Article ID: 235472
Article Last Modified on 2/22/2007
APPLIES TO
- Microsoft SNA Server 4.0 Service Pack 4
- Microsoft Host Integration Server 2000 Standard Edition
- Microsoft Host Integration Server 2000 Service Pack 1
This article was previously published under Q235472
SYMPTOMS
If you choose not to install the Host Account Synchronization Service during the SNA Server Setup process, but later decide to add it by running the Setup program again, this service will default into the Local System Account.
If you choose to install the Host Account Synchronization Service during the initial SNA Server Setup process, this service gets installed in the same Windows Service Account as all the other SNA Services (such as SNABase, SnaServer, and so on).
Because all Host Security Services (Host Account Cache, Windows NT Account Synchronization, and Host Account Synchronization) must be installed in the same Windows Service Account for authentication purposes, failures may occur when password changes are initiated from either Windows or host systems.
RESOLUTION
To resolve this problem, obtain the latest service pack for Microsoft SNA Server 4.0. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
215838 How to obtain the latest SNA Server version 4.0 service pack
WORKAROUND
In Control Panel, double-click Services, and select the SNA Host Account Synchronization Service. Change the account information to match that of the other two Host Security Services, (SNA Windows NT Account Synchronization and SNA Host Account Synchronization).
STATUS
Microsoft has confirmed that this is a problem in SNA Server 4.0, SNA Server 4.0 SP1, and SNA Server 4.0 SP2. This problem was first corrected in SNA Server 4.0 Service Pack 3.
MORE INFORMATION
For authentication purposes, host security services in all communicating Windows domains must run in the same Windows Service account. This applies also to the Host Account Cache and Windows NT Account Synchronization Service, which are installed from the host security Setup program. The account name must be unique in all Windows domains. For example, the account name "Administrator" is already used in each Windows domain, and is not unique.
The SNA Server Setup program includes a Service Account dialog box when installing the Host Account Synchronization Service if selected after SNA Server has already been installed.
Additional query words: HSI
Keywords: kbbug kbfaq kbfix kbqfe KB235472
