A lot of cluster errors starts here just because the cluster account has no access in the Active directory.
A sample of a DHCP server that is just created is failing.
Cluster network name resource ‘MVPDHCP79’ failed to create its associated computer object in domain ‘mvp.local’ during: Resource online.
The text for the associated error code is: A constraint violation occurred.
Please work with your domain administrator to ensure that:
– The cluster identity ‘CLUSTER12$’ has Create Computer Objects permissions. By default all computer objects are created in the same container as the cluster identity ‘CLUSTER12$’.
In the cluster manager you can see the just created resources and as you can see the DHCP resource is not online. Why ? well in the error screen you can see
Cluster network name resource ‘MVPDHCP79’ failed to create its associated computer object in domain ‘mvp.local’ during: Resource online.
The text for the associated error code is: A constraint violation occurred.
Please work with your domain administrator to ensure that:
– The cluster identity ‘CLUSTER12$’ has Create Computer Objects permissions. By default all computer objects are created in the same container as the cluster identity ‘CLUSTER12$’.
– The quota for computer objects has not been reached.
– If there is an existing computer object, verify the Cluster Identity ‘CLUSTER12$’ has ‘Full Control’ permission to that computer object using the Active Directory Users and Computers tool.
Cluster resource ‘MVPDHCP79’ of type ‘Network Name’ in clustered role ‘MVPDHCP79’ failed.
The cluster identity ‘CLUSTER12$’ has Create Computer Objects permissions. By default all computer objects are created in the same container as the cluster identity ‘CLUSTER12$’.
Ok seams clear to me the Cluster computer object has no access to create a object in the AD.
Easy to fix just give the account god mode and your done… Well yes but I do it different.
In the AD I created a OU where I placed My Cluster resources.
In my OU I do delegation of Control
I pick my cluster netbiosname and choose what to do with it. custom rule
and create object is this folder this way I have control over who and what is creating objects in my AD , all I need is that the cluster computer account can create objects in the AD.
And in my cluster I bring the DHCP online and yes is is online and in the AD there is my DHCP object
And it is creating the objects in the cluster OU
