Skip to Content

Recreate SAPService and ADM user

May 08, 2017 at 11:12 AM


avatar image
Former Member


Hi All,

We are having a SAP IDM 8.0 system and In an effort to connect it to AD we installed the AD and created a new Domain on our remote system but that disconnected the system from original domain and moved to new one and no one was able to connect to it.

To fix the same our support team deleted the new domain and brought it back to old domain but after that we are not able to start SAP services.

When we analyzed this further we found out SAPSERVICE<SID> and <SID>adm users and groups created during installation were not there, so we recreated them manually in the system and tried running the netweawer services again but getting attached error.

SAPService<SID> , <SID>adm

SAP_<SID>_GlobalAdmin , SAP_<SID>_LocalAdmin, SAP_LocalAdmin

Appreciate if you could please suggest how can we recreate these groups and ID or if there is any option we can try


error.jpg (22.8 kB)
10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

2 Answers

Yogesh Patel
May 08, 2017 at 02:50 PM

Hello Saurabh,

You need to make sure all SAP accounts have access to SAP installation folders.

Spacially : sapmnt and saploc

Thank you


10 |10000 characters needed characters left characters exceeded
Matt Fraser
May 08, 2017 at 04:52 PM

Hi Saurabh,

The bottom line is that you need to have two domain accounts and one domain group:



Make sure both accounts are members of that group. Then, on the server, you need two local groups:

The domain group SAP_<SID>_GlobalAdmin needs to be a member of the local group. The local group needs to have full control access to the \usr\sap folder (and all subfolders and files), plus the shares sapmnt and saploc that point to that location.

The SWPM installation tool can do this automatically for you. Run the tool and choose the option for Generic Installation Options -> <Database> -> Preparations -> Operating System Users and Groups. Logon to the server as a Domain Admin and run that option.

This is described in chapter 7.3 of the SWPM guide, which you can find at


10 |10000 characters needed characters left characters exceeded