small doubt,

i have 100 user in development system and i changed "login/password_expiration_time" to 90 days from 1 January 2020 !!

so after 90 days from 1st January 2020 password reset pop-up will appear right ? what if i created a new user on 20 January, when will that user get password rest pop up ??

[former_member647692]

Hi Manoj Kumar,

the '90 days counter' starts from the last change password, so for the new users the prompt will be shown after 90 days from creation.

Regards,

Alec

[former_member622718]

Frederic Girod Thank You!!!

[former_member622718]

hello ,

i have 3 profiles in rz10 first is default.

after creating parameter in rz10 and changing value will it effect immediately or after server restarts?

can we make this to one user for testing purpose ?