Article ID: 235977
Article Last Modified on 9/22/2005
APPLIES TO
- Microsoft SNA Server 3.0 Service Pack 4
- Microsoft SNA Server 4.0
This article was previously published under Q235977
SYMPTOMS
The Host Account Cache database used to associate Windows NT Domain User Accounts with Host User Accounts when using SNA Server's Host Security feature may contain Windows NT Machine Accounts in addition to User Accounts.
When you use Snacfg.exe (SNA Server's command line configuration utility) to view the accounts contained in the Host Account Cache database, you may see results similar to the following:
HSMAPPING NTDOMAIN\NTWRKSTN-3$ /ADD /HSDOMAIN:HOSTDOM /HSUSER:?UNINITIALIZED?
HSMAPPING NTDOMAIN\hostsec1 /ADD /HSDOMAIN:HOSTDOM /HSUSER:?UNINITIALIZED?
HSMAPPING NTDOMAIN\hostsec2 /ADD /HSDOMAIN:HOSTDOM /HSUSER:?UNINITIALIZED?
HSMAPPING NTDOMAIN\hostsec3 /ADD /HSDOMAIN:HOSTDOM /HSUSER:?UNINITIALIZED?
HSMAPPING NTDOMAIN\NTWRKSTN-4$ /ADD /HSDOMAIN:HOSTDOM /HSUSER:?UNINITIALIZED?
The entries that end with a dollar sign ($) are Windows NT Machine Accounts.
CAUSE
The Host Security Domain Wizard used to create Host Security Domains adds the Windows NT Domain Users group to the host security domain group that the wizard creates in User Manager for Domains. When a new user is added to the Windows NT domain, the user is automatically added to the Domain Users group and is also added to the Host Account Cache database. Windows NT Machine accounts are also members of the Domain Users group, therefore, the SNA Host Account Cache service (Snaudb.exe) adds new Windows NT Machine accounts to the Host Account Cache database.
RESOLUTION
To resolve this problem, obtain the latest service pack for SNA Server version 4.0. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
215838 How to Obtain the Latest SNA Server Version 4.0 Service Pack
STATUS
Microsoft has confirmed that this is a problem in Microsoft SNA Server versions 3.0, 3.0 SP1, 3.0 SP2, 3.0 SP3, 3.0 SP4, 4.0, 4.0 SP1, 4.0 SP2. This problem was first corrected in SNA Server version 4.0 Service Pack 3.
MORE INFORMATION
After you apply the update, the SNA Host Account Cache service checks to see if the new account is a Windows NT Machine account before adding it to the Host Account Cache database. If the account is a Windows NT Machine account, it will not be added to the Host Account Cache database.
The following is an example of a Snacfg command you can use to display the all of the account contained in the Host Account Cache database:
snacfg hsmapping *\* /print
Please refer to the SNA Server 4.0 online documentation for more details on the Snacfg utility.
Keywords: kbbug kbfix kbsna400sp3fix kbqfe kbhotfixserver KB235977
