Re: 0x8007005 Access is Denied adding new host to Active/Active Cl



Hi William,

Did anyone confirm if you might have been experiencing the following issue?

909444 Systems that have changed the default Access Control List
permissions on
http://support.microsoft.com/?id=909444

--------------------
Hope this helps,
Mike Rosado
Windows 2000 MCSE + MCDBA
Microsoft Enterprise Platform Support
Windows NT/2000/2003 Cluster Technologies

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
<http://www.microsoft.com/info/cpyright.htm>

-----Original Message-----
> From: <WilliamDelgado@xxxxxxxxxxxxxxxxxxxxxxxxx>
> Subject: Re: 0x8007005 Access is Denied adding new host to Active/Active
Cl
> Date: Mon, 12 Dec 2005 10:56:05 -0800
>
> I got it going, thanks!!
>
> DCOM was disabled on one the host servers.
>
> I did notice this in the past and checked to enable it. Ran the wizard
again
> and it failed. I then restarted the computer and tried it again,... same
> result.
>
> I finally gave up called Microsoft Tech Support and was asked to go and
> check the dcom settings again and DARN!! it was unchecked again! I then
> checked it once again and clicked ok and ok to close everything.. waited
a
> bit and whent back to check the setting.. IT WAS OFF AGAIN!!
>
> So this time I went back in, checked it BUT this time I clicked APPLY
then
> OK. Exited and whent back in and this time it kept it.
>
> I then proceeded to run the wizzard and WAM!@ it worked.!@
>
> I am disappointed though that I had to pay 250.00 for what seemed to be a
> product flaw.
>
>
> "Ryan Sokolowski [MVP]" wrote:
>
> > This is definitely a security issue. ENSURE that you have the correct
user
> > name and password. Also ensure that this account is an Administrator
> > account...more here:
> >
> >
http://technet2.microsoft.com/WindowsServer/en/Library/95262efc-eb22-453e-90
00-f8f3e378c0de1033.mspx
> >
> > Domain accounts and the Cluster service
> > You must log on using an account that is a member of an Administrators
group
> > to create the first node in a cluster or add additional nodes. All
nodes
> > must have joined a domain (instead of a workgroup) and be members of
the
> > same domain. When you create a cluster or join nodes to a cluster, you
> > specify the domain user account under which the Cluster service runs.
It is
> > best if the Cluster service user account is a new account. The account
must
> > have local administrative rights and permissions on the cluster nodes.
In
> > addition, make sure that applications (for example, Microsoft SQL
Server
> > 2000) do not use the same account as the Cluster service account. Be
sure to
> > keep the password from expiring on the account (follow your
organization's
> > policies for password renewal).
> >
> > When you install the operating system on a member server, Setup adds
the
> > Cluster service account as a member of the local Administrators group.
When
> > you install the operating system on a domain controller, Setup gives
> > cluster-administrative permissions to the Domain Administrators group.
> >
> > When you use Cluster Administrator to administer a cluster from a
remote
> > location, such as from another server or a computer running Windows XP
> > Professional, or to administer a cluster locally from a node, you must
use
> > an account that is a member of the local Administrators group on all
nodes.
> > For more information, see Give a user permissions to administer a
cluster .
> >
> > Note
> >
> > . You can use an account that is a domain user account or a
member of
> > a global group to remotely or locally administer a cluster if you use
> > cluster.exe or cluster scripting tools. For more information, see
Cluster
> > and the Microsoft Platform Software Development Kit (SDK).
> >
> >
> > If you have administrative permissions on all nodes of the cluster, you
can
> > fully administer the cluster. However, if you have only specific
permissions
> > to administer the cluster, you cannot change the cluster description,
change
> > cluster security, or register extensions to Cluster Administrator.
> >
> > For information on changing the account used to run the Cluster
service, see
> > Change the account under which the Cluster service runs .
> >
> > For information on changing the password for the Cluster service
account,
> > see Change the Cluster service account password .
> >
> > Hope this helps...
> >
> > --
> > Ryan Sokolowski
> > MVP - Windows Server - Clustering
> > MCSE, CCNA, CCDA, BCFP
> >
> > "A troubleshooter's best tool is the Event Viewer and understanding the
> > events and messages contained therein."
> >
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> > "William Delgado" <William Delgado@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
> > message news:98858AC8-F0BF-4115-9341-BD4CF3F8FE5C@xxxxxxxxxxxxxxxx
> > > Hello all,
> > >
> > > I have spent days looking at this and I cant come up with an answer.
> > >
> > > I have an active/active cluster providing simple file sharing
services. I
> > > want to extend this to an active/active/passive model.
> > >
> > > When It starts its Analyzing Configuration Wizard it stops with the
> > > following error message:
> > >
> > >
_______________________________________________________________________
> > > Date: 12/9/2005
> > > Time: 8:51:25 AM
> > > Computer: NEWHOST
> > > Major Task ID: {93C32F99-39CA-4D38-9D7F-2707CA0EAF46}
> > > Minor Task ID: {E88B08DD-2460-4DF1-B5C2-28587DD164EA}
> > > Progress (min, max, current): 0, 1, 1
> > > Description:
> > >
> > > Status: 0x80070005
> > > Access is denied.
> > > Additional Information:
> > > For more information, visit Help and Support Services at
> > > http://go.microsoft.com/fwlink/?LinkId=4441.
> > >
_______________________________________________________________________
> > >
> > > I am using the same domain account on both of them.
> > >
> > > Could anyone help me out?
> > >
> >
> >
> >
>

.



Relevant Pages

  • Re: 0x8007005 Access is Denied adding new host to Active/Active Cl
    ... Also ensure that this account is an Administrator ... > to create the first node in a cluster or add additional nodes. ... > specify the domain user account under which the Cluster service runs. ... > Professional, or to administer a cluster locally from a node, you must use ...
    (microsoft.public.windows.server.clustering)
  • Re: 0x8007005 Access is Denied adding new host to Active/Active Cluste
    ... Also ensure that this account is an Administrator ... to create the first node in a cluster or add additional nodes. ... specify the domain user account under which the Cluster service runs. ... Professional, or to administer a cluster locally from a node, you must use ...
    (microsoft.public.windows.server.clustering)
  • Re: Clstr Servce wont start after changing logon account
    ... I didn't enable cluster logging. ... service won't start after changing the account. ... try changing the cluster service account to ... changes was to be able to change the domain administrator password ...
    (microsoft.public.windows.server.clustering)
  • Re: Clstr Servce wont start after changing logon account
    ... By any chance did you enable cluster logging? ... try changing the cluster service account to ... You said "Server1 runs as domain controller unless something goes wrong at ... What advantage does that have over having 2 separate DCs? ...
    (microsoft.public.windows.server.clustering)
  • Re: Creating Cluster through point to point VPN
    ... The account works, I can log into the system with the cluster service ... the user has not been granted the requested logon type at ...
    (microsoft.public.windows.server.clustering)