what type of user should cluster run under on member server



Hi,

After demoting one of my nodes from DC to member server, the cluster
service wouldn't start. I read something that seemed to say there need
to be a local account on the member server to match the name of the
account that the cluster service runs under... at least I think that's
what it said.... so in trying to get this node back up and running,
i've made a bit of a mess of users etc, and the user it's running under
currently has way to many permissions.

If I'm at all clear on things now... I should have a user that's the
following.

Domain account which is member of the Local Computers Administrators
Group...

and then in local security give the domain account:

Act as part of the operating system
Back up files and directories
Restore files and directories
Adjust memory quotas for a process
Log on as a service
Increase scheduling priority

and make sure that the local computers administrator account can:

Manage auditing and security log
Debug programs
Impersonate a client after authentication

And after all that, I shouldn't need a local user configured on these
machines? As it is I believe I have a local user and domain user with
the same name and I think that's causing some, benign, error messages
at boot up, but would like to clean up logs anyway.... just want to do
it without breaking anything, so I'm just making sure I've got this
clear before I do it.

Thanks

.



Relevant Pages

  • Re: Question about cluster service account.
    ... During the cluster setup, provide the domain account when asked for it. ... Then I create the test cluster sqlcluster on ...
    (microsoft.public.windows.server.clustering)
  • Re: "Edit Users..." Menu Item Disabled in Telephony Management Sna
    ... On the member server, make sure the domain account you are using to log on ... Running "tapicfg show" revealed that I had no Active Directory TAPI ...
    (microsoft.public.win32.programmer.tapi)
  • Demoting a Domain Controller
    ... >with a domain account. ... That domain account will no ... >demote the machine. ... >>When using dcpromo to demote a dc to member server, ...
    (microsoft.public.win2000.active_directory)
  • Cluster Service Account Fails during Cluster Creation
    ... member servers. ... The cluster will eventually host an Exchange EVS. ... when I attempt to create the cluster I get an account error "the account ... The account is a domain account svc_cluster. ...
    (microsoft.public.windows.server.clustering)
  • Re: 0x8007005 Access is Denied adding new host to Active/Active Cluste
    ... Also ensure that this account is an Administrator ... to create the first node in a cluster or add additional nodes. ... specify the domain user account under which the Cluster service runs. ... Professional, or to administer a cluster locally from a node, you must use ...
    (microsoft.public.windows.server.clustering)