SAP System Security on Windows
The Windows security concept grant specific rights to users and groups to allow them access to administration tasks and operating system resources.
For more information, see: http:// www.microsoft.com/security
Windows distinguishes between local and users and groups that exist locally on a computer, and domain users and groups that exist in a domain. A domain is a group of several computers that share a common account database, which contains all information about users and computers belonging to this domain. Domains can also be organized hierarchically, which is also known as domain tree. Within each domain, you create and administer your users and groups.
The following sections explain how SAP systems protect their resources:
· Windows Groups and Users in an SAP System Environment
● Protecting the Operating System Users Used in an SAP System
· SAP Systems in the Windows Domain Concept
· Security Measures When Using Windows Trusted Domains
· Protecting SAP System Resources
● Protecting Data Relevant to the SAP System
● Defining Start and Stop Permissions
● Protection for Dynamically-Created Files (Files Created by ABAP)
● Setting Rights for an Installation with Several SAP Systems