Re: Cannot use GPO Deployment from Cluster Volume
From: Mark H (MarkH_at_discussions.microsoft.com)
Date: 11/10/04
- Next message: Russ Kaufmann [MCT]: "Re: multi nic cards"
- Previous message: Marty: "multi nic cards"
- In reply to: Mike Rosado [MSFT]: "Re: Cannot use GPO Deployment from Cluster Volume"
- Next in thread: Mike Rosado [MSFT]: "Re: Cannot use GPO Deployment from Cluster Volume"
- Reply: Mike Rosado [MSFT]: "Re: Cannot use GPO Deployment from Cluster Volume"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 10 Nov 2004 11:10:02 -0800
Mike,
I use commands similar to the bottom of your link. Here is an example:
CLUSTER.EXE resource REPOSITORY /priv security="G_Employees",grant,F:security
I do this because of the following error while using the GUI. I right click
on a share resource, choose "Properties" and go to the "Parameters" tab.
>From there I click "Permissions" and try to add a global security group to
the list with full or read access. When I hit OK or Apply the following
message pops up:
"Access to a cluster fileshare can be granted/denied only to domain users
and groups. Please remove any local users or groups from the permissions."
After checking more I noticed that I can add built-in groups like "Everyone"
and "Authenticated Users" but not groups of my own.
Any ideas why the Cluster Administrator would have this issue?
Mark
"Mike Rosado [MSFT]" wrote:
> Mark,
>
> Not quite sure what bug you are referring to, but if you have a reference
> article someone pointed you to then I'll be more than happy to review it and
> see if it applies.
>
> Have you tried using the following article to revoke permissions?
>
> 828289 How to use the Cluster.exe command to modify the Security Descriptor
> http://support.microsoft.com/?id=828289
>
> --
> Hope this helps,
> Mike Rosado
> Windows 2000 MCSE + MCDBA
> Microsoft Enterprise Platform Support
> Windows NT/2000/2003 Cluster Technologies
>
> ====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
> <http://www.microsoft.com/info/cpyright.htm>
>
> -----Original Message-----
>
> "Mark H" <MarkH@discussions.microsoft.com> wrote in message
> news:2CB86828-91B1-4F53-8409-9BB90C4BCCCF@microsoft.com...
> > Thanks for your reply Mike.
> >
> > I read the article and made sure that the share and NTFS permissions
> > included read access for "Domain Computers". The strange thing is that if
> I
> > create a share on a non-clustered resource, the app will automatically
> > install as it should. I only have problems when I try to use a share that
> is
> > on a clustered volume. I will repost as you suggest but I'm still
> skeptical
> > about my cluster. As an aside, I was told that when creating a new share
> on
> > the cluster, I have to set and revoke permissions with a script. I was
> told
> > that the cluster administrator for Win 2003 Enterprise had a bug and that
> the
> > GUI could not set the permissions. Does this sound familiar or do I have
> > deeper issues?
> >
> > Thanks,
> > Mark
> >
> > "Mike Rosado [MSFT]" wrote:
> >
> > > Hi Mark,
> > >
> > > I'm by no means an expert in this subject matter of GPOs, but I'll try
> to
> > > assist you to the best of my ability.
> > >
> > > This is not a Cluster specific issue. So if the resolution outlined in
> the
> > > following article doesn't work, then I would recommend you repost this
> issue
> > > in the "microsoft.public.win2000.active_directory" newsgroup.
> > >
> > > 278472 Packages Assigned to Computers with Group Policy Are Not
> Installed
> > > http://support.microsoft.com/?id=278472
> > >
> > > --
> > > Hope this helps,
> > > Mike Rosado
> > > Windows 2000 MCSE + MCDBA
> > > Microsoft Enterprise Platform Support
> > > Windows NT/2000/2003 Cluster Technologies
> > >
> > > ====================================================
> > > When responding to posts, please "Reply to Group" via your newsreader so
> > > that others may learn and benefit from your issue.
> > > ====================================================
> > >
> > > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > > <http://www.microsoft.com/info/cpyright.htm>
> > >
> > > -----Original Message-----
> > >
> > > "Mark H" <MarkH@discussions.microsoft.com> wrote in message
> > > news:C10D59C2-38C0-42BA-8344-37DB821FA7D7@microsoft.com...
> > > > I am trying to launch an MSI that is stored on a clustered volume
> using
> > > Group
> > > > Policy. When I try to deploy the same MSI stored on a non-clustered
> > > volume
> > > > it works as it should. The following error shows in the workstation
> log.
> > > >
> > > > Event Type: Error
> > > > Event Source: Application Management
> > > > Event Category: None
> > > > Event ID: 108
> > > > Date: 11/8/2004
> > > > Time: 9:40:08 AM
> > > > User: NT AUTHORITY\SYSTEM
> > > > Computer: HRADILT40
> > > > Description:
> > > > Failed to apply changes to software installation settings. Software
> > > changes
> > > > could not be applied. A previous log entry with details should exist.
> > > The
> > > > error was : The installation source for this product is not available.
> > > > Verify that the source exists and that you can access it.
> > > >
> > > > Any ideas would be greatly appreciated.
> > > >
> > > > Mark
> > >
> > >
> > >
>
>
>
- Next message: Russ Kaufmann [MCT]: "Re: multi nic cards"
- Previous message: Marty: "multi nic cards"
- In reply to: Mike Rosado [MSFT]: "Re: Cannot use GPO Deployment from Cluster Volume"
- Next in thread: Mike Rosado [MSFT]: "Re: Cannot use GPO Deployment from Cluster Volume"
- Reply: Mike Rosado [MSFT]: "Re: Cannot use GPO Deployment from Cluster Volume"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
