When you configure Microsoft Host Integration Server 2004 to support Active Directory Clients by using Microsoft Host Integration Server 2004 Configuration Wizard, the OU is empty (883843)


The information in this article applies to:

  • Microsoft Host Integration Server 2004

SYMPTOMS

When you configure Microsoft Host Integration Server 2004 to support Active Directory Clients by using Microsoft Host Integration Server 2004 Configuration Wizard, the organizational unit (OU) is created. However, the OU is empty. No objects are created under the OU.

When you examine the OU in Active Directory Users and Computers under Administrative Tools, you are supposed to see the following:

OU | snaResources | snaServerServices | snaBase | snaMngagents | snaNodes

In each object under snaServerServices, you are supposed to see the Servername\Service of the Host Integration Server 2004 server that is configured to support Active Directory Clients.

CAUSE

This problem occurs if the following conditions are true:
  • The OU is created, but Advanced Features is not enabled.
  • The HIS Runtime Users group is not assigned permissions to the server Security object.
  • The HIS Runtime Users group, if installing Host Integration Server 2004 on a Domain Controller, is not assigned permissions to the Host Integration Server organizational unit.
  • The HIS Runtime Service Account, if installing Host Integration Server 2004 on a member server, is not assigned permissions to the Host Integration Server organizational unit.

RESOLUTION

Note Depending on whether Host Integration Server 2004 is installed on a Domain Controller or Member Server, you will have to use different accounts. If installing Host Integration Server 2004 on a Domain Controller, the "HIS Runtime Users" group is created and will be available to assign the appropriate permissions. However, if installing Host Integration Server 2004 on a Member Server, the "HIS Runtime Users" group is not created. Therefore, the service account (used during installation for the Host Integration Server services) instead of the "HIS Runtime Users" group will have to be used.

After you enable Support Active Directory Clients, and you create the OU by using Host Integration Server 2004 Configuration Wizard, open the Active Directory Users and Computers snap-in. Then, follow these steps:
  1. Right-click OU.
  2. Click View, and then click Advanced Features.

    The objects appear under the OU as in the following example:

    OU | snaResources | snaServerServices | snaBase | snaMngagents | snaNodes
  3. Expand Domain Controllers.
  4. Right-click the server that you want, and then click Properties.
  5. Click the Security tab.

    Verify whether HIS Runtime Users appears.

    If HIS Runtime Users does not appear, add it.

    If you are installing on a member server, verify whether the Service Account appears.
  6. Make sure that HIS Runtime Users or the Service Account has the following permissions enabled:
    • Read
    • Write
    • Create All Child Objects
    • Delete All Child Objects
  7. Click HIS Runtime Users or the Service Account, and then click Advanced.
  8. Click the Permissions tab, click HIS Runtime Users or the Service Account, and then click Edit.
  9. Click the Object tab. In the Apply onto box, click to select the This object and child objects check box, and then click OK.
  10. Restart the following SNA Services:
    • Snabase
    • SNA MngAgent
    • SnaServer
  11. Update the Active Directory Users and Computers snap-in.
  12. Expand the OU.

    Every object under snaResources contains Servername\Service.
Modification Type:MajorLast Reviewed:6/22/2005
Keywords:kbtshoot kbprb KB883843 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.