on 07-08-2022 9:56 AM
Hello Team,
We need details on the user password change performed by tcode - KRNL.
Dear,
the T-Code 'KRNL' is used for changes during the logon, i.e. on the logon screen. So if you see a password change with t-code=KRNL that means, that someone has changed the password on the login screen.
b.rgds,
Bernhard
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello,
have you performed a client copy recently before that date? Because it seems, that someone changed the value of USR02 w/o creating a change log entry. The actual change of the accounting number (which cannot have happened on the logon screen either) is shown as change, as the history data in ush02 differs from the actual value in usr02. So this appears as 'change'.
There is nothing to say from SU01-side, as long access 'from outside' is involved, as we have only the information created by our tools (su01), which creates proper change log entries. Any change form outside , like client copy, direct table access, external or customer coding may/will interrupt the continous flow of change log history and strange changes will appear. This is no bug but a result of the actual design of how su01-changes are recorded.
brgds,
Bernhard
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
73 | |
26 | |
10 | |
9 | |
7 | |
6 | |
4 | |
4 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.