Re: Cluster File Share cannot be accessed by account on trusted domain

anonymous_at_discussions.microsoft.com
Date: 09/09/04


Date: Thu, 9 Sep 2004 10:31:02 -0700

The two cluster nodes are domain controllers. They do
not have group policy enabled on them directly. I
believe there is a default domain policy but nothing was
configured (outside the defaults) in this policy. Is
there something I should be looking for in there that
would affect the file shares in this manner?

I don't have any problems contacting the same share
directly off the cluster node hosting the virtual server
using the non-local domain accounts credentials.

The NTFS permissions are correctly set and the non-local
domain account is explicitly specified. In fact, I have
installed the hotfix in KB Article 834231 on both cluster
nodes.

>-----Original Message-----
>Hi Jeff,
>
>Have you tried to create a NEW OU (Organizational Unit),
copy the two
>cluster nodes into the new OU and select "Block Policy
Inheritance" on the
>Group Policy tab of the properties on the new OU?
>
>Have you checked the NTFS permissions on the actual File
Share?
>
>--
>Hope this helps,
>Mike Rosado
>Windows 2000 MCSE + MCDBA
>Microsoft Enterprise Platform Support
>Windows NT/2000/2003 Cluster Technologies
>
>====================================================
>When responding to posts, please "Reply to Group" via
your newsreader so
>that others may learn and benefit from your issue.
>====================================================
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
><http://www.microsoft.com/info/cpyright.htm>
>
>Delighting customers is our top priority. We welcome
your valuable comments
>and suggestions about how to improve the service we
provide you. So if you
>would like provided us feedback, feel free to e-mail my
manager Brian
>Pennington then click on the following e-mail hyperlink
with a short
>statement with regards to your Online support experience
><mailto:BPenning@microsoft.com?
subject=Newsgroup_Experience&body=Brian,>.
>Thank you.
>
>-----Original Message-----
>
>"Jeff" <anonymous@discussions.microsoft.com> wrote in
message
>news:86b401c495e8$9e20af70$a301280a@phx.gbl...
>> I have a file share on a Windows 2003 Enterprise
Edition
>> server cluster. I am able to access the file share
over
>> the network using local domain accounts without any
>> problems. Although I have explicitly added domain
>> accounts from a trusted domain in the same forest as
the
>> cluster servers, I am not able to access the share
using
>> these account credentials. I keep getting prompted
with
>> the password dialog box even though I know I am
entering
>> the correct password. Any suggestions?
>
>
>.
>



Relevant Pages

  • Re: Maximum password age - Need Proof
    ... level (for domain accounts), not OUs. ... The domain account policy is domain wide. ... Joe Richards Microsoft MVP Windows Server Directory Services ... OU to show the CIO that password expiration GPOs work as promised. ...
    (microsoft.public.win2000.active_directory)
  • Re: Applying Group Policies
    ... Lets call them Laptop. ... I want to turn off that group policy. ... I would setup local and Domain accounts. ... Visit Topic URL to contact author (reg. ...
    (microsoft.public.win2000.group_policy)
  • Re: Group Policy - Complex Password
    ... you set the policy on an OU it wont apply to the domain accounts but only the ... local accounts on the machines in that OU. ... I have set the policy under the domain and not an OU? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Lockout Duration
    ... They are domain accounts and it is in place on all ... I re-implemented the policy with changes. ... and duration do not change fro what was set previously. ... >> We implemented a account lockout policy. ...
    (microsoft.public.win2000.security)