All posts in EasyCloud

Overview on EasyCloud cmShell for SAP

Kategorien: cmShell, EasyCloud
Kommentare deaktiviert für Overview on EasyCloud cmShell for SAP


This note shows the current available EasyCloud cmShell Function, available in current Release by February 2014.


Function-Name Description Module
Get-CmClusterNodes Get information about one or more nodes (servers)   in a failover cluster. SAP
Add-CmSapUser Create a new Sap user. SAP
Get-CmSapSM51 Returns a table with the status of the SAP   instances. SAP
Get-CmSapReportSRC Returns the source code of   the specified report. SAP
Set-CmSapTMSRequest Creates a new change request. SAP
Get-CmSapUserAuthorizationData Checks if a user has   authorization issues. SAP
Get-CmSapTMSRequestDoc Returns the current documentation of a transport   request SAP
Get-CmSapTMSObjects Returns all Object of a   specific  transport request SAP
Get-CmSapTMSList The function reads all request data for the   request. SAP
Add-CmSapTMSRequest  Appends the repository objects specified in   IT_OBJECTS into the request IV_REQ_ID. SAP
Get-CmSapTMSRequests Selects all changeable change requests from a   system. SAP
Add-CmSapTMSRequestDoc Edit the documentation of   a request SAP
Import-CmSapTMSRequest Import transport requests into a system. SAP
Release-CmSapTMSOrder Release transport Request OSWIN
Release-CmSapTMSRequest Release transport task or request SAP
Get-CmSapUserDetails Returns detail   informations of a user SAP
Get-CmSapSLDComponents Access a SLD and find a SAP system. Get information   about the installed software components and associated support packages. SAP
Get-CmSAPJobSpoolList Read spool list of a job   that has been run. SAP
Set-CmLicense Enter licensekey to activate the product. For   further information contact Other
Save-CmCluster Saves the whole failover   cluster to a configuration file. OSWIN
Move-CmClusterGroup Moves a clustered service or application from one   node to another in a failover cluster. Moving a resource group is a way of   simulating failover. It is also an appropriate step to take in preparation   for routine maintenance on a node. You can move a single group or all group   of a node. OSWIN
Restore-CmCluster Restores a single node or   the whole failover cluster from a configuration file. By default no   group/application will be restarted/shutdown. OSWIN
Start-CmSAPEvent Raising an event SAP
Set-CmSAPJobStep Creates a jobstep-list   that you can use for Set-CmSAPJob. SAP
Set-CmSAPJobPrintParameters Creates an object with print parameters that you   can use for Set-CmSAPJobStep. SAP
Set-CmSAPJobAuditLevel Use this cmdlet to   determine the global audit level for the XMISESSION log. The audit level   controls which messages are logged with sessions with the CCMS system   administration interfaces. SAP
List-CmSAPJobsWithStatus Determines the status of a list of jobs by reading   AS ABAP information on all jobs. SAP
List-CmOsInstalledUpdates Returns a list of the   installed updates. OSWIN
Get-CmSAPVariants Returns a table with the variants of specified   reports SAP
Get-CmSapTable Reading SAP database   tables SAP
Invoke-CmSE38 Runs an ABAP program. SAP
Get-CmSAPJobVariantInfo For a given ABAP the   variants are read. SAP
Get-CmSAPJobStatus Determines the status of a job by reading AS ABAP   information on the job. SAP
Get-CmSAPJobResources You can use this function   module to determine whether background work processes are available at a   particular time on any server in the AS ABAP system. SAP
Get-CmSAPJobLog Get job log (also called job protocol) for a   particular job. SAP
Get-CmSAPJobIntercepted Retrieves jobs which have   status INTERCEPTED SAP
Get-CmSAPJobChildren Get all children created by a job and return them   in an internal table. SAP
Get-CmOsPendingReboot Checks if the specified   system need to reboot. OSWIN
Cancel-CmSAPJob Abort a running job. SAP
Get-CmSapIDOC Returns data from table   ‚EDIPORT‘. SAP
Get-CmSAPHostConnect SAP
Get-CmSapFILE Returns data from table   ‚PATH‘. SAP
Get-CmSapALE Returns data from table ‚EDIPOA‘. SAP
Get-CmRZ12 Gets a list of RZ12 RFC   Server Groups. SAP
Get-CmCredfileEntries  Returns the   data of stored credentials. Other
Add-CmCredfileCredentials You can use this command   to store your credential into the credfile. The credentials will be   encrypted. Other
Remove-CmCredfileCredentials Removes the credential for the specified id Other
Set-CmSM51 Change the status of the   specified SAP instance. SAP
Set-CmRZ12 Adds a new RFC Server Group assignment. SAP
Remove-CmRZ12 Removes all assignments   from the RFC Server Group that you want to delete or from which you want to   remove an instance. SAP
List-CmSapJobServerGroup Lists the names of the SAP JobServerGroups assigned   to the specified SAP instance. SAP
Get-CmSM59 Gets a list of RFC   Connections. SAP
Get-CmSapSystemType Returns data from table ‚T000‘. SAP
Get-CmSapMAIL Returns data from table   ‚SXNODES‘. SAP
Get-CmSapInstanceInformations Loads more informations of the specified instance. SAP
Invoke-CmSapGuiScripting Load and run a recorded   SAP GUI script. SAP
Close-CmSapGuiConnect Closes the SAP GUI connection and all sessions. SAP
Get-CmSapGuiConnect Opens a connection to the   given SAP system for scripting. The Connection is opened using the assigned   credentials. As soon as a connection has been established a session is   created. SAP
Set-CmSapJobServerGroup Creates a new job background server group to manage   background job processing on a SAP system. SAP
Remove-CmSapRole The cmdlet deletes the   specified activity group assignment for user SapUserName. SAP
Remove-CmSapProfile This cmdlet deletes all of the profile assignments   of the user SapUserName. SAP
Remove-CmSapJobServerInstance Remove a SAP server   instance assignment to a jobserver group in background processing. SAP
Remove-CmSapJobServerGroup Remove a job background server group with all   assignments. SAP
Get-CmSqlConnect Initializes a new instance   of the CmSqlConnection class and returns    a (closed) connection object to the given SQL Server database. DBSQL
Invoke-CmSqlCommand You can use this Cmdlet to perform catalog   operations (for example, querying the structure of a database or creating   database objects such as tables), or to change the data in a database by   executing UPDATE, INSERT, or DELETE statements. DBSQL
Get-CmSapRole This cmdlet connects to   the SAP System and gets a list of all by the identity management provided   user. SAP
Confirm-CmSapUser The method checks that the user SapUserName exists SAP
Add-CmSapRole This method adds a user   role assignment (ActivityGroup). SAP
Add-CmSapProfile This Cmdlet adds a profile assignments for user   SapUserName in a table called PROFILES. All existing assignments will be   kept. SAP
Add-CmSapJobServerInstance Assign a SAP server   instance to an existing job server group. SAP
Start-CmSAPJob Start a job immediately. SAP
Select-CmSAPJob Select a set of jobs in   the SAP R/3 system that match the selection criteria given. By default the   username  is set to the SAP log on name   and the job name is partly specified using wildcards (*). Further more the date   to start from is set to the current date by default and all job selection   criteria (scheduled, released, ready, active, finished, canceled) except   released are chosen. SAP
Remove-CmSAPJob Delets a not running job. SAP
Set-CmSAPJob Create a new SAP   background job with on Step. SAP
Copy-CmSAPJob With this CmdLet you can copy a job definition   including all definition data, except for the start conditions. The copy has   the status ’scheduled‘. A name can be specified for the target with the   parameter target_jobname. If no name is specified, the target job has the   same name as the source job. SAP
Set-CmSMLGLogonGroup Adds a Logon Group /   Instance name assignment. SAP
Get-CmSMLGLogonGroups Gets a list of SMLG Logon Groups. SAP
Remove-CmSMLGLogonGroup Removes all assignments   from the logon group that you want to delete or from which you want to remove   an instance. Use -LogonGroup „Logon Group Name“ or set the first   parameter to „LogonGroupName“ to delete the desired log on group . Groups   will be removed by default. To remove an instance you have to use named   parameter: -InstanceName „InstanceName“ to remove the assignments   of the instance from all logon groups. SAP
Set-CmSM02 Creates a System Message SAP
TypeOf-CmSAPInstance Checks the type of the SAP   Instance, returning the SAPInstance feature list. SAP
Test-CmSAPInstance Checks the running status of the SAP Instance,   returning the SAPControl color code. SAP
Stop-CmSAPInstance Stops immediately an SAP   Instance by reference, system number or list without any further inquiries. SAP
Start-CmSAPInstance Starts an SAP Instance by reference, system number   or list. SAP
List-CmSAPInstance Returns a list of all   instances of the SAP system. features identifies the instance type (ABAP,   J2EE, GATEWAY, MESSAGESERVER, ENQUE, ICMAN, TREX, IGS, ENQREP), e.g.:   Dual-stack dialog instance: „ABAP|J2EE|GATEWAY|ICMAN“
Test-CmOsUpdates Searches for all the applicable software updates   and list them. Checks whether updates are available, returns True / False.   The optional parameter „mandatory“ limits the review to absolutely   necessary updates. If the parameter is not specified checks for updates   without restriction. OSWIN
Search-CmOsUpdates Searches for all the   applicable software updates and list them. OSWIN
Restart-CmOsUpdates Immediately performs system shutdown and restart   without any further confirmation. OSWIN
Measure-CmOsUpdates Gets the number of   applicable software updates. OSWIN
Install-CmOsUpdates Installs all previously downloaded updates   (presupposes the execution of the Get-Command). Returns a list of updates and   their installation status. By the optional parameter „reboot“ an   automatic restart after installation can be initiated if necessary. If the   parameter is not specified an automatic restart will be initiated. OSWIN
Set-CmLocalSecurityPolicy Sets user or group rights.   Manipulates rights on local or a remote computer. This function use NTRights   utility (Ntrights.exe). OSWIN
Get-CmCluster Establishes a connection between the Cluster   manager and the PowerShell. DBSQL
Close-CmCluster Closes CmCluster   connection. DBSQL
Close-CmSapConnect Close a SAP Connection explicitly. SAP
Start-CmLocalProcess Starts an application in a   new process on the local host. OSWIN
Measure-CmFreeSpace Calculates the available free spacce on a host   drive. OSWIN
Get-CmXmlValues Returns the values which   could be determined using the specified XPath-expression. OSWIN
Get-CmSapConnect The SAP Connect module establishes a connection   between the SAP instance the PowerShell. SAP
Get-CmPageFilePath Gets the location of the   Windows PageFile. The paging file is a reserved space on disk that backs up   committed physical memory on the computer. OSWIN
Get-CmOsVersion If a computer has multiple operating systems   installed, this class only returns an instance for the currently active   operating system. Version number of the operating system. OSWIN
Get-CmOSLCID Gets the locale ID of the   host.. As defined by Microsoft, a locale is either a language or a language   in combination with a country. OSWIN
Get-CmOsConnect Gets an connection object to the user account on   the remote host, returning an CmOSConnection object.  The connection objects gives you access to   the WMI of the remote computer. OSWIN
Get-CmLicenseInformation Shows details of the   entered license. OSWIN
Get-CmGroups Returns a list of group accounts. OSWIN
Disconnect-CmSAPHost Closes the connection   holded by the web service. SAP
Connect-CmSAPHost The start service offers its Web service interface   on port sapctrl<NR> (HTTP) where „<NR>“ corresponds to   the SAP instance number (00.98). If the ports are not defined in   etc/services, the default values 5<NR>13 (HTTP)  are used. The port 50013 will be used by   default if no port number was given. SAP
Compare-CmObject These overloaded operator   method perform the appropriate comparison operation, between obj1 and   obj2.Both obj1 and obj2 can be either a string (obj1s, obj2s) object or a double   (obj1d, obj2d).

Acceptable operators are:

„eq“: equal
„ne“: not equal
„lt“ : less than
„le“: less or equal
„ge“: greater or equal
„gt“: greater than

Add-CmGroupUser Adds an existing user account to an existing group   on the local host. The process must have administrative privileges. OSWIN
Measure-CmPageFileSize Gets the size of the   PageFile. The paging file is a reserved space on disk that backs up committed   physical memory on the computer. OSWIN
Measure-CmRAMSize Calculates the available RAM on the host. OSWIN
Remove-CmLocalSecurityPolicy Removes user or group   rights. Manipulates rights on local or a remote computer. This function use   NTRights utility (Ntrights.exe). OSWIN
Set-CmXmlValues Sets the specified value at all nodes which could   be determined using the specified XPath-expression. OSWIN
Start-CmProcess Starts an application in a   new process on a remote host. OSWIN
Test-CmAdminPrivilege Checks if you have Administrator rights on your   computer. OSWIN
Test-CmGroupUser Checks if the user account   is assigned to a group on a local, remote or domain user administration. OSWIN
Test-cmPowerOption Checks whether the power plan is the active plan on   the system. A power plan or scheme consists of a group of power settings and   preference information. Each power plan is identified through a unique GUID   as well as by a friendly name. OSWIN
Test-CmProcess Checks whether the   Microsoft Management Console is running on that host using an CmOsConnect   object. OSWIN

EasyCloud Report and Variant Scanner- Example

Kategorien: cmShell, EasyCloud, Knowledge Base
Kommentare deaktiviert für EasyCloud Report and Variant Scanner- Example


connmove EasyCloud offers a powerful Interface to scan SAP Reports and Variants for specific pattern.

This is very useful in case of OS/DB Migrations. Our solution scans the SAP ABAP System for Paths or Database commands and provide with a To Do List for you development Teams.

Major Features:

  • Scans one or multiple SAP Systems
  • Scans Reports and Variants for any text pattern
  • Reports the result as CSV

Attention: While scanning for Variants, please note they have a SAP Client dependency.


Download and install the cmShell for SAP Setup from Downloads.

Download the attached Script of this Note. Save the script on a Windows (Windows Server 2008 R2  or above) in a read/writeable Directory.

Edit the Script in These Sections:

Search configuration


 Search configuration
#Specify the reports which will be searched
# % - A substitute for zero or more characters
$reports= @("Z%","Y%","A%")
#Specify the terms which will be searched in the variants
# _ - A substitute for a single character
$VariantSearchList= @("USR")
#Specify the terms which will be searched in the source code
$ReportSrcSearchList= @("0") 

SAP Systems to scan


# SAP Connections


# Create new SAP connection:

# – Copy the next three comments and remove the ‚#‘

# $SAPSystems[„<InstanceName>“] = New-object -TypeName PSObject

# $con = Get-CmSapConnect -UserName <Username> -Password <Password> -Language en -Client <Client> –Host <Host> -SystemNumber <SystemNumber>

# Add-Member -InputObject $SAPSystems[„<InstanceName>“] -Name Connection -Value $con -MemberType NoteProperty

# – Specify the instance name of the SAP system in the <InstanceName>placeholders.

# – Set up the SAP Connection in the Get-CmSApConnect cmdlet.


#Create SAP connections here:

#SAP Connection Example:

$SAPSystems[„ERP_EC1_00“] = New-object -TypeName PSObject

$con = Get-CmSapConnect -UserName admin -Password ******** -Language en -Client 100 –Host ERP.REDFRUIT.CORP -SystemNumber 00

Add-Member -InputObject $SAPSystems[„ERP_EC1_00“] -Name Connection -Value $con -MemberType NoteProperty



# Create CSV file


$csvEnabled = $true

$csvDelimiter = „;“

$csvVariantsPath = „.\Variants.csv“

$csvReportsPath = „.\Reports.csv“



Note: Troubleshooting Microsoft Windows Update Client – Error 80072EE2

Kategorien: EasyCloud, Knowledge Base
Kommentare deaktiviert für Note: Troubleshooting Microsoft Windows Update Client – Error 80072EE2


While configuring WSUS Client on Windows Server for automatich updates you face error 80072EE2 in Log %windir%\windowsupdate.log


In the log you might see the WSUS Client query a external Microsoft Update site and not your local WSUS Server

Start cmd.exe and execute this three commands:

wuauclt /resetauthorization /detectnow
wuauclt /detectnow
wuauclt /reportnow

For further investigations we recommend to use this WSUS-Configuration-Check script.

Note: SAP User Authorizations for EasyCloud Cmdlets

Kategorien: Allgemein, EasyCloud, Knowledge Base
Kommentare deaktiviert für Note: SAP User Authorizations for EasyCloud Cmdlets


To use the SAP functions of the EasyCloud cmdlets, the user must have the appropriate rights. This note explain the minimum priviliges to connect EasyCloud to an SAP ABAP System.


The minimum rights to create an RFC connection to the SAP system are the following:



Determine the rights of an EasyCloud function

If the user has no rights for a function, you can determine the missing rights as follows:

  • Execute the EasyCloud function.
  • You can check if the user is missing rights by using the transactions ST01, SU53 and SM21. If there is something missing add it to the users role.
  • After you have given the rights to the user, execute the EasyCloud function again. Maybe the function needs more rights.


Example: SAP TMS

Attached to this blog post there is a SAP role template for the usage TMS and the AuthorizationData Cmdlets:

Download Template

The following Screenshot there is an example of a typical role for the usage EasyCloud.


Further Information about SAP TMS and authorization objects:

User Privilegs using EasyCloud SAP Module

Kategorien: EasyCloud, Knowledge Base
Kommentare deaktiviert für User Privilegs using EasyCloud SAP Module


You want to use EasyCloud SAP Module and need more information what kind of privileges a user must have.


EasyCloud use SAP RFC technology while connecting to a system. During the intial connection you specify an username and a password or SNC.

This user must exist in the SAP system you connect to. User type have to be  „System“ or „Dialog“.

Any CMDlet of EasyCloud SAP Module you use will interact with the SAP system with this user. Therefore the user need the specific Roles and Profiles in the SAP system to fullfill the request operation.

Example: You want to change the email address of User „Greg“ in SAP System. Therefore you connect to this SAP system using the User „MyAdminUser“.

EasyCloud connects to SAP with User „MyAdminUser“. This user must have assigned the SAP authorization object „S_USER_GRP“.


Q: Can we use SAP User Authorization trace to check for missing Authorization?

A: Yes. You can use su53 and check for missing Authorizations

Q: Can we trace the users activities in the system?

A: Yes. We use standard SAP user, so you can use any available solution for tracing user activities inside SAP.

Q: What is if the user is locked in SAP?

A: EasyCloud cannot connect to a SAP System if the user is locked.

Q: What is the recommendation for User?

A: connmove recommends to create a specific EasyCloud User in SAP and setup a specific Profile / Role concept for this user.

Q: The connection is done via username / password. Is this secure?

A: No. connmove recommends to use SNC, while this is the most secure way to connect to SAP System. Use SNC SSO option if possible. If you cannot use SNC please note that any communication to the SAP system will not be encrypted as it is when SAPGUI to SAP system connection is not secured over SNC. If you don’t want to encrypt this communication connmove recommend to use the EasyCloud PW store.

OS/DB Migration Quality Accelerator for SAP

Kategorien: EasyCloud, Knowledge Base, Nachrichten
Kommentare deaktiviert für OS/DB Migration Quality Accelerator for SAP

Reduzieren Sie Risiken und Aufwand bei SAP OS/DB Migrationen

Mit einer neuen Erweiterung für die connmove EasyCloud – dem OS/DB Migration Quality Accelerator for SAP – werden Risiken bei SAP OS/DB Migrationen kalkulierbar und interne Umstellungs- und Testaufwände deutlich reduziert.

Bei OS/DB Migrationen – auch heterogene Systemkopien genannt – wechselt der Kunde das Betriebssystem- und/oder die Datenbank-Plattform einer SAP Landschaft. Das vorgehen an sich ist durch SAP vollständig unterstützt, bringt aber regelmäßig große interne Aufwände bei der Anpassung gerade von sogenannten Datei-Schnittstellen. Die Ursachen hierfür sind entweder eine Reorganisation der Datei- und Berechtigungsstrukturen oder beim Wechsel von Unix Auf Windows die Änderung der Ansprache solcher Dateiablagen.

connmove stellt im Rahmen der EasyCloud nun einen Service bereit, mit dem SAP Systeme schnell auf die Verwendung von Dateipfaden in SAP Reports, Varianten oder Batch Jobs prüft. Sogar die automatische Umsetzung von bisherigen Pfad auf neue Werte ist möglich.

Kunden sparen sich dadurch das aufwendige Testen und Umstellen der oft tausenden von Varianten in einem SAP System. Ein einem Kundenprojekt konnten so interne Aufwände von 70 Personentagen vermieden werden!

Nutzen auch Sie die Möglichkeit des connmove OS/DB Migration Quality Accelerator und informieren Sie sich unverbindlich.


OS/DB Migration Quality Accelerator for SAP- find file paths in SAP Variants

EasyCloud Execution Plans

Kategorien: EasyCloud
Kommentare deaktiviert für EasyCloud Execution Plans

Current available EasyCloud Execution Plans

  • System Copy
  • SAP Kernel Patch
  • OS Patching
  • SAP Stopp / Start
  • Interface Availability Check

EasyCloud Support Matrix

Kategorien: EasyCloud, Knowledge Base
Kommentare deaktiviert für EasyCloud Support Matrix

With EasyCloud connmove offers a great framework to administrate Windows, SAP and SQL Server over PowerShell.


Please note that EasyCloud is available for this SAP/ Windows Releases:


Windows \ SAP Release  Function Modules SAP RFC Connection SAPSTART Web service SAPGUI Scripting
Windows Server 2003 x64 NON-Core Yes Yes, SAP 4.0 and above Yes, SAP 6.20 and above No
Windows Server 2008 x64 CORE or NON-Core Yes Yes, SAP 4.0 and above Yes, SAP 6.20 and above No
Windows Server 2008 R2 x64 CORE or NON-Core Yes Yes, SAP 4.0 and above Yes, SAP 6.20 and above No
Windows Server 2012 x64 CORE or NON-Core Yes Yes, SAP 4.0 and above Yes, SAP 6.20 and above No
Windows Server 2003-2012 x64 with 32 bit Environment NON-Core No No No Yes, SAP Gui 7.0 and above


EasyCloud Framework supports SQL Server 2008 and higher.


Windows Server 2012 is now also fully supported.

Extended Cluster Management

Kategorien: EasyCloud, Knowledge Base, Software
Kommentare deaktiviert für Extended Cluster Management

In Microsoft Failover Cluster Administrators often have to manage a lot of different Services. In case of maintenance that means manual failover every single cluster service.




Of course, Administrators have to switch any resource back as it was before maintenance. Only this gurantees a best performance for all different cluster services.
connmove now extended the cmShell Features to speed up and automate this tasks. With three Powershell cmdLets Administrators can easily

  • Safe the current Service distribution over all cluster nodes in a file
  • Failover any Cluster Service on one specific node to another one
  • Restore the Service distribution


In Detail

  1. cmdLet save-cmCluster <Filename> stores the current Service distribution in a single file. Administators can edit the file easily.
  2. Move-CmClusterGroup –SourceNode <SourceNode> –TargetNode <TargetNode> moves any cluster service to the target Node:



Restore-CmCluster .\myClusterConfig.txt distributes the cluster services like it was saved before.



Some more details in controlling your cluster using PowerShell:

Control your SAP Instance with Microsoft PowerShell

Kategorien: EasyCloud, Knowledge Base
Kommentare deaktiviert für Control your SAP Instance with Microsoft PowerShell

We extended our cmShell4SAP with new features. This example shows how you can control your SAP Instance with PowerShell. Use Cases are Shutdown/Startup Scripts or use the Satus Query to Monitor your SAP Instance.


First Step: Connect to an SAP Host

$con = Connect-CmSAPHost -HostName erpdi01 -UserName admin –Password <YourPassword>

List all SAP Instances on this Host:

List-CmSAPInstance $con


hostname : ERPDI01
instanceNr : 2
httpPort : 50213
httpsPort : 0
startPriority : 3
dispstatus : SAPControlGREEN

hostname : ERPDI01
instanceNr : 3
httpPort : 50313
httpsPort : 0
startPriority : 3
dispstatus : SAPControlGRAY

Start SAP Instance

Start-CmSapInstance -SapInstanceNumber 6 -SapControlConnect $con


Query SAP Instance Status

Test-CmSAPInstance -SapInstanceNumber 6 -SapControlConnect $con


Stop SAP Instance

Stop-CmSAPInstance -SapInstanceNumber 6 -SapControlConnect $con


Some Screenshots: