Windows Server

Judy · Guest

I am supposed to change our Host Integration Server from the "old"
Windows security system to Active Directory by moving it from one
domain to another. As the oldest living mainframer, I haven't a clue
where to start, beyond reading the Installation Manual, which I have
done to no avail.

Here's what I know: A local account (Hislocal) starts NVAlert,
NVRunCmd, SNA LU6.2 Resync TP, SNA MngAgent, SnaBase, SnaNetMn,
SnaServer and TN3270. A service account starts SNAPrint (svcHis).
All the rest say they're started by "LocalSystem".

I have duplicated the accounts in the "new" AD domain, but now am
hesitant to continue without advice.

This server controls all the printing in the company; I can't afford
to have it croak, so I'd be very appreciative of help.

Respectfully submitted,
Judy

Jeremy Remlinger [MSFT] · Guest

Judy,

Since all you are doing is moving the server from one domain to another,
you should be fine. Being that the new Domain is 'Active Directory' isn't
going to have an impact at all. All you are going to do is to create the
new domain service account, and change the services to the new account, as
you were intending.

My only concern is that when you are creating the new account, that is has
the proper rights granted to it. A 'vanilla' account will not have the
proper rights to run the services. The following rights are required by
the domain account:

Act as part of the Operating System
Logon as a Service
Generate Security Audits
Load and Unload Device Drivers
Manage Audit and Security Log

ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸
Jeremy "Rem" Remlinger, MSCE
SNA/HIS Engineer
Microsoft

This posting is provided 'AS IS' with no warranties, and confers no rights.
© 2004 Microsoft Corporation. All rights reserved.
ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸

--------------------
From: judith.goddard@premera.com (Judy)
Newsgroups: microsoft.public.hiserver.general
Subject: Changing Host Integration Server to New Active Directory Domain
Date: 14 Oct 2004 09:12:24 -0700
Organization: http://groups.google.com
Lines: 19
Message-ID: <5ee46e3e.0410140812.66f53988@posting.google.com>
NNTP-Posting-Host: 199.73.1.1
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: posting.google.com 1097770344 12514 127.0.0.1 (14 Oct 2004
16:12:24 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Thu, 14 Oct 2004 16:12:24 +0000 (UTC)
Path:
cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!news-out.cwi
x.com!newsfeed.cwix.com!border1.nntp.dca.giganews.com!nntp.giganews.com!news
..glorb.com!postnews1.google.com!not-for-mail
Xref: cpmsftngxa10.phx.gbl microsoft.public.hiserver.general:4287
X-Tomcat-NG: microsoft.public.hiserver.general

I am supposed to change our Host Integration Server from the "old"
Windows security system to Active Directory by moving it from one
domain to another. As the oldest living mainframer, I haven't a clue
where to start, beyond reading the Installation Manual, which I have
done to no avail.

Here's what I know: A local account (Hislocal) starts NVAlert,
NVRunCmd, SNA LU6.2 Resync TP, SNA MngAgent, SnaBase, SnaNetMn,
SnaServer and TN3270. A service account starts SNAPrint (svcHis).
All the rest say they're started by "LocalSystem".

I have duplicated the accounts in the "new" AD domain, but now am
hesitant to continue without advice.

This server controls all the printing in the company; I can't afford
to have it croak, so I'd be very appreciative of help.

Respectfully submitted,
Judy

Judy · Guest

Thanks, Jeremy.

You have given me confidence that I won't croak HIS if I change
domains, but is there a tool I should be using? I know how to backup
the configurations with snacfg and how to do canned backups with SNA
Manager; I'll do all of those of course. I'll then verify (as you
suggested) that the "new" service account has all the correct
privileges.

I'm really embarrassed to have to ask, but then what? I have seen
references to a wizard or an exec for this purpose, but I'd really
appreciate more of your expert (and patient) advice. Any hints about
how you would procede?

Very respectfully submitted,
Judy Goddard, The Oldest Living Mainframer

P.S. I tried to send you this "offline", but it was rejected for
non-DNS resolution at online.microsoft.com. Maybe it's just an AOL
problem.

Jeremy Remlinger [MSFT] · Guest

Judy,

If you are migrating to Host Integration Server 2004 you can simply re-run
the Configuration Wizard to change the account that the Services is runing
under and it will grant the account that you are using the proper rights
(given that you are logged in withthe proper rights to modify the account).

However, with HIS 2000 there is no tool, and you will need to make the
changes to the services, and modify the account manually.

ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸
Jeremy "Rem" Remlinger, MSCE
SNA/HIS Engineer
Microsoft

This posting is provided 'AS IS' with no warranties, and confers no rights.
© 2004 Microsoft Corporation. All rights reserved.
ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸

--------------------
From: judith.goddard@premera.com (Judy)
Newsgroups: microsoft.public.hiserver.general
Subject: Re: Changing Host Integration Server to New Active Directory Domain
Date: 17 Oct 2004 11:29:50 -0700
Organization: http://groups.google.com
Lines: 20
Message-ID: <5ee46e3e.0410171029.71df3219@posting.google.com>
References: <5ee46e3e.0410140812.66f53988@posting.google.com>
NNTP-Posting-Host: 198.81.26.44
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: posting.google.com 1098037791 31584 127.0.0.1 (17 Oct 2004
18:29:51 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Sun, 17 Oct 2004 18:29:51 +0000 (UTC)
Path:
cpmsftngxa06.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFTNGP08
.phx.gbl!newsfeed00.sul.t-online.de!t-online.de!news-spur1.maxwell.syr.edu!n
ews.maxwell.syr.edu!postnews1.google.com!not-for-mail
Xref: cpmsftngxa06.phx.gbl microsoft.public.hiserver.general:4192
X-Tomcat-NG: microsoft.public.hiserver.general

Thanks, Jeremy.

You have given me confidence that I won't croak HIS if I change
domains, but is there a tool I should be using? I know how to backup
the configurations with snacfg and how to do canned backups with SNA
Manager; I'll do all of those of course. I'll then verify (as you
suggested) that the "new" service account has all the correct
privileges.

I'm really embarrassed to have to ask, but then what? I have seen
references to a wizard or an exec for this purpose, but I'd really
appreciate more of your expert (and patient) advice. Any hints about
how you would procede?

Very respectfully submitted,
Judy Goddard, The Oldest Living Mainframer

P.S. I tried to send you this "offline", but it was rejected for
non-DNS resolution at online.microsoft.com. Maybe it's just an AOL
problem.

lsring@hotmail.com · Guest

Sounds like you are just moving the server from one Windows domain to another.
If that is the case then this is what I have done:

Make surethe domain account in the new domain that the SNA Services will run
under has the proper rights on the HIS server
Stop the SNA Services on existing server and make sure they are set to
manual startup. Set these service to run under the new domain service account.
Move the computer into the new windows domain and reboot machine
Restart the SNA Base services manually.
Start manager and verify functionality and connectivity
Set the approprate services back to auto startup

Note: In this case the HIS domain is the same ... it is just moving to a new
Windows (active directory domain).

LSRING

"Jeremy Remlinger [MSFT]" wrote:

Changing Host Integration Server to New Active Directory Dom

	Windows Server Forum Index -> Host Integration Server	All times are GMT
Page 1 of 1