[ Pobierz całość w formacie PDF ]
./Rand and /FPNW Options for the Net User CommandThe /fpnw option for the net user command makes the specified user account a NetWare-enabled account.This enables the user to be propagated from the Windows NT Server domain to NetWare servers that have been added to the domain for management.For example, if LoriR is a user account on a Windows NT Server domain, and you want to begin propagating this account to NetWare servers, you can typenet user lorir /fpnwUsing the /fpnw option is equivalent to selecting the “Maintain NetWare Compatible Login” box in the User Properties dialog box.When you make a user account NetWare-enabled by using the /fpnw option, you are prompted to supply a new password for the user.This is because Directory Service Manager for NetWare must know the user's password to propagate it to NetWare servers, but it cannot read the current password, which is stored in an encrypted form.You can also use the /fpnw to cause a user account to stop being NetWare enabled, by specifying /fpnw:no.The /rand option generates a new password, composed of random characters, and assigns it as the user's password.The /rand command is especially useful when you:Use the net user username /fpnw command to make a large number of user accounts NetWare-enabled; specify the /rand option to have passwords generated automatically.Have the File and Print Services for NetWare product already installed on the server, with accounts that are already NetWare-enabled.When Directory Service Manager for NetWare is installed, it cannot propagate these existing users because it cannot read their current encrypted passwords.To propagate these users to NetWare servers, create a batch file, with each line net user username /rand.Directory Service Manager for NetWare is notified of the new randomly generated passwords, and begins propagating the user accounts.The default random password is 8 characters, but you can specify any length that conforms to the domain's minimum password length requirements.For example, /rand:6 generates a password of 6 characters.You can use both the /fpnw and /rand options when either creating new user accounts or modifying existing user accounts.TroubleshootingThis section discusses how to diagnose and solve error conditions, and lists and explains error messages that you might see in the Windows NT Server Application Log.Unable to Add NetWare Server to a DomainIf you are unable to add a NetWare server to a domain, and see the message "Server name has already been added to a Windows NT domain" when you try to add it, the NetWare server has already been added to a domain.Check other domains to see if they are currently managing the server.If you determine that no domain is currently managing the server, then the NetWare server may have been previously added to a domain, and was not properly removed from the domain before Directory Service Manager for NetWare was removed from that domain.If this is the case, and you are sure that no domain is currently managing the server, you can free the server (from that previous domain) by using a NetWare administrative tool to remove the user account named WINNT_SYNC_AGENT from the NetWare server's bindery.You can then add the server to a domain.Troubleshooting Service FailuresIf the Directory Service Manager for NetWare service fails to start when the computer starts, but you can start the service manually, the user account used by the service to log on may have the wrong password set.This account is named Sync Agent Account.Use the following procedure to correct the password problem.To set the password for the Sync Agent Account1.In Control Panel, double-click Services.2.From the Service list, select Directory Service Manager for NetWare, and click Startup.3.Type the correct password for the account in both Password and Confirm Password.Then click OK.Re-creating the Sync Agent AccountIf the Sync Agent Account is ever accidentally deleted from the primary domain controller, you must re-create the account.Perform the following steps.To re-create the Sync Agent Account1.In User Manager for Domains, create a new account with the name Sync Agent Account.Make it a member of the Administrators group.2.In Control Panel, double-click Services.3.From the Service list, select Directory Service Manager for NetWare, and click Startup.4.Click This Account, and type Sync Agent Account in This Account.Or use the ellipsis button to select Sync Agent Account.5.Type the correct password for the account in both Password and Confirm Password.Then click OK.Application Log MessagesDirectory Service Manager for NetWare writes logged errors and warnings to the Windows NT Server Application Log.The following list shows some messages you might see in the Application Log, and what you should do if you see them.To view the application log, use Event Viewer.Two sections of errors are listed.The first section contains errors not associated with an error number.The second section of errors, which include error numbers, are listed in numerical order, with lowest numbers first.Unnumbered ErrorsAccount <account name> cannot be propagated to Netware servers because the account name is invalid on NetWare servers.One cause for this may be if the account name contains spaces.NetWare does not support spaces in account names.In particular, this may happen for many built-in Windows NT Server groups (such as PRINT OPERATORS).If you require this group to propagate to NetWare servers, you must change its name to a valid name.Otherwise, no administrator action is necessary.The Sync Agent account will not propagate the account <account name> to the NetWare servers because it does not know the password of the account.The account account_name was NetWare-enabled before Directory Service Manager for NetWare was installed on the server.To cause this account to be propagated, reset the account password.The Sync Agent Service will stop because it can only run on the PDC of the domain.This error appears on the old primary domain controller when a new primary domain controller begins running in the domain.Numbered ErrorsError 51If you see an Error 51 immediately followed by error 10253 (“The Sync Agent Service failed to modify account <account name> on the NetWare server <server name> due to error 10253”), you can ignore these errors.The account will eventually be synchronized correctly.The Sync Agent Service failed to sync the server <servername> due to error 31.The server may be down, or this could be caused by timing issues during communications.The server will be synchronized when the next regular round of synchronizations is sent out [ Pobierz caÅ‚ość w formacie PDF ]