Article ID: 309414
Article Last Modified on 2/22/2007
APPLIES TO
- Microsoft SNA Server 4.0 Service Pack 3
- Microsoft SNA Server 4.0 Service Pack 4
- Microsoft Host Integration Server 2000 Standard Edition
This article was previously published under Q309414
SYMPTOMS
SNACFG.exe, the SNA Command Line Configuration Utility, will return the following error when it attempts to create a host security domain (HSD) if the Windows NT/Windows 2000 domain local groups that it attempts to create already exist:
RESOLUTION
To resolve this problem, obtain the latest service pack for Host Integration Server 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
328152 How to Obtain the Latest Host Integration Server 2000 Service Pack
WORKAROUND
If you manually delete the domain local groups that SNACFG.exe is attempting to create, this will allow the HSD to be successfully added.
On Host Integration Server 2000, you also have the option of using the Host Security Domain Configuration Wizard available within SNA Manager to create the HSD. If the domain local groups already exist, the Wizard will return the following message:
The Wizard will create the HSD if you click the Yes button in this message dialog box.
The HSD Configuration Wizard in SNA Server 4.0 does not provide an option to allow the creation of the HSD if the domain local groups already exist.
STATUS
SNA Server 4.0
Microsoft has confirmed that this is a problem in Microsoft SNA Server 4.0 Service Pack (SP) 3 and SP4, and Host Integration Server 2000.
Host Integration Server 2000
Microsoft has confirmed that this is a problem in Microsoft Host Integration Server 2000. This problem was first corrected in Host Integration Server 2000 Service Pack 1.
MORE INFORMATION
When a host security domain is created, a Windows NT/Windows 2000 local domain group must be created with the same name. A second group is also created which appends "_proxy" to the HSD name for its group name. For example, when you create an HSD called HSDTEST, the following Windows NT/2000 local domain groups will be created:
- HSDTEST
- HSDTEST_Proxy
The ability to create host security domains by using SNACFG.exe was added to SNA Server 4.0 in SP3. The following Microsoft Knowledge Base article explains the functionality that was added:
236847 SNACFG Should Allow Configuration of Host Security Domains
Additional query words: HIS 2000
Keywords: kbbug kbfix kbhostintegserv2000presp1fix kbhostintegserv2000sp1fix KB309414
