Re: Cannot use GPO Deployment from Cluster Volume
From: Mike Rosado [MSFT] (mikeros_at_online.microsoft.com)
Date: 11/11/04
- Next message: Mike Rosado [MSFT]: "Re: Migrating from W2K Cluster to new 2003 Cluster"
- Previous message: Rodney R. Fournier [MVP]: "Re: Migrating from W2K Cluster to new 2003 Cluster"
- In reply to: Mark H: "Re: Cannot use GPO Deployment from Cluster Volume"
- Next in thread:
: "Re: Cannot use GPO Deployment from Cluster Volume" - Reply:
: "Re: Cannot use GPO Deployment from Cluster Volume" - Messages sorted by: [ date ] [ thread ]
Date: Thu, 11 Nov 2004 13:53:37 -0600
OK Mark, now we're on the right track. Here's the bug you are probably
stumbling on that you mentioned.
834231 When a Windows Server 2003 cluster node is a domain controller, you
may
http://support.microsoft.com/?id=834231
-- Hope this helps, Mike Rosado Windows 2000 MCSE + MCDBA Microsoft Enterprise Platform Support Windows NT/2000/2003 Cluster Technologies ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. <http://www.microsoft.com/info/cpyright.htm> -----Original Message----- "Mark H" <MarkH@discussions.microsoft.com> wrote in message news:01B30212-A48C-45ED-AAD2-DDB2BB243B2F@microsoft.com... > Mike, > I use commands similar to the bottom of your link. Here is an example: > > CLUSTER.EXE resource REPOSITORY /priv security="G_Employees",grant,F:security > > I do this because of the following error while using the GUI. I right click > on a share resource, choose "Properties" and go to the "Parameters" tab. > From there I click "Permissions" and try to add a global security group to > the list with full or read access. When I hit OK or Apply the following > message pops up: > > "Access to a cluster fileshare can be granted/denied only to domain users > and groups. Please remove any local users or groups from the permissions." > > After checking more I noticed that I can add built-in groups like "Everyone" > and "Authenticated Users" but not groups of my own. > > Any ideas why the Cluster Administrator would have this issue? > > Mark > > > "Mike Rosado [MSFT]" wrote: > > > Mark, > > > > Not quite sure what bug you are referring to, but if you have a reference > > article someone pointed you to then I'll be more than happy to review it and > > see if it applies. > > > > Have you tried using the following article to revoke permissions? > > > > 828289 How to use the Cluster.exe command to modify the Security Descriptor > > http://support.microsoft.com/?id=828289 > > > > -- > > Hope this helps, > > Mike Rosado > > Windows 2000 MCSE + MCDBA > > Microsoft Enterprise Platform Support > > Windows NT/2000/2003 Cluster Technologies > > > > ==================================================== > > When responding to posts, please "Reply to Group" via your newsreader so > > that others may learn and benefit from your issue. > > ==================================================== > > > > This posting is provided "AS IS" with no warranties, and confers no rights. > > <http://www.microsoft.com/info/cpyright.htm> > > > > -----Original Message----- > > > > "Mark H" <MarkH@discussions.microsoft.com> wrote in message > > news:2CB86828-91B1-4F53-8409-9BB90C4BCCCF@microsoft.com... > > > Thanks for your reply Mike. > > > > > > I read the article and made sure that the share and NTFS permissions > > > included read access for "Domain Computers". The strange thing is that if > > I > > > create a share on a non-clustered resource, the app will automatically > > > install as it should. I only have problems when I try to use a share that > > is > > > on a clustered volume. I will repost as you suggest but I'm still > > skeptical > > > about my cluster. As an aside, I was told that when creating a new share > > on > > > the cluster, I have to set and revoke permissions with a script. I was > > told > > > that the cluster administrator for Win 2003 Enterprise had a bug and that > > the > > > GUI could not set the permissions. Does this sound familiar or do I have > > > deeper issues? > > > > > > Thanks, > > > Mark > > > > > > "Mike Rosado [MSFT]" wrote: > > > > > > > Hi Mark, > > > > > > > > I'm by no means an expert in this subject matter of GPOs, but I'll try > > to > > > > assist you to the best of my ability. > > > > > > > > This is not a Cluster specific issue. So if the resolution outlined in > > the > > > > following article doesn't work, then I would recommend you repost this > > issue > > > > in the "microsoft.public.win2000.active_directory" newsgroup. > > > > > > > > 278472 Packages Assigned to Computers with Group Policy Are Not > > Installed > > > > http://support.microsoft.com/?id=278472 > > > > > > > > -- > > > > Hope this helps, > > > > Mike Rosado > > > > Windows 2000 MCSE + MCDBA > > > > Microsoft Enterprise Platform Support > > > > Windows NT/2000/2003 Cluster Technologies > > > > > > > > ==================================================== > > > > When responding to posts, please "Reply to Group" via your newsreader so > > > > that others may learn and benefit from your issue. > > > > ==================================================== > > > > > > > > This posting is provided "AS IS" with no warranties, and confers no > > rights. > > > > <http://www.microsoft.com/info/cpyright.htm> > > > > > > > > -----Original Message----- > > > > > > > > "Mark H" <MarkH@discussions.microsoft.com> wrote in message > > > > news:C10D59C2-38C0-42BA-8344-37DB821FA7D7@microsoft.com... > > > > > I am trying to launch an MSI that is stored on a clustered volume > > using > > > > Group > > > > > Policy. When I try to deploy the same MSI stored on a non-clustered > > > > volume > > > > > it works as it should. The following error shows in the workstation > > log. > > > > > > > > > > Event Type: Error > > > > > Event Source: Application Management > > > > > Event Category: None > > > > > Event ID: 108 > > > > > Date: 11/8/2004 > > > > > Time: 9:40:08 AM > > > > > User: NT AUTHORITY\SYSTEM > > > > > Computer: HRADILT40 > > > > > Description: > > > > > Failed to apply changes to software installation settings. Software > > > > changes > > > > > could not be applied. A previous log entry with details should exist. > > > > The > > > > > error was : The installation source for this product is not available. > > > > > Verify that the source exists and that you can access it. > > > > > > > > > > Any ideas would be greatly appreciated. > > > > > > > > > > Mark > > > > > > > > > > > > > > > > > >
- Next message: Mike Rosado [MSFT]: "Re: Migrating from W2K Cluster to new 2003 Cluster"
- Previous message: Rodney R. Fournier [MVP]: "Re: Migrating from W2K Cluster to new 2003 Cluster"
- In reply to: Mark H: "Re: Cannot use GPO Deployment from Cluster Volume"
- Next in thread:
: "Re: Cannot use GPO Deployment from Cluster Volume" - Reply:
: "Re: Cannot use GPO Deployment from Cluster Volume" - Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
