The Password Synchronization component lets you automatically synchronize the passwords for your host accounts and Windows NT domain accounts. This component includes the Windows NT Password Synchronization Service and must be installed even if the automatic Password Synchronization feature is not used, as it coordinates the internal operation of other services.
The Windows NT Password Synchronization Service is installed on the primary domain controller of the Windows NT domain in which domain user accounts are defined. If user accounts are defined in multiple top-tier domains, the service must be installed on the primary domain controller of each domain. This service can also be installed on a backup domain controller, but the components are not activated until the server is promoted to a primary domain controller. Only one instance of the Windows NT Account Synchronization Service can be designated as primary; all others must be backup servers.
The ability to automatically synchronize passwords from the Windows NT domain to an AS/400 security domain is built into SNA Server. Third-party products can provide enhanced synchronization services, such as two-way and automatic synchronization, to other host systems.