Failures enrolling users and groups

If you cannot enroll groups or users to the Windows environment on iSeries, follow this procedure to determine the problem.

From i5/OS:

• Check for errors in the message log for this network server description (NWSD) (designated during server installation to be QSYSOPR, a user-defined message log, or the user job log). Follow the error message Recovery actions to correct the problem. You can also find error codes on the Work with NWS Enrollment (WRKNWSENR) display.
• If the message log has User Admin error NTA0282, see User enrollment authorization problems.
• Make sure that the status of the server is VARIED ON.
• Check enrollment status (see Enroll a single i5/OS user to the Windows environment using iSeries Navigator) and look for error messages. Press F5 to refresh the status.
• Verify that i5/OS is set to keep passwords (QRETSVRSEC is set to 1). Also verify that users who are trying to enroll sign-on to i5/OS after this value is set.
• Specify and create a message queue for the NWSD; check the queue for messages.
• On i5/OS, enter the WRKACTJOB command. Check the QPRFSYNCH job in the QSYSWRK subsystem. Check the job log by pressing F10 for more detailed messages.
• On i5/OS, enter the WRKJOB nwsdname command, where nwsdname is the name of the NWSD for your integrated server. If the job is active, display the job log (Press F10 for more detail messages). If you end the job, display the spooled file.

From the integrated Windows server:

You can also try the following steps to determine the problem.

• See if the User Administration Service is running.
  1. From the integrated server's Start menu, select Programs, then Administrative Tools, then Component Services.
  2. Select System Tools, then Services.
  3. See if iSeries User Administration appears in the list of services.
  4. If the iSeries User Administration service is listed, but the status does not show that it is started, Right-click iSeries User Administration and select Start from the menu.
  5. If iSeries User Administration is not listed, do the following to reinstall it:
     1. From the Start, select Run, and type command to open a command prompt window.
     2. Go to the C: drive (or the current Windows drive).
     3. Type %SystemRoot%\as400wsv\admin\qvnadaem /install and press Enter.
     4. Close the Services window.
     5. Re-open Services.
     6. If you have not started iSeries User Administration, click Start.

If you get an error message stating that a Windows domain controller cannot be found, it may be that you are trying to enroll users to a Windows workgroup. In Windows networking, groups of local servers can be loosely affiliated by using Windows workgroups. For example, if you open My Network Places and click Computers Near Me, you will see a list of the computers in the same workgroup as you. In iSeries Navigator, it will sometimes appear that you can enroll i5/OS users to these workgroups, but attempting to do this will result in an error. There is no seperate list of Windows workgroup users like there is for a Windows domain.