Re: Cluster Service Account Changes on W2K Cluster

Tech-Archive recommends: Speed Up your PC by fixing your registry


How to manually re-create the Cluster service account
http://support.microsoft.com/kb/269229/en-us#E0KB0ACAAA


Cluster account is not to have domain admin or administrator rights on the
domain; it is to have local administrator rights on each of the nodes


"DaveK" <DaveK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E7DF19AD-264B-42F8-8675-5C1B295EDFA9@xxxxxxxxxxxxxxxx
I need to modify the cluster service account ID, as our old domain accounts
are being migrated to a new domain. Is it just a matter of going into
services and modifying the account/password, or is there some other
location
where this is controlled. My plan was to:
1 Stop the service on the inactive node
2. Restart the service with new account
3. Move services to formerly inactive node
4. Repeat process on remaining node.
If that won't work, does anyone have any other suggestions? Also,
does the new account need to be a domain admin? Seems to me I read
somewhere the account needs to be a domain admin.

Thanks for any advice.


.

Relevant Pages

  • RE: Does ADMT tool only work under Domain Admin, but not OU Admin leve
    ... o Administrator rights on each computer that you migrate. ... it is not required to finish the ADMT ... account as member of Administrators group. ... Does ADMT tool only work under Domain Admin, ...
    (microsoft.public.windows.server.migration)
  • Re: Finding a Hacker
    ... definitely had the capability to obtain the domain admin credentials and may ... If the hacker did get in remotely using an administrator account on the ... Your problem is not restricting remote desktop connections. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Need to filter domain admin from GPO
    ... But think always about the part that a deny is the highest blocking you set and if you forget that you have set a deny or you are not in and someone else have to search for errors, it will be really heavy to find it. ... It's best practice to use a 2nd administrator account as your ... Block inheritance (I would have to move the domain admin from ... particular GPO using ACL deny. ...
    (microsoft.public.windows.group_policy)
  • Re: Administrator--Client installation account problem
    ... I stated the account was only required to be a ... Of course if it is a domain admin that works also. ... Jeff said to use a Regular domain user, ... You do not have to be in advanced security to push the client. ...
    (microsoft.public.sms.admin)
  • Re: Need to filter domain admin from GPO
    ... Normally Block inheritance works fine. ... What GPO setting do you like to filter? ... It's best practice to use a 2nd administrator account as your regular ... Block inheritance (I would have to move the domain admin from ...
    (microsoft.public.windows.group_policy)