Home‎ > ‎OS Administration‎ > ‎Script and Tools‎ > ‎

SAP mass user lock/unlock at OS level

SAP mass user lock/unlock at OS level

SAP provides mass userlock /unlock utility as part of TPprogram. Using this functionality one can lock all users in SAP system exceptSAP* and DDIC.

Why its required

If you are planningto do any maintenance activity ,you can lock all SAP users and continue yourmaintenance using DDIC . If you require moreusers to be accessible during the maintenance, those users should log in beforeyou run the lock command .

Please note : Thislock will not impact any user already logged in the system. Also can use SU10to mass lock/unlock.

Lock Procedure

1.Loginto at OS level with <SIDADM> and go to /usr/sap/trans/bin .

2.Executefollowing lock command at OS level

tp LOCKSYS <SID> pf=<DOMAIN_CONTROLLER_PROFILE>

3.Once above command is executed ,SAP will show following message when any user will try to log in.

You may get 'Logon not possible. Put running' or 'Upgrade still running : Logon not possible' message ,it depends on your SAP NetWeaver release.

Unlock Procedure

1.Execute following unlock command at OS level

tp UNLOCKSYS <SID> pf=<DOMAIN_CONTROLLER_PROFILE>

Reference:

http://help.sap.com/saphelp_45b/helpdata/en/3d/ad5b744ebc11d182bf0000e829fbfe/content.htm

User Lock Status In Sap Login
How To Check User Lock Status In Sap
Sap User Status Codes

This blog should go with a huge red warning: do not do this unless you are absolutely sure that you understand the consequences of deleting certain locks!

There is a good reason why the lock concept exists in the first place – it is to avoid inconsistencies when you update database records. And there is also a good reason why such manual lock deletions are stored in the system log (SM21).

How To Check User Lock Status In Sap

Home SAP BASIS Full Form & Meaning SAP BASIS Training Tutorials for Beginners How to Check SAP Version SAP Shortcut Parameter Lock/Unlock SAP T-Codes via SM01 Reset SAP. Password What is SAP Router SAP Work Process Assign Authorization Object to User in SAP SAP STMP Mail Configuration SAP Compatible Printers Check SAP Services in Linux and Unix. You are configuring System Monitoring and want to use metric 'User lock status', however is not reporting correct value. Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental. User Lock In SRM systems a user can be locked. If it is an approver user, the decisions can not be carried out neither on the portal or through the offline approval email. A user can be locked manually in the SU01 transaction, or if the password was entered wrongly multiple times or it has expired, the user is going to be locked automatically.

At least in older systems (I cannot check in a suitable S/4HANA system right now) I would use AL08 for checking if a user is logged on.

Sap User Status Codes

Even the official SAP documentation states: “Only delete lock entries if you are sure that they are invalid and can be deleted without impairing an active process (user session, update, and so on). Deleting a lock held by an active user can lead to loss of the data entered by the user or to data inconsistencies.”

SAP mass user lock/unlock at OS level

User Lock Status In Sap Login

How To Check User Lock Status In Sap

Sap User Status Codes