SAP System Security on Windows
The Windows security concept grants specific rights to users and groups to allow them access to administration tasks and operating system resources.
For more information, see: http:// www.microsoft.com/security
Windows distinguishes between local users and groups that exist locally on a computer, and domain users and groups that exist in a domain. A domain is a group of several computers that share a common account database, which contains all information about users and computers belonging to this domain. Domains can also be organized hierarchically, which is also known as domain tree. Within each domain, you create and administer your users and groups.
The following sections explain the security settings for an SAP system:
● Windows Groups and Users in an SAP System Environment
● Windows Operating System User Settings in an SAP System
● SAP Systems in the Windows Domain Concept
● Security Measures When Using Windows Trusted Domains
● Security Settings for SAP System Resources
● Securing Data Relevant to the SAP System
● Defining Start and Stop Permissions
● Security Settings for Shared Memory
● Security Settings for Dynamically-Created Files (Files Created by ABAP)