You receive the "Host account manager is unable to communicate with the Windows NT password synchronization service at the current time" error message when you open Host Account Manager in Host Integration Server 2000 or SNA Server 4.0 (889882)



The information in this article applies to:

  • Microsoft SNA Server 4.0 SP4
  • Microsoft Host Integration Server 2000
  • Microsoft Host Integration Server 2000 SP1

SYMPTOMS

When you open Host Account Manager (UDConfig.exe) in Microsoft Host Integration Server 2000 or Microsoft SNA Server 4.0, you receive the following error message:
Host account manager is unable to communicate with the Windows NT password synchronization service at the current time
No messages are logged in the event log.

CAUSE

This issue occurs when the logged-on user who opens Host Account Manager is not a member of the Host Security Domain (HSD) group.

RESOLUTION

To resolve this issue, add the logged-on user's account to the HSD group.

STATUS

This behavior is by design.

MORE INFORMATION

When an HSD is created, a Microsoft Windows user group that has the same name is created. By default, the Domain Users group is added to this group. A second group is also created that appends "_Proxy" to the HSD name for this group. For example, if you create an HSD that is named "IBMHOST," the Host Security Domain Wizard creates the IBMHOST and the IBMHOST_Proxy Windows user groups.

If the Domain Users group is removed from the IBMHOST group, no users are configured to use the HSD IBMHOST group. Anyone who opens Host Account Manager receives the error that is mentioned in the "Symptoms" section. By default, the Administrator account is a member of the Domain Users Group, so the Administrator cannot log on either. Sometimes, an administrator intentionally removes the Domain Users group and assigns individual accounts to the HSD group. Typically, this action is taken if the users in the Domain Users group do not plan to participate in Password Synchronization or Single Sign-On (SSO).

Modification Type:MajorLast Reviewed:2/2/2005
Keywords:kbtshoot kbprb KB889882 kbAudDeveloper