Checks When SAP R3 is Very Slow

I'm using SAP R3 4.6C MS SQ !""". I h#$e %&" users. I no'ice when users #re log in (uring )e#k hours &#m *6)m SAP R3 is $ery $ery slow. I l#'ely incre#se my +IA #n( ,-+ )rocess .u' s'ill s#me issue. Check if there are long running jobs in the background during the peak times (SM50) or if users are running long running transactions/big lists. System performance cannot impro e if !ia and "ck #orkprocess increased. $n fact those itself #ill bring do#n the performance of the system. % !o not allocate more the & bck process in peak hours % Check if your hard'()* is ade+uately si,ed for these many users. % Check for any jobs consuming more than -0. of you resource. ( S/0-1!*/($2 (3(24S$S1/05 C56) % Check if there is any 3*/'0)7 C022$S$03 (/ S*)8*) (3! 6S*) *3!. % )ate of ()C9$*8* 20: S'$/C9 08*) . % (ll 6S*)S use S(M* S*)8*) (/ ( /$M* % * en 6S*) #ith (22 S65*) 6S*) (6/90)$S(/$$03 can bring !0'3 S4S/*M 5*);0)M(3C* (/ /$M*S % /)(3S50)/S< pro iding (6/90)$S(/$03 and *=*C6/$3: )*S06)C* C03S6M$3: )*50)/S /0 "* (80$!*! at 5)$M* /$M*. Wh#' is 'he (i//erence .e'ween unico(e #n( nonunico(e. 0or wh#' )ur)ose i' is use(. 6nicode is a character encoding system similiar to (SC$$. 4ou can see the definiton for 6nicode by 6nicode consortium belo#. 6nicode is the uni ersal character encoding< maintained by the 6nicode Consortium. /his encoding standard pro ides the basis for processing< storage and interchange of te>t data in any language in all modern soft#are and information technology protocols?. 6nicode co ers all the characters for all the #riting systems of the #orld< modern and ancient. $t also includes technical symbols< punctuations< and many other characters used in #riting te>t.

/he 6nicode Standard is intended to support the needs of all types of users< #hether in business or academia< using mainstream or minority scripts. Most of the S(5 implementations are done on 6nicode system as it support all kind of languages< #hich is good for a company to e>pend their business. (nother things is 6nicode system re+uires @0. more storage area and processing speed to run the system perfactly. /here are systems like =$< #hich can #ork only on 6nicode so it is al#ays ad isible to go for unicode then to non1unicode.

Regul#r 1o. 'o Purge 2r#ns#c'ions ogs

2i)s .y3 Pu4o #s'ono 4ou should re1organi,e (note A-0BC) the follo#ing data at regular inter als. 'hen doing so< use the follo#ing job names as they can be used to check if the jobs ha e already been acti e in your systemD (dministration !ata for "ackground Eobs

5rogramD )S"/C!*2 )e1organi,ed tablesD "/C% 5ath for accessing filesD /usr/sap/S$!/S4S/global/FclientGE0"2: Eob schedulingD !aily (#ith ariants) )ecommended job nameD S(5H)*0):HE0"S

Spool !ata and (dministration !ata for Spool Eobs 5rogramD )S5000IA )e1organi,ed tablesD /S5% 5ath for accessing filesD /usr/sap/S$!/FinstanceG/data Eob schedulingD !aily (#ith ariants) )ecommended job nameD S(5H)*0):HS5002 (dministration !ata for "atch $nput 5rogramD )S"!C)*0 )e1organi,ed tablesD "!C% and (5J% 5ath for accessing filesD /usr/sap/S$!/S4S/global Eob schedulingD !aily (#ith ariants) )ecommended job nameD S(5H)*0):H"(/C9$356/ )untime Statistics for "ackground Eobs 5rogramD )S"5S/!* )e1organi,ed tablesD "/CES/(/% 5ath for accessing filesD 3ot specified

Eob schedulingD 'eekly (#ith ariants) )ecommended job nameD S(5H)*0):HE0"S/(/$S/$C

Ques'ion #.ou' -o i$e Check

Wh#''s -o* i$e Check5 Who's res)onsi.le /or -o* i$e Check5 Wh#' shoul( we )re)#re .e/ore -o* i$e Check5 6ow m#ny 'imes /or -o* i$e Check57I me#n 'h#' -o* i$e Check se)er#'e in'o how m#ny s'e)s8'y)es such #s 3 'imes /or % Mon'h .e/ore -o* i$e9 ! Weeks .e/ore -o* i$e #n( ! Weeks #/'er -o* i$e e'c.: Wh#''s recommen( sche(ule /or e#ch 'ime5 6ow c#n we )rocee( -o* i$e Check5 4ou ha e to open a message in component ==1S*)1/CC to find out if your installation is scheduled for a :o12i e check #hich is conducted by S(5 and itKs partners. :o12i e ;unctional 6pgrade (nalysis L ideally - months before :oli e L basically checks your hard#are re+uirement < #ill it be able to accommodate the increase in the functionalities caused by the :o12i e< also some parameter recommendations to fine1 tune your system. :o12i e ;unctional 6pgrade 8erification L /his is normally & months after the :o1li e #hich is to see eKthing is fine after the upgrade. /hen you ha e normal *arly#atch session < each installation is entitled for & free early#atch session in a year< in this performance tuning is done for your system< hard#are<memory< $/0 bottlenecks are identified. )eports of all these sessions carried out by S(5 is then sent to you in form a MS1'ord document and you can follo# the guidelines mentioned and call up S(5 or mail the person #ho has done the session for you for any clarifications. 6sually once a session is scheduled. S(5 #ill contact you to open the connections for them< so that they can prepare the system before the actual session takes place < in #hich they see < if S!CC ersion is good enough so that they can do#nload the data from your system into their internal system on #hich they carry out the analysis< see if S(50SC02 is running and enough history data is there in S/0Cn for them to carry out reasonable analysis. $f eKthing is set a do#nload is scheduled on your system using S!CC for a day prior to the actual session < and on the day of the session you open the connections for them again and pro ide them #ith userid and pass#ord normally it is early#atch in 0-- client.

Per/orm # Consis'ency Check #n( Cle#n 2emse +irec'ory

I'm h#$ing )ro.lems wi'h 'he S2MS on 'he +e$elo)men' ,o;9 /rom 'he look o/ 'hings I nee( 'o cle#n 'he 'emse (irec'ory. Wh#' sough' o/ rou'ine c#n I )er/orm #s cle#n u) rou'ine reg#r(ing 'he s#me. S'e$e 1111111111111111111111111111111111111111111111111111 /his is the procedure clear and test the consistency of temse objects in case of C.A$. So first e>cecute S5(!< #here click on the consistency check button. 1 this #ill display a list of objects. check to see the #hether objects other than current day is displayed. 1 then go S5A&< here click on temse database button< #here there is again consistency check. 1 after the consistency checks are o er< click on temsedatabase button< select reorganisation< 1 here select the radio button that sho#s ?delete all objects older than?. 9ere enter the alue and click on tick mark. 1 this #ill display the number of objects. then delete it. /hatMs all the procedure.

,#sis in'er$iew <ues'ions

Ask him8her 'o (escri.e how SAP h#n(les Memory M#n#gemen'5 S/0& / S/0C $n general ia table buffers< you could go into the #hole 'ork 5rocess< roll in< roll out< heap (pri ate) memory< etc. ho#e er just as a 6ni> or !"( admin #ould kno#< is you look this up #hen needed for the e>act specifics. Ask him8her 'o (escri.e where 'hey woul( look #' 'he .u//er s'#'is'ics9 #n( wh#' s'e)s 'hey woul( use 'o #(4us' 'hem5 S/0&< )NA0

Ask him8her 'o (escri.e how 'o se'u) # )rin'er in SAP or where 'hey woul( look 'o rese#rch why # user8users c#n no' )rin'5 S5(!< S50A< SM50< S60A OOOOOOOOOOOOOO =ee) 'he in'er$iew 'o 3 gener#l #re#s3 !" (#hat is the directory structure/ #here are the files kept oracle alerts< init.ora< redo logs< archi e logs< etc.P possibly some basics stuff like #hat to do ?high le el? #hen the archi e directory fills up< etc. 7eep this minimal as from a S(5 basis admin point of ie# 0racle is just a big giant bit bucket and S(5 can handle to the daily monitoring and maintenance itself. 0S (#hat is the directory structure (#hat is 3;S mounted and #hy / #here are the message files contained for the 0S error logP basic commands for the 0S eg. 6ni>< m < cp< ls< grep< ps1ef< df1k< etc. /hat is pretty much all the S(5 basis admin #ill need to kno#. Client/Ser er architecture. S(5 (#hat is the directory structure / #here are files located ie. profiles 1 start< instance< default (#hat are they and #hat is the order of precendence) start is for statup only< instance is the first to be read then the default and if a gi en parameter cannot be found in the instance or then the default then the internal standard is taken from )NA0 setting. 4ou can ask them to ran /ransaction codes to you. Menus constanly change so go #ith /1codes. 9e should ha e a good kno#ledge of the follo#ing areasP transports< user / print / spool / batch management< monitoring< client tools and copies< support packages< kernel patches< #orkload analysis< )oles and Security< etc. /he standard list of t1codes is pretty much SM50< SM5A< SM--< SMA&< SMAC< SM&A< !"0A< !"0&< !"AC< S/0A< S/0&< S/0C< S/0I< S/05< S/0-< S60A< S6$M< 5;C:< SCCI< S*0A< S*0Q< S*A0< S5(M< SMC5< SMC-< SMC@< S5(!< S50A SCCC< SCC2< SCCQ this are pretty much you hea y hitters for monitoring and support. $ #ould ask in general ho# he #ould troubleshoot the follo#ingD 1 6ser cannot connect to S(5 check S(5 logon settings< ping the host< check message ser er< check dispatcher< etc. 1 6ser cannot print

check S(5 user setup< check S5(!< check spools< check uni> +ueue or print +ueue at the os le el< etc 1 System seems slo# check SM--< SM5A< SM50< SM&A< S/0-< S/0C< SM2:< (20B etc. Some important things to remember is to ask not get specific to your installation or specific system setup as all S(5 instances are different< keep your +uestion to general topics and general ans#ers. /he most important thing to notice #hen choosing a candidate is not ho# they parrot back ans#ers to you< but if they can a) think for themsel es and b) they actually like to and #ill keep on learning as no one kno#s it all and c) they ha e a good background and #illingness to perform analyis and #ill keep on digginging until the ans#er is found or until their resources are e>hausted and then they #ill pull in #hat is re+uired to figure it out. SAP Au'hori>#'ion9 Pro/iles9 A((ress /he )/C authori,ation concepts permits the assignment of general or finely detailed user authori,ations. /hese assignments can reach do#n to the transaction< field and field alue le el. /hese authori,ations are centrally administered in user master records and most allo# the handling of certain )/C components applicable to specific operations. (ctions by a user may re+uired se eral authori,ations. ;or e>ample< to change a material master record< authori,ations are re+uired for the D

/ransaction change Specific material :eneral authori,ation to #ork #ithin the company code

RS?SR"%" 1 /ransaction 2ists (ccording to Selection 'ith 6ser< 5rofile or 0bject. 2ist of /ransaction codes of the user. RS?SR""@ 1 2ist 6sers 'hose (ddress !ata is $ncomplete /he program check for space in the address data field. /o print the #hole list< tick a field #hich is al#ays space. (e.g. )oom 3o.) Version 4.6; RS?SR""!AA++RBSS 1 6sers by address data

$n I.-> you used )ole for each users and S(5 #ill generate the necessary profiles and authori,ations. P0C- 1 "asic Maintenance /ype in a meaningful N=== role name and click Create Menu 1G /ransaction (insert all the transaction code for this role) (uthori,ation 1G Change authori,ation data 1G :enerate Wh#' is 2r#ns#c'ion RC%"* B(i' Pro/iles5 $f you #ant to change things like the default Client 000 to QQQ< rdisp/ma>H#prunHtime (dialog abap program runtime 1 standard O C00 seconds).

choose the instance profile click *>tended maintenance click the display or change button look for this parameter name login/systemHclient !ialog5rocessor 6pdate5rocessor 6pdate & 5rocessor *n+uiry 5rocessor "ackground5rocessor Spool 5rocessor

Work Processor D1 rdisp/#pHnoHdia rdisp/#pHnoH b rdisp/#pHnoH b& rdisp/#pHnoHen+ rdisp/#pHnoHbtc rdisp/#pHnoHspo

?sers #u'hori>#'ions8)ro/iles * /or m#n#gemen' re)or'ing

Wh#' e;#c'ly in/orm#'ion (oes 'he m#n#gemen' w#n'5 /here are a fe# approaches you can take. S(5 Eob !escriptionD ;or each job (highest le el role. composite< etc) #e ha e a description that describes in "usiness Speak #hat that job allo#s a user to do. $t a oids as much S(5 jargon as possible. (ny person from the business could look at the description and get a picture of #hat that person should be doing on S(5. /his is #hat gets signed off at the highest le el and it is the security< functional and internal audit guys that are responsible to ensure that the role meets this spec. /ransaction "reakdo#nD ;or $nternal (udit Management the job is broken do#n into itMs constituent transactions and $nternal (udit (and usually ;unctional /eam) #ill look at this at a high le el to ascertain that the re+uired functionality is being met by

transactional access. 'here sensiti e transactions are identified the granular breakdo#n is used. :ranular "reakdo#nD /his is the le el at #hich restrictions are reported. $t is here that object le el restrictions are documented. (ny transactions that are deemed sensiti e #ill ha e information pertaining to the restrictions included here. $n 5ractice this is all contained #ithin one document< any changes to the roles are contained #ithin this document. ( point to make is that by listing transactions to your management team< you #ill not gi e them an accurate indication of users access by gi ing them a list of transactionsR $f you #ant to get lists of transactions you can use the follo#ing tables. (:)H6S*)S (:)H/C0!*S (:)HA&5& (2ists 0rg 2e els) (:)HA&5A 1111111111111111111111111111111111111111111111111111111 Commen's on Au'horis#'ion conce)' (bo e all 7**5 $/ S$M52*RRRRRR Composites are 30/ simple. they re+uire a lot more time to discren #hat is #rong and #hich piece must be fi>ed. and then you ha e to test *8*)4 role the component is used in not just the set tied to the user. "ase you role on ?e erything the user must ha e to do their job?< :ranted some user ha e more that one job< but a ?8endor $n oice processor? should be the same all o er a centrali,ed company. ;urther< composites cause the user to load se eral redundant authori,atons #hich slo#s logon time< re+uire you to ha e a bigger machine than needed< and the list goes on. $t #ould be best you could go one step further and a oid the use of composites. A) they lead to users ha ing far more than they need &) they are not suited to different sites #hich ha e big differences in the number of employees but still need to do the same roles 1 eg in a larger company usersM roles are much smaller and ice1 ersa C) they are a pain to maintain I) they do not bring great enough benefits

4ou #ill reali,ed these things after using and maintaining composites for some period of time. $f you ha e used composites< get rid it. 4ouMll ne er missed themR

Au'hori>#'ion 'o only (is)l#y cus'omi>ing 7SPRD:

Anyone c#n #($ise on wh#' )ro/ile or role I shoul( #ssign 'o my consul'#n's9 /or 'hem 'o (is)l#y 'he cus'omi>ing in )ro(uc'ion5 OOO A. /here are no S(51roles for customi,ing (update or display). &. 4ou can create a customi,ing role in 5;C:D in the menu tab utilities/customi,ing authP you can use a project $M: (maintainable in S5)0) to restrict the authori,ations for e>ample to ;$ or C0. (s the roles can get pretty big it is +uite a lot of #ork to check the generated authori,ations and to limit them if necessary (e.g. only display) and to delete authori,ations #hich certain users (e.g. consultants) do not need. /his is especially important if they ha e other roles #hich in combination may allo# ?un#anted access? to certain things. 'hat is basically necessary for customi,ing display is SMC0< SH/("6H!$S for the rele ant authori,ation groups (acti ity 0C) plus if you #ant to read the tables out of the $M: the rele ant SH/C0!*1authori,ations. (dditionally many transactions re+uire arious other authori,ation objects (#hich are generated out of S6&I 1 #hich is not ?A00. accurate? as S(5 states). OOO 'e use ersion C.A. but there is no posting in any #eb site suitable for creating $M: (ll display only profile for 8er C.A Can any one please share there kno#ledge. OOO /he C.A ersion $ belei e is a different structure than the higher ersions so $ am not sure the C6S/H(C/0"E table e>ists. 4ou #ill ha e to debut the $M: to find the source #here the tcodes are housed. /here are M(34 transactions associated #ith the $M: and SH/("6H!$S is only a part. 8ersion C.i is 8*)4 difficult to use to get S6&I to load the role so you can make a display $M:. $t #ould be simplet to copy S(5H(22 and change the acti ities to M0CM.

OOO "ut e en in S(5H(22 the customi,ing for $M: (SH$M:H(C/8) object alue is only ha ing Change or nothing..RR /here is no option to display... their are fe# more objects like this. $f $ dont ha e any alue selected< the profile is not be effecti e. 3othing can be done. (ny more suggestions.. OOO (nd SH$M:H(C/8 means ery little. 4ou can configure #ith or #ithout it and since configuration is tcode dri en and accessable any#here in the system. 4ou ha e to gi e SH$M:H(C/8 M0&M< it means little OOO $ belei e you need SH$M:H:*3* to actually change the config. 'e ha e t#o roles (I.-C) ... one for display only and one for changing. OOO Create f.e> a role ?C6S/0M$N$3:? and run the follo#ing ("(5. $t #ill bring to your role all S5)0 tarnsactions. /hen go through the auth objects and change them display only. /his #ay youMll ha e a display only role. )*50)/ N/C0!*S . tablesD cusHactobj< agrHtcodes. dataD ica like cusHactobj occurs A000 #ith header line< iagrtc like agrHtcodes occurs I000 #ith header line. select % from cusHactobj into table ica. sort ica by tcode. delete adjacent duplicates from ica comparing tcode. iagrtc1agrHname O MC6S/0M$N$3:M. iagrtc1/45* O M/)M. iagrtc1direct O M=M. loop at ica. iagrtc1tcode O ica1tcode. append iagrtc. endloop. modify agrHtcodes from table iagrtc. 3ote< there is another table cusHacth as #ell that you load into your internal table and you need to add a sort tcodes and delete adjacent duplicated. then load to your role. Ques'ion 3 Su.4ec' 3 Clien' Co)y wi'h only user m#s'er #n( roles 9i 'e are on I.-C and our J( and 5roduction clients are on the same system. 'e create all the roles on the J( client to test.(ll the users are setup on both clients #ith the e>ception of a fe#. "efore :oing 2i e $ #ant to copy the entire use master records and roles and their

assignments to the 5roduction Client. $ #ant to kno# if my e>isting users and roles in 5roduction #ill be deleted #ith the client copy of users master and rolesSS 9ope someone can shed light on this for me because $ check some documentation but itMs not clear for me. Re)ly 3 Su.4ec' 3 Clien' Co)y wi'h only user m#s'er #n( roles 4es< they #ill be deleted. Re)ly 3 Su.4ec' 3 Clien' Co)y wi'h only user m#s'er #n( roles 9i< $ think it #ill be deleted. Re)ly 3 Su.4ec' 3 Clien' Co)y wi'h only user m#s'er #n( roles 9i all < 5lease take a look to the diferents profiles you can use in the copy client. $ send you all the options that you ha e < for further needs. !ata classes in the copy profilesD o Customi,ing (ll profiles< #ith the e>ception of S(5H6S)/S(5H6S*) contain Customi,ing. Customi,ing data is generally in tables of the deli ery classes C< :< * and S. o Client1independent Customi,ing bet#een t#o systems Client1independent Customi,ing can only be transported ia *>port/$mport. ;or this< a profile must be created #ith the corresponding option in the customer name space until )elease C.A$. (s of )elease I.0< the follo#ing profiles are deli ered for thisD S(5H*="C< S(5H*=5( and S(5H*=5C. $n addition to some special selections< the client1independent customi,ing tables (deli ery classes C< :< *< and S) that are not contained in the e>ception list for system tables are copied. ;or "asis tables (de elopment class starts #ith MSM)< the e>istence of a customi,ing object is checked in addition (/ransaction S0"E) to make sure that those contain customi,ing that may be transported and no system settings. 3oteD Client1independent customi,ing must only be copied to create a ne# system. Client1

independent data and thus all clients in the target system are affected by this and can be destroyedR o 6ser master data 6ser master data is only deleted in the target system if a profile is copied #ith user master data. 5rior to )elease I.5"< ho#e er< the user addresses are lost #hen copying customi,ing #ithout application data. ;or transports< this restriction still applies. (uthori,ation profiles belong to Customi,ing and therefore< they are al#ays copied #ith this. Copying users #ithout user profiles #ould be problematic. /herefore< the copy profile S(5H6S) or S(5H6S*) additionally contains authori,ation profiles. ( separate source client for the user data can be entered #ith a local copy or #ith an e>port. $n )eleases I.0" to I.-! the users are copied #ith each copy including user data. $f this is not #anted you must store the user prior to the copy #ith profile S(5H6S*) to another client and retransfer it after the copy. o (pplication data (master T transaction data) (pplication data is dependent upon Customi,ing data. /herefore< the data can only e>ist consistently together #ith it. (pplication data is al#ays deleted in target clients< #ith the e>ception of a copy #ith S(5H6S) or S(5H6S*). (pplication data is generally in tables of deli ery class (. $f you #ant to mi> the application data #ith the Customi,ing data of another client for test purposes< import the corresponding Customi,ing transports in the target client. $f you 1 in e>tremely e>ceptional cases 1 #ant to reach this goal ia the client copy tools< then refer to 3ote AQ5@I< #hich contains additional information. 9o#e er< S(5 e>pressi ely notes that no support is gi en for any of the problems and inconsistencies occuring #ith the e>ecution. (s of )elease I.5 a copy of the customi,ing #ithout resetting the application data is not possible. $n )eleases I.0" to I.-! the users are al#ays copied for each copy including application data. !etailed information can be found in the user master data. o System ariants and user1defined ariants /he copy profile S(5H6S) or S(5H6S*) does not contain any ariants. 1 )elease C.0D 8ariants are only copied if a copy profile ordered by the user contains this option. /he profile S(5H(22< #hich contains ariants< is only deli ered as of )elease C.0;. 1 (s from )elease C.AD (ll deli ered profiles contain ariants. 1 (s from )elease I.0D /he tool can no# handle system ariants and user defined ariants seperately. $f a copy profile does not contain the

option M'ith ariantsM< the system ariants are ne ertheless copied. 9o#e er< the user defined ariants are only copied if the option to do so #as selected. 3e ertheless< ia a deli ery error< all profiles recei e the option M'ith ariantsM. 1 (s from )elease I.5D 'ith periodic planning< no ariants are copied. S(5H(552< S(5HC6S/ and S(5H6C6S do not contain any more user1defined ariants. 1 (s from )elease I.-(D (lso S(5H6(55 contains no more user1defined ariants. o (cti ity groups (cti ity groups are copied togehter #ith the Customi,ing. 0nly as of )elease I.5 they are also copied #ith the S(5H6S*) profile. $n a former release< they must be transported< in this case< #ith the help of the report M)9M08*C0M. Copy profiles deli ered by S(5D (s of )elease I.0< S(5 only supports these profiles deli ered by S(5. o S(5H(22 (as of )elease C.0;) (ll client1dependent data o S(5H6S) (as of I.0 S(5H6S*)) 6ser master data and authori,ation profiles o S(5HC6S/ Customi,ing 1 application data is deleted o S(5H6C6S Customi,ing and user data 1 application data is deleted o S(5H(552 Customi,ing data and application data ( because of changed user address assignments as of )elease I.0 to I.-!< including the user data< #hich corresponds the profile S(5H(22 #ithout user defined ariant) o S(5H6(55 Corresponds to S(5H(22 and is omitted after )elease I.-!. /he follo#ing profiles #ill be deli ered additionally as of )elease I.0 (SCCB only) in order to be able to copy client1independent Customi,ing data bet#een t#o systemsD o S(5H*="C Customi,ing including client1independent customi,ing and user data o S(5H*=5( (ll client1dependent data and client1independent Customi,ing (as of )elease I.5 #ithout change documents) o S(5H*=5C Customi,ing including client1independent Customi,ing (s of )elease I.0< the follo#ing profiles are additionally deli ered< #hich contain the user defined ariants (see abo e)D o S(5HC6S8

corresponds to S(5HC6S/ #ith a ariant flag o S(5H6CS8 corresponds to S(5H6C6S #ith a ariant flag (s of )elease I.5" there is a specific profile to restore a client o S(5H)*C0 Specific copy profile (for remote copies and transports) #hich contains change documents< system tables (deli ery class M'M 1 e.g. the Central 6ser (dministration (C6())< and local tables (deli ery class M2M) in addition to S(5H(22. /he profile may only be used to restore a client #hich #as accidentally deleted. /he number of the source and target client and the system settings (for e>ample< printer< etc.) should correspond. Re)ly 3 Su.4ec' 3 Clien' Co)y wi'h only user m#s'er #n( roles /hanks 3uria< but $ still ha e a +ustion. $f $ ha e a fe# users on the 5roduction client and $ copy the user master and roles #ith the Copy 5rofiles S(5H6S) from J(< 'ill it o er#rite those fe# usersS "asically #hat $ am asking is D !oes a client copy of user master and profiles/roles delete the target user master and profiesl/roles before doing the copy or transportS Re)ly 3 Su.4ec' 3 Clien' Co)y wi'h only user m#s'er #n( roles 4es< it doesn delete all of that in the target client before it does the copy. (ll copies do regardless. 3o#< #hat you need to do in order to keep your target ?roles and user master date? is that before the main copy< A1 make a dummy client in sccI &1 do a client copy using S(5H6S*) from your source client to this dummy client C1 start your main client copy I1 do another client copy e>cept this one is from the dummy to the source using S(5H6S*) /his #ill get e erything you #ant and your roles/master data is intact. 9ope this helps. let me kno# if need more detail

Clien' Co)y /rom Pro(uc'ion 'o Qu#li'y Ser$er

2i)s .y3 6ris'o 6ris'o$ $t depend on system si,e and a ailable time. ;or small system you can do remote client copy. (nother option is to make client e>port on 5)! system< then client import in Juality system.

;or the large system is not any other #ay 1 just do system copy. $n fe# #ordsD make backup< remo e Juality system from transport system and from C6(< resore on Juality system< re1create control files 1 to change the S$!( 0racle)< startup !"< se eral post1copy steps. 9ere is plan that i follo# D :enerally L follo# note AI@&IC. /he difference in this procedure is that !" 2oad is not interrupted as is proposed in the note< but $ #ait for the initial installation to fully complete and then do the ne>t steps. A. (djust memory parameters (0racle< S(5) and page file of source system. $f necessary adjust also number of #ork processes. /his step is optional. Most often it is not done< instead of it the adjustments of the profiles are done later in the target system. &. /race the control file ControlFS$!G.s+l of source system L note AI@&IC C. (djust created control file as for the target system L note AI@&IC I. Create ne# user #ith admin rights (put this user in 0)(H!"( group) 5. 2ogon as this user (local/domain) and perform a ne# installation as per inst. guide -. !o this only if this is a second S(5 instance installed on the same hostD See note 5@-QAQ (0ra1A&505). 0racle listener is changed during the installation. (djust listener.ora 1 if system fails on !"C033*C//*S/ step (can occur if you install more than one instance on the same host)< check if en ironment ariable 2ocal is defined. $f it is< it should ha e the correct alue for the S$! and it must be defined as 6ser ariable< not as System ariable. (lso restart the computer. /hen start the database of the ne# S$!. 1 /erminal ser ices also can impact this error L note IIA5AB. 3ote 55-&C& e>plains the en ironment settings. 1 $f error occurs on !$5:3/("H3/ see note A-&&-- and especially note I00&IA (ora1 AI0C or ora A0A@) @. 5atch 0racle of the target system< if necessary (to ha e the same patch le el as in the source system) B. 6pdate 7ernel of /arget system (use the ne#est kernel a ailable) Q. Stop 0racle FS$!G Ser ice A0. !elete on /arget system F!)$8*GDU0)(C2*UFS$!G (0nline redo log directories must stay< just the files in them ha e to be deleted). )edo log directories must be on the same dri es as they are on the Source system (because 0nline )edo logs are recreated by the ControlFS$!G.SJ2). 0ther#ise adjust appropriate the traced control file from the sourse system AA. Copy or restore F!)$8*GDU0)(C2*UFS$!G (S(5!(/( A1-) from Source to the target system. A&. !elete all copied in pre ious step Control files on the /arget system R AC. Copy 0racle initFS$!G.ora < .sap < .dba from source system and adjust them to the situation in /arget system (FS$!G< paths< etc) AI. (djust S(5 profiles to the status of /arget system (memory parameters< number of #orkprocesses< language parametrs< etc.)

A5. Start 0racle Ser ices A-. Modify ControlFS$!G.s+l as per :uide (3ote AI@&IC) A@. !atabase must be do#n. *>ecute ControlFS$!G.s+l . /his must recreate the control file and open that database AB. Start !"< Start S(5 AQ. $f the system does not start< delete old 05SV user and create it again (3ote 500BB) L only for )/C I.-C 0nly for "' (or system based on '(S -.&0)D 1 6se note -5Q50Q in combination #ith I00&IA. 6se the ne#est oradbusr.s+l script to create ne# 05SV userL it is attached to current ersion of note 500BB. Change pass#ord/o#ner of S(56S*) table as described in -5Q50Q L use old S$! for the WopsVFsapsidGadm.sapuserX and ne# S$! for WSC9*M(0'3*)XD oraFdbsidG. s+lplus /nolog G connect / as sysdba G insert into opsVFsapsidGadm.sapuser alues (MFSC9*M(0'3*)GM< MFpass#ordGM)P 1 :rant S(5!"( role to ne# 05SV userD :)(3/ C033*C/< )*S06)C* /0 W05SVF!0M($3GUFS$!G(!MXP $n the e>amples belo# $5' is the source system< :)" is the target system. 1 :i e to the user default and temporary tablespace< for e>ampleD (2/*) 6S*) ?05SV:)(/9!"AU:)"(!M? !*;(62/ /("2*S5(C* 5S(5$5'6S) /*M50)()4 /("2*S5(C* 5S(5/*M5 $!*3/$;$*! *=/*)3(224P 1 :rant the necessary roles to ne# S(5FS$!G user< for e>ampleD :)(3/ C033*C/< )*S06)C*< S*2*C/HC(/(20:H)02* /0 S(5:)"P 1 (pply note 5CI@-5 to change dbsHoraHschema en ironment to the old S$! (S$! #hich o#ns S(5 tables in the schema) 1 Create 05SVS(5Ser ice user (e>ample)D create user ?05SV:)(/9!"AUS(5S*)8$C*:)"? !*;(62/ /("2*S5(C* S4S/*M /*M50)()4 /("2*S5(C* S4S/*M $!*3/$;$*! *=/*)3(224P 1 :rant necessary rights to 05SVS(5Ser ice userD :)(3/ C033*C/< )*S06)C*< S(5!"( /0 ?05SV:)(/9!"AUS(5S*)8$C*:)"?P 1 Create the synonymD C)*(/* S43034M ?05SV:)(/9!"AUS(5S*)8$C*:)"?.S(56S*) ;0) ?05SVS(5"'U$5'(!M?.S(56S*)P 1 :rant select update onto the S(56S*) table for S(5Ser ice userD :)(3/ S*2*C/< 65!(/* 03 ?05SVS(5"'U$5'(!M?.S(56S*) /0 ?05SV:)(/9!"AUS(5S*)8$C*:)"XP 1 !rop the old synonymD !)05 S43034M ?05SVS(5"'US(5S*)8$C*$5'?.S(56S*)P 1 Start S(5 system.

&0. $f the system does not start yet< apply note BA@Q &A. 5ost $mplementation steps /hese steps are deri ed from 9omogeneous copy guide< section Wpost copy acti itiesX 1 !elete all irrele ant in SM5Q 1 !elete old C6( settings< if e>ists (SC6(< "!-I) 1 S5(! L adjust printers 1 !elete entries in tablesD s+lplus connect saprC/sapP delete from !"S/(/90)(P delete from !"S/($90)(P delete from !"S/(/$0)(P delete from !"S/(//0)(P delete from M03$P delete from 5(9$P delete from 0SM03P delete from !"S35P delete from S!"(9P delete from S!"(!P delete from S!"(5P delete from S!"()P delete from !!20:P delete from /5;*/P delete from /5;9/P delete from /20C7P commitP e>itP ;or systems based on '(S -.&0 check in 9omogeneous Copy :uide for the tables< #hich entries must be deleted. 1 !elete all unnecessary in SMC@ 1 *>ecute S$C7< SM&B ($nstallation check) 1 S*0- (Choose !" Copy) Start transaction S*0- and choose Y!atabase copy or migrationK. Click no# the button 5rocessing after installation Z*>ecute[. (ccept the gi en source system. S(5 #ill no# ask if the originals ha e to changed from source system name to target system name. 0nly ans#er this +uestion #ith yes if this installation doesnKt stay #ithin the same landscape. 1 S*CB 1G e>ecute report )S"/C!*2 (mark field delete #ith force mode). /his deletes old batch jobs by your criteria 1 S5A& L /empse Consistency 1 *>ecute !"0& 1 Configure S/MS

1 )NA0 L import ne# profiles 1 S*-A L adapt the logon te>t 1 (dapt the picture after logon 1 !elete unnecessary clients 1 $mport necessary re+uests 1 (dd the system C6( S 1 $nstall !ocumentation (dditional steps for "' only L follo# closely note ABI@5I a) $n the target "'< change the contents of field ?target host? in all );C connections (destinations) for )/C and !ataMart source systems (/ransaction SM5Q) to a nonsensical< none>istent address (such as Mno#hereM). /hen delete (22 )/C and !ataMart source systems in the (dministrator 'orkbench source system tree. CautionD /his step deletes all 5S( tables of these source systems 1 the data are lostR ( message is generated stating that the source system cannot be accessed (since you deleted the host of the );C connection). Select ?$gnore?. Confirm on the re+uest< until all transfer structures are not deleted L track this on W/ransfer structureX. /his operation deletes the transfer structures and transfer rules for the affected sourse systems. $t asks also if you #ant to delete );C destinations and 2ogical systems of the source systems (S(2*). WMySelfX 2ogical system (based on old FS$!G) can not be deleted. )elease the re+uest created during this procedure. b) !0 30/ create ne# 2ogical system (e.g. :):)"I00). $n "!2S step this #ill be done automatically by the report )"!2SM(5 c) ;ollo# note A&AA-C d) "efore running "!2S< adapt )022"(C7 segments (if necessary) Ques'ion 3 Su.4ec' 3 Co)y '#.le con'en's 9i< 'hat is the transaction to copy table contents from one client to anotherS $f there any other #ay to accomplish the copyS /hanks Re)ly 3 Su.4ec' 3 Co)y '#.le con'en's $ think is this oneD SCC2 Re)ly 3 Su.4ec' 3 Co)y '#.le con'en's

See 3ote 000AQI& . 4ou can do it at 0S 2e el. A) :enerate a control fileD clientcopy source client ... target client ... select % from yyy \ for indi idual tables &) )Ctrans 1# F2og fileG 1u A Fcontrol fileG 7ind regards< Re)ly 3 Su.4ec' 3 Co)y '#.le con'en's 9i< 6se the follo#ing procedure to copy table contents bet#een t#o clientsD (fter erifying the client copy log< due to some storage probslems in table M0;;< this table could not be completely copied. /o a oid ha ing to perform the #hole client copy process< just hte entries on table M0;; from the source client #ill be copied to the table M0;; on the target client 0A0 in thte target system /A&. A. $n the source system (CA&)< create a control file< for e>ample< e>pmoff.ctrl #ith the follo#ing contentsD e>port client select % from moff #here mandt O M00&?. &. )un the )Ctrans utility #ith the pre ious control fileD )Ctrans 1# e>pmoff.log 1u AB e>pmoff.ctrl /he 1# flag indicates the log file< the 1u flag sets unconditional modes for the transport. $n the e>port phonase< unconditional mode A indicates the system to ignore the #rong status of transport re+uests. Mode B allo#s direct selection of tables #hen the default modes are not allo#ed. "y default< the pre ious command generates the data file trans.dat in the directory #here the e>port has been e>ecuted. $f both source and target systems share the transport directory< it #ont be necessary to copy the trans.dat file. 0ther#ise you must use ftp. C. Check the e>port log file< e>pmoff.log and erify it did not contain any errors. I. 0nce in the target system< create the import control file< for e>ample impmoff.ctrl #ith the follo#ing contentD import client

5. /hen e>ecute it #ith the )Ctrans toolD )Ctrans 1# impmoff.log 1u &IB impmoff.ctrl "y default it uses the data file trans.dat generated by the pre ious commnad file. /he unconditional modes used in the import phase are D & for enabling the o er#riting of the original< I #hich ignores that the transport re+uest #as intended for a different target system< and B #hich allo#s for importing tables #hich are restricted by their table types. $f you use the default options for the import< you do not need a control file. /he import can be performed directly #ith )Ctrans 1i FfileG. -. Check the import log file< impmoff.log to check that the import runs fine #ithout errors. 4ou can also log on to the target client< 0A0< in the target system and look up the table contents #ith seA-. $ hope this help. Re)ly 3 Su.4ec' 3 Co)y '#.le con'en's 4ou can also achie e this #ith a transport re+uest< 0bject /C/)./("6.F/able 3ameG and then double click and add the 7ey F/able nameG.% SAP ock Bn'ries $f there is a sudden po#er failures< some of the users update entries might still be locked. 4ou can check or release the locked entries using transaction SM%!. 4ou can check the lock entries of indi idual users or key an % at the user name to check all the users lock entries. /he lock entry list sho#s you the users #ho is locking the entry< the time #hen the lock #as initiated< the table that #as locked as #ell as the locked records. $f possible< asked the user to logoff first before deleting the locked.entries. ;or locking indi idual transactions code<used SM0A. 5utting a tick at the 2ocked columns #ill pre ent allusers from using the transactions code. /o lock indi idual user goto transactionS60A. Click the 2ock/6nlock button. /o lock multiple users ( er I.->)

S6A0 1 6ser Maintenance Mass Changes click (ddress *>ecute Select all 1G untick users you are not changing click /ransfer Select users click 2ock/6nlock 1 depending #hether you #ant to 2ock or 6nlock 7Ple#se.e c#re/ul .ec#use once you lock #ll 'he users inclu(ing yoursel/9 youwill no' .e #.le 'o ?nlock i'.:

)S6S)00- 1 2ist of 6sersMaster )ecords 2ocked !ue to $ncorrect 2ogon 2ist of all 6sers 2ocked

S*A- 1 !ata "ro#ser /able 1G 6S)0& ;ield 1G 6;2(: FG 0

$n I.->< you can used the S(5 standard lock/unlockprogram BW? =?SR ortransaction BWCE. ;or C.0>< you ha e to #rite your o#n ("(5 program. Which '#.le c#n you /in( 'he ?sers #s' ogin5 (t some point of time< you may #ant to find out #hether an user id ha e been inacti e or not. 4ou can reference to their last login date #ith the table ?SR"! 4.6; 4ou can check the users last logon to S(5 from D1 SB%6F 1 /able ?SR"! 2ast login is /)!(/ 1 2ast logon date 2/$M* 1 2ast logon time

ocke( All 'he ?sers in Dne Clien' #n( og*D//

2i)s .y3 Ari/ Ahme( I locke( #ll 'he users in one clien' #n( log*o// /rom s#). Fow9 how c#n I connec' 'o s#)5 $ ne er face the same situation but follo#ing may be a solutonD

$f the system has been locked using /5.e>e then open it #ith follo#ing steps . A. login as FS$!Gadm os user &. open a command prompt C.run follo#ing command 1G tp.e>e unlocksys FS(5S$!G pfOFtransport profileG else 4ou can connect using sap% user. ;irst Check that follo#ing parameter alues shold be A. login/noHautomaticHuserHsapstar should be 0. &. 2ogin/failedHuserHautoHunlock should be A. 4ou can check/add both parameters at 0S le el checking profiles files. )estart the system if you made any changes . /hen login into S(5 System as FS$!Gadm user and open a SJ2 prompt . *>ecute follo#ing s+l update commandD alter table sapFS$!G.usr0& set bnameOMsap%%M #here bnameOMsap%M and M(3!/OMFC2$*3/GM P commitP then you can login as FclientG <sap%<pass into your system and unlocked all user 5SD (s far as $ kno# both command #ill not harm system if e>ecuated in a proper #ay A((ing 'e;' 'o 'he SAP-?I logon8login screen 'hen the user first login to S(5< you can display some message (for e.g. unathori,ed users please logged off from the system) to them. /o create the front end login screen message< follo# this stepD ( ailable only in 4.6; A. /ransaction SB6% &. 3ame 1G C D-IFASCRBBFAIF0D C. !ocument Class 1G Choose -ener#l 2e;' Ch#nge 'he SAP ogo #n( (irec' connec'ion using SAP-?I

4.6; Ch#nge 'he #nim#'e( li''le w#'er m#rk u) in'he 'o) righ' h#n( corner. CDU5rogram ;ilesUS(5pcUS(5:6$UthemesUdefaultUsapalogo.bmp Connec'ing (irec' 'o #))lic#'ion ser$er wi'husing 'he SAP ogon 6se the 'indo#s Start 1G ;ind 1 ;ile to locate the sapgui.e>e files. Create an $con and type in the command D1 ?CDU5rogram ;ilesUS(5pcUsapguiUsapgui.e>e? /9/#))lSer$/S/sapdp00 #))lSer$ refers to your S(5 hostname 2o u)lo#( 'he 'he logo im#ge on 'he righ' h#n( si(e o/ 'he SAP screen. /ransaction codeSMW" = 1 "inary data for 'eb);C application 9it *nter Click *>ecute Click Settings 1G Maintain M$M* types Click the Create button ;ill in D1 /45* D image/gif *=/*3S$03 D .:$; Click Sa e Click "ack to the "inary data for 'eb);C Click Create ;ill in D1 D.4. n#me D N====.:$; +escri)'ion D Company 2ogo Click $mport and specify the filename #here your :$; file is located.;ile type is "$3. ;inish press the /ransfer button. $f successful< your logo #ill be sho#n in the "inary data for 'eb);C. /ransaction codeSM3" 1 /able/8ie# 1 SSMHC6S/ Click Maintain Click 3e# *ntries F#me V#lue 'o .e se' S/()/H$M(:* N====.:$; )*S$N*H$M(:* 30 2ogoff and 2ogin again Ac'i$#'e or +e#c'i$#'e 'he -uiG2 /his is possible #ith Sapgui I.-! (5atch A0C)

'ithin #indo#s there no# e>ists a file called the M)egistryM< this is #here all the information needed to control 'indo#s is held. ($t corresponds to the old '$3.$3$ and S4S.$3$ along #ith any other application $3$ files) /his file is essential to the operation of your 5C. Making changes to this file can in some circumstances result in your 5C either failing to #ork properly or not #orking at all. 9a ing said that< Click S'#r' Select Run *nter RegB(i' and click 0k ;irst< backup the registry in case you mess something up. Click 'Regis'ry'*H'B;)or' Regis'ry 0ile' *nter a file name to sa e the registry to. 0pen the folder 6=BIAC?RRBF2A?SBR and then the sub folders MSo/'w#re'9 'SAP' etc all the #ay do#n to 'SAP-?I 0ron'8SAP 0ron'en( Ser$er8A(minis'r#'ion' $f you do not see '+is#))e#rI'ems'< click 'B(i'*HFew*HS'ring V#lue' #ith a alue of '+is#))e#rI'ems' Click on this ne# key and then add the alues as suggested belo#. $f this ariable e>ists already #ith some other menu entries< you can add the ne# entry JAc'i$#'e -uiG2J at the end separated by 'K'< e.g. J-ener#'e gr#)hicKAc'i$#'e -uiG2J. Sa e e erything and e>it regedit. Click some#here in the 'indo#s #ithout any $cons and 5ress ;5 to )efresh or reboot your machine. /he user #ill then no longer be able to acti ate or to deacti ate :ui=/. $f :ui=/ should al#ays be acti e< you ha e to set the ariable ?:ui=/? in D 6=BIAC?RRBF2A?SBR8So/'w#re8SAP8SAP-?I 0ron'8SAP 0ron'en( Ser$er8Cus'omi>e9 click 'B(i'*HFew*H,in#ry V#lue' wi'h # $#lue o/ %. Au'om#'ic ins'#ll#'ions o/ SAP on e#ch ?ser PC

$f you plan to do automatic installations for your S(5 applications on each computer using the 'indo#s logon scripts. e.g. c3Lwinn'Lsys'em3!Lre)lLim)or'Lscri)'sLn'logon..#' /hereMs C command lines neededD A. $f you do ha e a :6$ I.5" or earlier already installed on the local 5C< you should run SAPSWBBP to clean up the 'indo#s registry. /he command isD GIns'#ll#'ion ser$erHLFe'ins'L SAPSWBBP 8#ll 8y 8noc#ncel 8(elsu.(irs 8(elregkeys &. /o install the :6$ use commandD LFe'ins'LS#)Se'u).e;e 8)3JP#ck#ge n#meJ 8ins'#ll 8no+i#log 8silen' C. /o automatically apply patches you ha e installed on the $nstallation ser er add the follo#ing command to your logon scriptD LFe'ins' Ls#)se'u).e;e 8In'ellimo(e 8Check+, 8)3 $n addition you need to distribute the needed $3$ files "efore you can use the sapsetup /pDpackage name < you ha e to install S(5:6$ $nstallation Ser er using sapgui installation C!< run sapsetup on dialog choose S(5:6$ installation ser er. $t #ill then create S(5:6$ $nstallation ser er and copy all the packages to the ser er. $t #ill also create a shortcut S(5(!M$3. )un S(5(!M$3 and it #ill prompt you to configure the installation ser er< and configure netinstall. (fter you ha e do that< you can also create your o#n packages using S(5(!M$3 dialog. ;rom then on#ards< you can use ne'se'u) 8)3J)#ck#gen#meJ 8ins'#ll 8in'ellimo(e on (#hich is in the installation directory) your login script. 4ou ha e to use options $ntellimode so the user donMt ha e to choose any options and if donMt #ant the user to kno# about your installation use option /silent. $f you happened ha e I-" installed< you can use ne'se'u) 8u)(#'e and it #ill update the component to I-! (an e>ample of the ne# upgrade ersion)< then you donMt ha e to uninstall the I-" installation. 6ow 'o Remo$e 'he Mul'i)le ogin /or # ?ser5 $f you #ant to pre ent user from multi login< you can put a parameter in the $nstance 5rofile to pre ent them from doing so.

4.6; /o remo e the multiple login for a single user< goto transaction RC%"11G $nstance 5rofile11G *>tended Maintenance 6se the Mlogin8(is#.leAmul'iAguiAloginM 5arameter. *nter your name as the alue. )estart your )/C and test the result. Remo$e 'he )#sswor( ch#nge o)'ion /o disable the pass#ord change option< you #ill ha e to change the Status used on that screen Status ""!" for program SAPMSIS2 done in transaction code SB4%

Some S'r#nge Pro.lems wi'h SAP ogon

$ am ha ing some strange problems in S(5 logon ...$ am using 'inQB< S(5 :6$ -&0 #ith the patch le el I&. 'hen $ tried to logon to the production ser er <it logs on and comes out immediately #ith out any #arnings.... 5ls<ad ice if any one has come across these kind of problems.<..Most of our client 5Cs are =5 based.../his is happening in 'inQB 5Cs....!o $ ha e to apply any ne# patchesSSS Some 'indo#s QB #ith particular hard#are #ill gi e this kind of problem but others hard#are are okay. 'e may a oid this by changing the graphic performance. /ry reducing the Mhard#are accelaration rateM. )ight click your desktop and go to display properties. Since iMm using #in >p so i canMt get into this e>actly as for #in QB. :o to !esktop properties 0) go to Control 5anel G !isplay G Settings G (d anced G 5erformance. )educe the hard#are acceleration le el (3one ]1111]1111] ;ull). 3ormally by default #indo#s is set at ;ull. /ry mo ing do#n the le el to none or &nd from none. *ach time you mo e the le el< a message (tips) #ill appear belo# its line. 4ou can try each le el and see #hich one is match #ith your Sap:ui graphic rate. 9opefully this could sol e the problem. 3ote 1 $f the problem still persist< #e donMt ha e much choice and need to change the Sap :6$ enjoy designed back to classic designed/light designed (old sapgui interface). 4ou

can change this by going to Control 5anel G S(5 Configuration< untick the Muse ne# isual designM. 0r perhaps you could apply the ne# patch le el I5. ?se( 2r#ns#c'ion V#ri#n's 'o m#ke your /iel(s M#n(#'ory9 6i((en or +is)l#y 4ou can hide un#anted screens and fields in any of the standard S(5 programs #ithout changing any of the standard programs. (dditional features such as making the ariant as default on the standard S(5 transaction code is only a ailable on I.->. S'e)s 3* /ransaction S6+" 1 Create a ariant for the re+uired transaction bychanging the layout through hiding fields and screens. /ransaction SB&3 1 Create a ariant transaction (e.g. for VA"! you canname it as CA"!). 3e>t allocate the transaction ariant to this arianttransaction. Create and change the N>>> area menu #ith the ne# transaction ariant. $n this #ay< the user does ha e to remembers any e>tra transaction codes. $n 4.6c< you can default your transaction ariant as the standard ariant. (S6+" 1 *dit 1G (cti ate/!eacti ate asstandard ariant) (n e>ample for using transaction ariant (restricting the field displayfor CD%%F 1 :oods mo ement) D1 $f you #ant to restrict changes to the fields in :oods mo ement forone group of users. A. Create a transaction ariant for CD%%F &. Create a ne# transction code for the transaction ariant and assign an authori,ation object to it C. !i ide the users into this t#o transaction code. /hose #ho can change the field using CD%%F. ;or those that ha e limited field change< gi e them the authori,ationfor CCD%% (this is a ne# transaction code you ha e to create). Cre#'e P#r#me'er 'r#ns#c'ion /or SM3" (ssuming that you #ant the user to maintain a table or ie# using SM3" but you do not #ant them to see the initial screen of SM3". ;or e.g. 80&C 1 Material :roup. S'e)s 'es'e( in 4.6; 3*

SB&3 1 /ype in a transaction name e.g. N80&C Click create 1 choose parameter transaction $n the Create 5arameter transaction screen< fill in the follo#ing fields D1 /ransaction SM3" /ick Skip initial screen /ick $nherit :6$ attributes F#me o/ screen /iel( 8$*'3(M* 65!(/* V#lue 80&C =

5ress ;B or click the /est button for testing. Sa e it and #ith the re+uired authori,ation< the user #ill be able to use transaction code N80&C to maintain the material group. V#ri#n's Pro'ec'ion80i; RSVARBF2 1 Cancel 8ariant 5rotection RSVAR0I2 1 (djust 8ariants to Modified Selections RSVAR+DC 1 )escue obsolete ariants RSVARVAR 1 'here1used list for ariables in ariants imi's 'he num.er o/ login sessions )er user wi'h ?ser B;i's 4.6; M 2r#ns#c'ion CMD+ *H ?'ili'eis *H SAP Bnh#ncemen's M B;i' F#me S?SR"""% M +ou.le click BGI2ASAP S?S0A""% M +ou.le click CG?SR?"% M Inser' *H inclu(e >sesschk. M M >sesschk limi's 'he num.er o/ login sessions )er user M in # cer'#in clien' M I' runs /rom user e;i' S?SR"""% #/'er 'he SAP ogin M n*% is 'he num.er o/ concurren' sessions #llowe( /("2*SD 6$3;0. !(/(D 3 /45* $ 8(26* &. ?6pper limit of login sessions !(/(D 05C0!* /45* = 8(26* &< $ /45* $< ((-0). !(/(D "*:$3 0; "!CH/("A 0CC6)S 5.

$3C26!* S/)6C/6)* "!C!(/(. !(/(D *3! 0; "!CH/("A. !(/(D "*:$3 0; 6S)H/("2 0CC6)S A0. $3C26!* S/)6C/6)* 6$3;0. !(/(D *3! 0; 6S)H/("2. % *>clude 2imit login by 6sers $; S4163(M* FG M===M (3! S4163(M* FG M===M. C(22 M/h6sr$nfoM $! M05C0!*M ;$*2! 05C0!* $! M/("M ;$*2! 6S)H/("21%S4S%. 2005 (/ 6S)H/("2. $; S4163(M* O 6S)H/("21"3(M* (3! S41M(3!/ O 6S)H/("21M(3!/. $ O $ ^ A. *3!$;. *3!2005. $; $ GO 3. ( O M4ou ha e already M. (^A@(&) O $ 1 A. (^AQ(&5) O Mlogin sessions in client M. (^II(I) O S41M(3!/. C(22 ;63C/$03 M50565H/0H$3;0)MM *=50)/$3: /$/*2 O M63S6CC*SS;62 20:$3M /=/A O ( /=/& O M4ou are not allo#ed to log inM. M08*D MS(5MSS40M /0 "!CH/("A15)0:)(M< MA&0M /0 "!CH/("A1!435)0< M=M /0 "!CH/("A1!43"*:$3. (55*3! "!CH/("A.C2*() "!CH/("A. M08*D M"!CH07C0!*M /0 "!CH/("A1;3(M< M/ne>M /0 "!CH/("A1;8(2. (55*3! "!CH/("A.C2*() "!CH/("A. C(22 /)(3S(C/$03 MSM0IM 6S$3: "!CH/("A M0!* M3M. *3!$;. *3!$;.

B#sy M#ss M#in'#in o/ (is)l#y9 locking #n( (ele'ing users

REPORT ZSU01 NO STANDARD PAGE HEADING. SELECTION-SCREEN SELECTION-SCREEN SELECTION-SCREEN SELECTION-SCREEN PARAMETERS BEGIN OF BLOCK B1 WITH FRAME. BEGIN OF LINE. COMMENT (20) COMMENT0. POSITION 56.

DISP RADIOBUTTON GROUP R1. END OF LINE. BEGIN OF LINE. COMMENT (20) COMMENT1. POSITION 56.

SELECTION-SCREEN SELECTION-SCREEN SELECTION-SCREEN SELECTION-SCREEN PARAMETERS

LOCK RADIOBUTTON GROUP R1. END OF LINE. BEGIN OF LINE. COMMENT (20) COMMENT2. POSITION 56.

SELECTION-SCREEN SELECTION-SCREEN SELECTION-SCREEN SELECTION-SCREEN PARAMETERS

DELETE RADIOBUTTON GROUP R1.

SELECTION-SCREEN END OF LINE. SELECTION-SCREEN END OF BLOCK B1. ! U"#$ %&'# ()'*% SELECTION-SCREEN BEGIN OF BLOCK B2 WITH FRAME. SELECTION-SCREEN BEGIN OF LINE. SELECTION-SCREEN COMMENT (+5) COMMENT+. SELECTION-SCREEN POSITION 56. PARAMETERS INAC RADIOBUTTON GROUP R2. END OF LINE. BEGIN OF LINE. COMMENT (+5) COMMENT,. POSITION 56.

SELECTION-SCREEN SELECTION-SCREEN SELECTION-SCREEN SELECTION-SCREEN PARAMETERS

NOLOG RADIOBUTTON GROUP R2.

SELECTION-SCREEN END OF LINE. SELECTION-SCREEN END OF BLOCK B2. ! C-.."# SAP /#$"(.) SELECTION-SCREEN BEGIN OF BLOCK B2A WITH FRAME. SELECTION-SCREEN BEGIN OF LINE. SELECTION-SCREEN COMMENT (+5) COMMENT0. SELECTION-SCREEN POSITION 56. PARAMETERS I/ER1 RADIOBUTTON GROUP R2A.

SELECTION-SCREEN END OF LINE. SELECTION-SCREEN BEGIN OF LINE. SELECTION-SCREEN COMMENT (+5) COMMENT1.

SELECTION-SCREEN POSITION 56. PARAMETERS I/ER2 RADIOBUTTON GROUP R2A.

SELECTION-SCREEN END OF LINE. SELECTION-SCREEN END OF BLOCK B2A. !--- P#$(.2 ()'*% SELECTION-SCREEN BEGIN OF BLOCK B+ WITH FRAME. SELECTION-SCREEN BEGIN OF LINE. SELECTION-SCREEN COMMENT (12) COMMENT5. SELECTION-SCREEN POSITION 16. PARAMETERS DA3S(+) T3PE N OBLIGATOR3 DEFAULT 4604.

SELECTION-SCREEN COMMENT 21(20) COMMENT6. SELECTION-SCREEN END OF LINE. SELECTION-SCREEN END OF BLOCK B+. !--- I)(%(56(7# %-# "#6#8%(.) "8$##) INITIALIZATION. COMMENT0 9 4DISPLA3 USERS WHO4. COMMENT1 9 4LOCK USERS WHO4. COMMENT2 9 4DELETE USERS WHO4. COMMENT+ 9 4LAST LOGGED IN4. COMMENT, 9 4NE/ER LOGGED IN AND WERE CREATED4. COMMENT5 9 4AT LEAST4. COMMENT6 9 4DA3S AGO4. COMMENT0 9 4,.6: (T#"%#2)4. COMMENT1 9 4+.: ().% %#"%#2)4. START-OF-SELECTION. !--- D5%5 2#865$5%(.) TABLES USR02. DATA DATA LAST;DATE T3PE D.

BEGIN OF USERS OCCURS 50< BNAME LIKE USR02-BNAME< TRDAT LIKE USR02-TRDAT< ERDAT LIKE USR02-ERDAT< UFLAG LIKE USR02-UFLAG< END OF USERS. 25%5 25%5 =#>() .? =28;%5= .88*$" 100. ()86*2# "%$*8%*$# =2825%5. #)2 .? =28;%5=.

!--- A22 S#6#8%(.) O'%(.) ?.$ U"#$ N5@#A SELECT-OPTIONS USERNAME FOR USR02-BNAME OBLIGATOR3 DEFAULT 4::N5@#B::4. !--- C568*65%# %-# 25%# LAST;DATE 9 S3-DATUM. LAST;DATE 9 LAST;DATE - DA3S. !--- F()2 %-# *"#$" %-5% ?*6?(66 %-# 8$(%#$(5" SELECT ! FROM USR02 WHERE UST3P 9 4A4 AND BNAME IN USERNAME.

IF USR02-TRDAT C9 LAST;DATE. IF USR02-TRDAT 9 4000000004 AND NOLOG 9 4D4. IF USR02-ERDAT C9 LAST;DATE. MO/E-CORRESPONDING USR02 TO USERS. APPEND USERS. ENDIF. ELSEIF USR02-TRDAT CE 4000000004 AND INAC 9 4D4. MO/E-CORRESPONDING USR02 TO USERS. APPEND USERS. ENDIF. ENDIF. ENDSELECT. !--- D#'#)2()> .) %-# 58%(.) 2("'65&< 6.8F .$ 2#6#%# IF DISP 9 4D4. WRITE G 4 USER LAST LOGIN CREATED UFLAG (1219LOCKED)4. SKIP. LOOP AT USERS. WRITE G USERS-BNAME< USERS-TRDAT< USERS-ERDAT< USERS-UFLAG. ENDLOOP. ELSEIF LOCK 9 4D4. WRITE G 4LOCKED 4. WRITE G 4 USER LAST LOGIN CREATED4. SKIP. LOOP AT USERS. WRITE G USERS-BNAME< USERS-TRDAT< USERS-ERDAT. SELECT SINGLE ! FROM USR02 WHERE BNAME 9 USERS-BNAME. USR02-UFLAG 9 41214. MODIF3 USR02. ENDLOOP. ELSE. WRITE G 4DELETED 4. WRITE G 4 USER LAST LOGIN CREATED4. SKIP. LOOP AT USERS. WRITE G USERS-BNAME< USERS-TRDAT< USERS-ERDAT. PERFORM USER;DELETE. ENDLOOP. ENDIF. !---------------------------------------------------------------------! ! FORM USER;DELETE ! !---------------------------------------------------------------------! FORM USER;DELETE. PERFORM BDC;FILL USING 4D4 4SAPMS01H4 402004. PERFORM BDC;FILL USING 4 4 4BDC;OKCODE4 4DELU4. PERFORM BDC;FILL USING 4 4 4BDC;CURSOR4

4DU200-DUSER4. PERFORM BDC;FILL USING 4 4 4DU200-DUSER4 USERS-BNAME. PERFORM BDC;FILL USING 4D4 4SAPLSPO14 40,004. PERFORM BDC;FILL USING 4 4 4BDC;OKCODE4 43ES4. PERFORM BDC;FILL USING 4D4 4SAPLSPO14 401004. PERFORM BDC;FILL USING 4 4 4BDC;OKCODE4 43ES4. PERFORM BDC;FILL USING 4D4 4SAPMS01H4 402004. PERFORM BDC;FILL USING 4 4 4BDC;OKCODE4 4BACK4. PERFORM BDC;FILL USING 4 4 4BDC;CURSOR4 4DU200-DUSER4. PERFORM BDC;FILL USING 4 4 4DU200-DUSER4 USERS-BNAME. IF I/ER1 9 4D4. 8566 %$5)"58%(.) 4OPF04 *"()> =28;%5= @.2# 4N4. ELSE. 8566 %$5)"58%(.) 4SU014 *"()> =28;%5= @.2# 4N4. ENDIF. ENDFORM. !---------------------------------------------------------------------! ! FORM BDC;FILL ! !---------------------------------------------------------------------! FORM BDC;FILL USING P1 P2 P+. 86#5$ =28;%5=. (? '1 9 4D4. =28;%5=-2&)=#>() 9 '1. =28;%5=-'$.>$5@ 9 '2. =28;%5=-2&)'$. 9 '+. I,.6: I+.:

#6"#. =28;%5=-2&)=#>() 9 '1. =28;%5=-?)5@ 9 '2. =28;%5=-?J56 9 '+. #)2(?. 5''#)2 =28;%5=. ENDFORM. !--- E)2 .? ABAP P$.>$5@