SAP GUI Security setting for all users

[Former Member]

HI,

We have changed below option in SAP GUI to avoid SAP GUI security pops up.

SAP GUI ----->Options------>Security------>Security Settings ( we changed status to disabled )

Now we want to transfer this setting to all users. Could you please let us  know if there is any way to do it.

Thanks and Regards,

Arpit.

[Former Member]

Hallo,

please refer to  http://scn.sap.com/thread/1910449.

Regards,

Thomas.

[Former Member]

Hi Thomas,

Thank you.

I will do research on installer script to disable GUI script.In this case we need uninstall and install GUI with modified script. But it might be worth as we don't have central repository.

Best Regards,

Arpit

[Former Member]

BTW: we actually use an installation server. Once you have sorted out all the issues you can create an installation package. When installed the package actually also can create registry entries and put custom installation files (e.g. ini-files) into the different directories.

[Former Member]

Hi,

We can able to do this by applying Windows patch for the user's system.Please read the below note which route you the relevant patch for the SAP GUI.

Note 1703419 - Security popup shown opening files in SAP GUI tmp folder

Appreciate me if it helps.

[Former Member]

Hi Silambharasan,

Thank you. Our problem is not how to disable warning pop ups but how to make it settings for every user.

We disabled GUI security via SAP GUI ----->Options------>Security------>Security Settings ( we changed status to disabled ).

Now we want to make this setting for every user. There is way to pass this settings to every user or  user need to make it manually.

Regards,

Arpit.

[Former Member]

Hi Arpit,

Here is the way,

1. With SAP GUI 6.40, the security settings come with as Disabled and form 7.20 they introduced the custom settings for security.

2.While install the sap gui to the end user we can change the settings in registry file which was mentioned by Jude or else we will create a rule file and paste it in the user's folder.

Revert back if you need any other details and appreciate me if it is helpful.

[Former Member]

Hi Silambharasan,

1. With SAP GUI 6.40, the security settings come with as Disabled and form 7.20 they introduced the custom settings for security.

----> I agree.

2.While install the sap gui to the end user we can change the settings in registry file which was mentioned by Jude or else we will create a rule file and paste it in the user's folder.

----> End users already have entries mentioned by Jude and that did not solve warning pop ups problem. It was resolved by disabling GUI security.

Could you please explain how to create rule file to disable GUI security.

Regards,

Arpit.

[Former Member]

Hi,

For jude replies we need to change the setting in registry of the end user's system.

This can be done by go to run->regedit->and then HKEY_LOCAL_MACHINE ->Software ->SAP->SAPGUI Front->SAP Frontend Server->Security and the below entries

DWORD key SecurityLevel with a value of 0 to deactivate

DWORD key DefaultAction with a value of 0 to allow

Also gothrough the document link which will provide you a brief outline for sapgui security and saprule creation.

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/002444be-7018-2d10-e18e-a8c537198...

let me know if you need any other details and appreciate if it helps.

[Former Member]

Hi Silambharasan,

Thank you explanation.

Let  me explain my question.

1. We already did registry settings as per Jude but it did not solve our problem.

     by disabling GUI security via SAP GUI ----->Options------>Security------>Security Settings--->status ( disabled )  solved the problem.

  Also end users already have registry setting mentioned by Jude but still they get the pop ups. so we want to disable GUI security via SAP GUI ----->Options------>Security------>Security Settings--->status ( disabled )

2. I have gone through document and aware of security but not sure what could be security rule to disable GUI secuirty .

Regards,

Arpit.

[Former Member]

Hi Arpit,

Hi Arpit,

Here you go find the attached screenshot which helps to create a rules for SAPGUI. With the help of that you can able to restrict the user to perform only the selective task in SAP. Even though the settings has customized ->ask it override that property.

May i know if you change the settings as Disabled in the security settings is it working for you ( no pop ups)

Let me know if you have any queries and appreciate if it helps.

Cheers..

[Former Member]

Hi Silambharasan,

Thank you for the image.

May i know if you change the settings as Disabled in the security settings is it working for you ( no pop ups)

---> Yes. Disabling security settings is working for me.

Regards,

Arpit.

[Former Member]

Hi,

The above rules has been used for all the user and in the above screenshot if you save the file to the specific directory path it will not prompt the pop up.

Let me know if you have any queries and appreciate me if it is useful.

[jude_bradley]

Hello Arpit,

You can export the registry key settings as  a .reg file to all users.

The security guide has the registry values.

32-bit OS.

[HKEY_LOCAL_MACHINE\Software\SAP\SAPGUI Front\SAP Frontend Server\Security]

64-bit OS

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SAP\SAPGUI Front\SAP Frontend Server\Security]

Use the REG_DWORD SecurityLevel with value 0 to decativate the security settings

and REG_DWORD DefaultAction 0

Regards,

Jude

[Former Member]

Hi Jude,

Thank you reply.

Our users already have registry settings which you have mentioned. ( which is not solution for blocking pop up as we tried it )

What we did is disabled GUI security  via SAP GUI ----->Options------>Security------>Security Settings ( we changed status to disabled )

Now question is how can make it possible for every user or do we have to do this for every user manually.

Regards,

Arpit.

[jude_bradley]

The registry settings should work for all users,when exporting as a .reg file as part

of an installation process.

It can also be done post-installation by exporting the .reg file.

I have tested this on a workstation and importing the .reg file has the desired effect.

Did you try this locallly and then export the file as a .reg and import to another machine?

Jude