Cluster Validation Create Cluster access is denied

My Configuration is a Fresh new Windows 2008 R2 machine Ready to create a 4 node cluster. When I run the Cluster validation Process it was all OK just create my cluster name With a IP and no storage. I did this in Powershell and it failed Why ? access Denied on creating the cluster .

What is wrong ?

Step One : Cluster Validation Reports all fine no major errors here.

Cluster Validation Create Cluster access is denied

Could it be a GPO that meshup my install ? <> NO

Firewall / other local settings <> NO

In powershell “admin mode” I did create a cluster / error creating cluster access denied.

Cluster Validation Create Cluster access is denied

Event logging : there are special eventlogs for clustering So I checked them.

Cluster Validation Create Cluster access is denied

So It looks OK no errors <> Dive Deeper.

Cluster Validation Create Cluster access is denied

The Cluster service successfully formed the failover cluster ‘ClusterName’.

So I can create the Cluster but after that I rolls back Whay ?

Cluster Validation Create Cluster access is denied

The cluster service has been stopped and set as disabled as part of cluster node cleanup.

Cluster Validation Create Cluster access is denied

So Access is denied Event ID 4657 I could use http://www.bing.com but there must be a hint to solve this.

There is also a Event ID 6 kerberos issues ? MaxTokenSize OK checked the register on this server. NO MaxTokenSize there.

Do I need this key ? Well I checked the Key for my domain account that I used for creating this cluster and yes It is member of 700 Groups

Who need this kind of Groups this is Windows 2008 R2 beyond the Kerberos ticket eh yeh but your Domain controller is still a windows 2003 x32 Box. 

So I put in the MaxTokenSize key rebooted and created the cluster. Case solved.

Cluster Validation Create Cluster access is denied

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters]

"MaxTokenSize"=dword:000186a0

Posted September 20, 2010 by Robert Smit in Windows 2008 R2

Tagged with ,

  • Tag