Changing the default password for sap use

Changing the default password for sap use

You are trying to change the password for sap* user, however when you go into su01 and enter sap* as the user name, the following message is displayed, user sap* does not exist.

You can delete the SAP* user using ABAP code :-
Delete from usr02 where bname = 'SAP' and mandt = '**';

Where '*' means your client no.

Then login to your client using password SAP* and password PASS

However, if you delete it, then it will automatically created once again with password PASS

The userid, SAP*, is delivered with SAP and is available in clients 000 and 001 after the initial installation. In these 2 clients, the default password is 07061992 (which is, by the way, the initial date when R/3 came into being...). It is given the SAP_ALL user profile and is assigned to the Super user group.

When I say it is "delivered" with SAP, I mean that the userid resides in the SAP database; there are actually rows in the user tables used to define userids.

If you delete the userid, SAP*, from the database, SAP has this userid defined in its kernel (the SAP executable code that sits at the operating system level, i.e., disp+work). When this situation exists, the password defined in the SAP code for SAP* is PASS.

This is necessary when you are performing client copies for example, as the user information is copied at the end of the process.

You can sign into the client you are creating while a client copy is processing using SAP* with password PASS (but you should have a good reason to do this - don't change anything while it's running).

Anyway, if the SAP* userid is missing, you can sign in to the client you want and simply define it using transaction SU01 and, as I stated above, assign it to the SUPER user group and give it the SAP_ALL profile. You define its initial password at this point. If you've forgotten its password and don't have a userid with sufficient authorization to create/change/delete userid,
then you can use the SQL statements to delete it from the database and then you can use SAP* with PASS to sign back into the client you want to define it in and recreate it.

There is also a profile parameter which can override the use of SAP* with PASS to close this security hole in SAP (login/no_automatic_user_sapstar). When this parameter is defined either in your DEFAULT.PFL profile or the instance-specific profile and is set to a value of '1', then the automatic use of SAP* is deactivated. The only way to reactivate the kernel-defined SAP* userid at this point would be to stop SAP, change this parameter to a value of 0 (zero), and then
restart SAP.

The default password for SAP is 06071992. (DDIC has 19920706*)

Child system	/GRCPI/GRIA_EAM
Centralized	GRAC_SPM

Account type	KOART
Company code	BUKRS
Cost element	KSTAR
Distribution channel	VTWEG
Division	SPART
Operating concern	ERKRS
Plant	WERKS
Profit center	PRCTR
Purchasing group	EKGRP
Purchasing organization	EKORG
Sales group	VKGRP
Sales office	VKBUR
Sales organization	VKORG
Shipping point	VSTEL
Warehouse number / warehouse c	LGNUM
Valuation area	BWKEY
Business Area	GSBER
Maintenance Planning Plant	IWERK
Credit control area	KKBER
Controlling Area	KOKRS
Cost Center	KOSTL
Storage Type	LGTYP
Personnel Area	PERSA
Plan Version	PLVAR
Maintenance Plant	SWERK
Transportation planning point	TPLST
MRP Controller	DISPO
Release Code	FRGCO
Codition type	KSCHL
Chart of Accounts	KTOPL
Release Group	FRGGR
STORAGE LOCATION (object)	LGORT
WORK CENTER	ARBPL
Consolidation Unit	BUNIT
Bom (authorization group)	BEGRU
ORDER TYPE	AUART

Check Ind.	Proposal	Meaning	Explanation
Check	YS	Check /Maintained	The object will be inserted along with the values in the role. The object will be checked along with the values during runtime of the transaction.
Check	NO	Check	This object will not be inserted into the roles. A check on the object along with the values will be done during the runtime of the transaction
Do not Check	NO	Do Not Check	The object will not be inserted into the roles and there will not be any check performed during runtime of the transaction

SAP Security Authorization

How to get a list of userID from LDAP distribution list

Extracting Text Between Brackets

Excel - remove duplicate and replace it with blanks

Excel - Deleting text from cell a space character

Useful SAP Security Tcodes

Security - General tcodes

Security - Audit Information System tcodes

Security - Directory tcodes

Security - Secure Network Communications tcodes

Security - Secure Store and Forward tcodes

Security - User and Authorization Management tcodes

How to check Active Directory account is locked or not

Maintain/Restore Authorization Groups

Report Authorization Maintenance

Selection Screen

Report Selection

Authorization Groups

Maintain

Restore/ transport

Alternative to ST01 system trace using Tcode STAUTHTRACE for multiple system at a time

Why is SAP authorization profile red or yellow?

SAP Query using tcode SQVI with username and email as the result

Frequently used SE16 Tables for security

SSO Parameter value

SPRO missing entry - launch with tcode SIMGH

GRC 10 - Firefighter tcode

GRC 10 - Repository Sync failed with error "No more storage space available"

Determind / Find / Check - GRC 5.3 Support pack and patch version

Useful field name when you perform SUIM or display data from AGR_1251

Check GRC 10 error log using SLG1

ST01 trace file delete

Create role with display mode only ACTVT 03

Change SAP* password and default password

http://wiki.sdn.sap.com/wiki/display/ABAP/Changing+the+default+password+for+sap+use

Changing the default password for sap use

User type (Dialog, system, communications, service, reference )

http://help.sap.com/saphelp_nw70ehp1/helpdata/en/52/67119e439b11d1896f0000e8322d00/content.htm

User Type

RSUSR200 Report - List user according to system, validity, User type, lock status and logon attempts

Display a list of user's password status and lock status

SU24 Concept