| Event Id | 51 |
| Source | SNA Host Security |
| Description | The Windows NT Account Synchronization service could not validate an RPC request. |
| Event Information | According to Microsoft: CAUSE: The SNA Host Account Cache service fails to return the users previous host password to the SNA WinNT Account Synchronization service so that it can be validated prior to changing the users Windows NT or Windows 2000 password. The password change request cannot be completed if the previous host password is not available for validation when ValidateHostRequest=1. This results in the event 51 and the failure to change the users Windows NT/Windows 2000 password. WORKAROUND: If there is no requirement to have a users previous host password validated by the HIS 2000 host security components before the users Windows NT/Windows 2000 password is changed, this functionality can be disabled. The validation of a users previous host password can be disabled by modifying the registry as follows: 1. Start Registry Editor (Regedt32.exe). 2. Locate the ValidateHostRequest value under the following key in the registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SnaPMP\Parameters\ ValidateHostRequest 3. From the Edit menu, click DWORD, type 0, and then click OK. 4. Quit Registry Editor. |
| Reference Links | Event 51 Logged During Failed Host-Initiated Password Change User May Override Mapping Option Is Not Enforced Centrally |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.