You receive a "Host Account Manager is unable to communicate with the Windows NT password synchronization service at the current time" error message when you start the Host Account Manager (887288)

MORE INFORMATION

When a host security domain is created, a Windows user group is created with the same name. By default, the Domain Users group is added to this group. Additionally, a second group is also created that appends "_Proxy" to the host security domain name for its group name.

For example, if a host security domain was created by using the name "IBMHOST," the Host Security Domain Wizard will create the following Windows groups:

• IBMHOST
• IBMHOST_Proxy

If the Domain User group was removed from the IBMHOST group, no users are configured to use the host security domain that is named IBMHOST. Any user who opens the Host Account Manager would receive the error message that is mentioned in the "Symptoms" section. By default, the Administrator account is a member of the Domain Users group and would receive this error message.

Sometimes, administrators purposely remove the Domain Users group. Then, they assign individual accounts to the host security domain group. Typically, an administrator does this if not all users in the Domain Users group plan to participate in password synchronization or Enterprise Single Sign-On (SSO).