Problem with Windwos 2008 cluster

[William]

I have two node cluster created in windows 2008. But when I try to create a
file server cluster, I got an error:

Cluster network name resource 'sqltestcluter' failed to create its
associated computer object in domain for the following reason: Unable to
obtain access to Computer Object in DS.
The text for the associated error code is: Access is denied.
Please work with your domain administrator to ensure that:
- The cluster identity 'testcluster$' can create computer objects. By
default all computer objects are created in the 'Computers' container;
consult the domain administrator if this location has been changed.
- The quota for computer objects has not been reached.
- If there is an existing computer object, verify the Cluster Identity
'testcluster$' has 'Full Control' permission to that computer object using
the Active Directory Users and Computers tool.

I have pre-created sqltestcluster in our OU and give testcluster$ full
access to the computer. But I still not be able to bring sqltestcluster
online. anyone has any idea why? Thanks,

William

[William]

Thanks for the reply.

I did created CNO first (pre-stage the computer account in AD) and create
the cluster without problem.
But when I did that for VCO (pre-stage computer account in AD), I got the
error. Even though, I have gaven CNO create computer object right on the OU
where CNO resides. Also I have given CNO full access right to VCO object. I
do not know why it still complain about access right?

William
"Russ Kaufmann" wrote:

> "William" <William@discussions.microsoft.com> wrote in message
> news:08832C29-75C5-46A9-866C-D42B7ACCA4E5@microsoft.com...
> >I have two node cluster created in windows 2008. But when I try to create
> >a
> > file server cluster, I got an error:
> >
> > Cluster network name resource 'sqltestcluter' failed to create its
> > associated computer object in domain for the following reason: Unable to
> > obtain access to Computer Object in DS.
> > The text for the associated error code is: Access is denied.
>
> Since we don't use service accounts in 2008 Failover Clustering, the
> original Cluster Name Object must have the ability to create computer
> accounts in Active Directory. However, the easiest way to deal with this is
> to pre-stage the computer account.
>
> --
> Russ Kaufmann,
> MVP, MCSE: Messaging and Security, MCT, MCITP, MCTS and other stuff
>
> ClusterHelp.com, a Microsoft Certified Gold Partner
> Web http://www.clusterhelp.com
> Blog http://msmvps.com/clusterhelp
>
> The next ClusterHelp class is:
> Oct 27-30 in New York
>

[Vax]

Pre-stage the computer account was not a solution in my case (same problem,
windows 2008 cluster).
Solution was to delegate control to Computers OU for cluster computer object.
The solution was in fact in error description:
"ensure that:
- The cluster identity 'testcluster$' can create computer objects. By
default all computer objects are created in the 'Computers' container;"

I decided to publish this for future users who searching the web :)