Re: Clstr Servce wont start after changing logon account
- From: "Rodney R. Fournier [MVP]" <rod@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 29 May 2006 15:04:44 -0500
It's all about HA and best practices, if you don't see that, that is cool.
Not my org :)
Cheers,
Rodney R. Fournier
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://www.msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner
"Scott Ford" <removethis.scott@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E6EEC64F-51D1-48D3-BBB6-5275BE797AFB@xxxxxxxxxxxxxxxx
Sure there is, if you don't want to buy another server. When I upgraded my
company's p2p network, they gave me a tight budget to work on. The new
system
had to be a 24/7 system, with failover capabilities to run a retail
ticketing
system. There was no room for downtime. I chose to install an IBM 2 node
cluster and a RAID hard drive system. Server1 runs as domain controller
unless something goes wrong at which time it fails over to server2 which
is
set up to take over DC duties should a failover occur. It has failed over
a
couple times, and we had no problems. It works perfectly and always has.
I'm
pretty sure that the problem I'm asking about is unrelated to whether or
not
my DCs are clustered. And I ask you, if something DOES work, and it saves
you
money then why NOT use it? Microsoft developed the system, and they say it
works. What is the big downside you are trying to relate? Post me an
article
that explains why its not good to have a clustered DC. Not that I will be
changing it (unless of course you want to mail me a decent server I can
set
up as a new DC lol)
Cheers,
Scott Ford
"Rodney R. Fournier [MVP]" wrote:
Never cluster a DC, just because it works does not make a great idea.
What
benefit did you get clustering a DC anyway? There really is no point.
Cheers,
Rodney R. Fournier
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://www.msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner
"Scott Ford" <removethis.scott@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:7823B2A6-0725-4FA7-8F86-E821343F4636@xxxxxxxxxxxxxxxx
I have had my DC's clustered for 3 years, with no trouble. Both nodes on
the
cluster are domain controllers in an active/passive configuration.
Microsoft
article 281662 discusses this as a viable solution, so I'm not sure
where
you
are getting that this is something I have done wrong. The permissions
you
mentioned in your post are already present for the account I am trying
to
use
as the cluster service log on account.
--
Scott Ford
"John Toner [MVP]" wrote:
Well for starters, you clustered a DC.
Make sure the account also has these rights:
- Debug programs
- Impersonate a client after authentication
- Manage auditing and security log
Regards,
John
"Scott Ford" <removethis.scott@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:0F15AA5F-4A5E-4CBC-ABD5-E9041EF24F12@xxxxxxxxxxxxxxxx
I recently decided to make some changes to increase security. One oflonger
those
changes was to be able to change the domain administrator password
without
having to update the account log on information in the services
applet.
I
created a new account. Let's just call it Prime. After creting the
account
and changing the log on information in the services panel, I can not
start the cluster service. As soon as I click start, i get thisfashion"
error:
Could not start the cluster service on local computer. Error 1053:
The
service did not respond to the start or control request in a timely
group
As printed in Microsoft article 269229 I gave Prime the following
rights
locally on the 2 nodes that are attached to the cluster:
* Act as part of the operating system
. Adjust memory quotas for a process
. Back up files and directories
. Increase scheduling priorities
. Log on as a service
. Restore files and directories
I also added Prime to all administrative domain groups (enterprise
admins,
domain admins, etc)
Im not sure how to make sure that Prime is in the local
administrators
on a domain controller. Can anyone tell me what I'm doing wrongThanks
here?
!!
--
Scott Ford
.
- Follow-Ups:
- Re: Clstr Servce wont start after changing logon account
- From: Scott Ford
- Re: Clstr Servce wont start after changing logon account
- References:
- Re: Clstr Servce wont start after changing logon account
- From: John Toner [MVP]
- Re: Clstr Servce wont start after changing logon account
- From: Scott Ford
- Re: Clstr Servce wont start after changing logon account
- From: Rodney R. Fournier [MVP]
- Re: Clstr Servce wont start after changing logon account
- From: Scott Ford
- Re: Clstr Servce wont start after changing logon account
- Prev by Date: Redundant Network in Cluster IP Resource
- Next by Date: MSCS with NAS
- Previous by thread: Re: Clstr Servce wont start after changing logon account
- Next by thread: Re: Clstr Servce wont start after changing logon account
- Index(es):
Relevant Pages
|