Microsoft KB Archive/889882

= You receive the &quot;Host account manager is unable to communicate with the Windows NT password synchronization service at the current time&quot; error message when you open Host Account Manager in Host Integration Server 2000 or SNA Server 4.0 =

Article ID: 889882

Article Last Modified on 2/2/2005

-

APPLIES TO


 * Microsoft SNA Server 4.0 Service Pack 4
 * Microsoft Host Integration Server 2000 Standard Edition
 * Microsoft Host Integration Server 2000 Service Pack 1

-





SYMPTOMS
When you open Host Account Manager (UDConfig.exe) in Microsoft Host Integration Server 2000 or Microsoft SNA Server 4.0, you receive the following error message:

Host account manager is unable to communicate with the Windows NT password synchronization service at the current time

No messages are logged in the event log.



CAUSE
This issue occurs when the logged-on user who opens Host Account Manager is not a member of the Host Security Domain (HSD) group.



RESOLUTION
To resolve this issue, add the logged-on user's account to the HSD group.



STATUS
This behavior is by design.



MORE INFORMATION
When an HSD is created, a Microsoft Windows user group that has the same name is created. By default, the Domain Users group is added to this group. A second group is also created that appends &quot;_Proxy&quot; to the HSD name for this group. For example, if you create an HSD that is named &quot;IBMHOST,&quot; the Host Security Domain Wizard creates the IBMHOST and the IBMHOST_Proxy Windows user groups.

If the Domain Users group is removed from the IBMHOST group, no users are configured to use the HSD IBMHOST group. Anyone who opens Host Account Manager receives the error that is mentioned in the &quot;Symptoms&quot; section. By default, the Administrator account is a member of the Domain Users Group, so the Administrator cannot log on either. Sometimes, an administrator intentionally removes the Domain Users group and assigns individual accounts to the HSD group. Typically, this action is taken if the users in the Domain Users group do not plan to participate in Password Synchronization or Single Sign-On (SSO).

Keywords: kbtshoot kbprb KB889882

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.