Skip to Content
avatar image
Former Member

How to Unlock users Locked during Upgrade

Hi All,

During the Upgradation there is an error to correct it we want apply the SNOTE 1053777

While trying to apply SNOTE we are not able to Log on to the SAP since Users are Locked during the Upgrade

Can Anyone tell us the Solution for How to Unlock the Users during Upgradation


Mathan A

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

4 Answers

  • Apr 26, 2013 at 06:27 AM

    Hi Mathan,

    In which phase you are there?

    If you want login to shadow istance use DDIC user in 000 client.

    create a new user with DDIC and apply note.



    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Hi Gauvrav,

      Getting error in MAIN_NEWBAS/XPRAS_UPG

      Tried in DDIC

      Able to Login but not allowed to implement the SNOTE


      Mathan A

  • Apr 26, 2013 at 06:47 AM

    Hi Mathan,

    Which upgrade phase are you in? did you try ddic to login to sap?


    Add comment
    10|10000 characters needed characters exceeded

    • Hello Mathan,

      did you try to unlock  your id using DDIC?

      $select username, user_id, account_status from dba_users;

      normally the schema user id is sapsr3 or sapr3 (in old versions) or sap(sid)

      first display the user using below sql:

      $select bname, mandt, UFLAG from sapsr3.usr02 where bname='JSINGH' and mandt=300;

      The above query will display the UFLAG value for user JSINGH.

      UFLAG value 64 means locked due by administrator and 128 means locked due to incorrect logon attempts. Unlocked user will have UFLAG value set to 0.

      Now we will set the UFLAG value of user 'JSINGH' to 0 with below sql command:

      $update sapsr3.usr02 set UFLAG=64 where bname='JSINGH' and mandt=300;


      Now try to login at SAP level, your user has been unlocked 😊


  • avatar image
    Former Member
    Apr 26, 2013 at 07:04 AM


    Please try the following .. Login as sidadm

    Unlock the SAP-system at OS level with the following commands:                                                                              

    cd /<Upgrade-directory>/bin                                           

       ..exe/tp unlocksys <SAPSID> pf=<transport profile>                    

       ..exe/tp unlock_eu <SAPSID> pf=<transport profile>   

    Thanks and Regards,


    Add comment
    10|10000 characters needed characters exceeded

  • Apr 26, 2013 at 09:13 AM


    The reason why you are not able to login is not due to the fact that the system is under upgrade.

    You WILL be able to login with the DDIC user but to do any changes to the system you will have to unlock the system from the OS level.

    If you are trying to login to the main system (not the shadow) then you need to unlock the system and modify the system change options using the tp commands:

    tp unlocksys SID pf=/usr/sap/trans/bin/TP_DOMAIN_SID.PFL

    tp unlock_eu SID pf=/usr/sap/trans/bin/TP_DOMAIN_SID.PFL

    If you want to unlock the shadow instance then you may do this from the upgrade directory

    SAPup unlockshd SID



    Add comment
    10|10000 characters needed characters exceeded