Scheduled Uploads Not Working in ERP²

Symptoms: Scheduled Upload sits at 0% and then ultimately fails.

Error: A connection to the SAP System could not be made. Please check the event viewer for more details on the error.

Cause: Beginning with SAP GUI 720 Patch Level 3, the SAP GUI security settings have changed. By default, the SAP GUI will not allow the Quadrate Execution Engine to execute uploads without modifications to the SAP Security. This is because the QEE service runs under a Windows account that has not been authorized to use the SAP GUI.

Resolution: There are several methods to correcting this error.

  1. Change the Quadrate Execution Engine to run as the Windows username that you are logged on as.
    This will give the Quadrate Execution Engine the same permissions that your Windows Username has. For this to work, the user must have already accepted the connections through the SAP GUI. When prompted in the front end, the user must choose to "Always Allow". This will create a rule for the specific connection. To do this, follow these instructions:

    • Go to the Control Panel --> Administrative Tools--> Services.
    • Locate the Quadrate Execution Engine Service in the list.
    • Right click on the Quadrate Execution Engine Service and choose Properties.
    • Click on the Log On tab. The dialog should look similar to Figure 2 below.
    • Choose the radio button This Account and then enter in you Windows Account Name.  If you are unsure of the Account Name, use the Browse button to browse for the account name.
    • Enter your Password and confirm your password and click OK.
    • Restart the Service.


    networkservice
    Figure 2 - QEE Service Properties


    OR

  2. Change the Status of the SAP GUI Security to Customized and change the Default Action to "Always Allow".
    This option will respect all security rules created but will "Allow" any new connections when a deny security rule has not been explicitly defined. Consult your security team to ensure this change does not affect any security polices already in place. To do this, follow these instructions:

    • Go to the Control Panel --> SAP GUI Configuration.
    • Expand the Security Tree Node and choose Security Settings. 
    • As shown circled in Figure 1 below, under Status, choose Customized.
    • Under Default Action, choose Allow.
    • Click OK and restart the SAP GUI.


    SAPGUIOptions
    Figure 1 - SAP GUI Options


    OR

  3. Disable Security for the SAP GUI.
    Disabling SAP Security will allow any connections to the SAP GUI. This means that potentially malicious software could also connect to the SAP GUI so this is not recommended as a permanent solution. To do this, follow these instructions:

    • Go to the Control Panel --> SAP GUI Configuration.
    • Expand the Security Tree Node and choose Security Settings.
    • In the Area Circled in Figure 1 below, under Status, choose Disabled.
    • Click OK and restart the SAP GUI.


    OR

  4. Create a custom rule for ERP²
    Ask the Administrator of the SAP GUI to create a custom rule for all connections from ERP2 to the necessary SAP systems. This is the most secure option however will require assistance from the security team that administers the SAP GUI security settings.