My Configuration is a Fresh new Windows 2008 R2 machine Ready to create a 4 node cluster. When I run the Cluster validation Process it was all OK just create my cluster name With a IP and no storage. I did this in Powershell and it failed Why ? access Denied on creating the cluster .
What is wrong ?
Step One : Cluster Validation Reports all fine no major errors here.
Could it be a GPO that meshup my install ? <> NO
Firewall / other local settings <> NO
In powershell “admin mode” I did create a cluster / error creating cluster access denied.
Event logging : there are special eventlogs for clustering So I checked them.
So It looks OK no errors <> Dive Deeper.
The Cluster service successfully formed the failover cluster ‘ClusterName’.
So I can create the Cluster but after that I rolls back Whay ?
The cluster service has been stopped and set as disabled as part of cluster node cleanup.
So Access is denied Event ID 4657 I could use http://www.bing.com but there must be a hint to solve this.
There is also a Event ID 6 kerberos issues ? MaxTokenSize OK checked the register on this server. NO MaxTokenSize there.
Do I need this key ? Well I checked the Key for my domain account that I used for creating this cluster and yes It is member of 700 Groups
Who need this kind of Groups this is Windows 2008 R2 beyond the Kerberos ticket eh yeh but your Domain controller is still a windows 2003 x32 Box.
So I put in the MaxTokenSize key rebooted and created the cluster. Case solved.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
"MaxTokenSize"=dword:000186a0