Skip to Content
author's profile photo Former Member
Former Member

Production system mass lock/unlock select users

Hi

We have hit a major problem with our production ERP system, running ECC 5on MS Server 2003/sql2005.

We have had a DB corruption and so we are currently restoring the DB and rolling forward, but before we let users logon, we need to check the system, check data, control background jobs as we are in a landscape with XI, BW etc.

We plan to start the system after the restore, but we would like to lock it so no one can logon, apart from the basis admin, then unlock a select group of analysts to check the system and release/delete jobs as appropriate, then when all is ok, release the system to the end users.

I have set parameter rdisp/btctime=0 in the default profile, so when the ERP system starts, batch jobs will not run, so the analysts can delete what they require.

I was thinking of locking the system with a TP LOCKSYS <SID> command, so I can then logon as DDIC and lock all the other users via SU10, then release a select group of analysts to check the system, then when ok, release all the other users via SU10. The problem is as this is prod, we have lots of locked users, as we do not delete them to retain the audit trail, we just lock them, so there's 100's, so when I do a mass unlock, it will release all the users, even the ones previously locked, which we do not want.

Has anyone been in this situation before and locked/unlocked a group of select users? the systems is currently down being restored, but when its back, I will have to do this quickly so we get the system back ASAP.

Thanks for any help.

Add a comment
10|10000 characters needed characters exceeded

Related questions

2 Answers

  • Best Answer
    author's profile photo Former Member
    Former Member
    Posted on Jan 14, 2009 at 09:47 AM

    before you use su10 to 'masslock' the users, call transaction suim and navigate to

    User -> Users by complex selection criteria -> Users by complex selection criteria and select 'locked users only' (may have to scroll down a bit on that screen). Execute and save this list to excel.

    Then you can go on as you described it already and at the end, masslock the users from that excel-list again

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      What I will do is after the restore lock the Production client by running function module SCCR_LOCK_CLIENT from tcode SE37, enter the Production client no. and then execute the function module. In this way only DDIC user will be able to login. Once you have select users that need to get in run function module SCCR_UNLOCK_CLIENT and once they have logged in lock the client again.

      This procedure will have issues if you have set auto logout parameters or users logout accidently. In that case the only way would be to unlock the client. The reason why I prefer this one over mass lock and unlock is that in the past I had issues where mass unlock has unlocked users which were suppose to be locked.

      Hope this helps.

      Thanks,

      Naveed

  • author's profile photo Former Member
    Former Member
    Posted on Jan 13, 2009 at 11:26 PM

    this needs to go into admin, i put this into performance by mistake

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.