Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Cluster validation fails if OU name contains a slash character in Windows Server 2012 R2


View products that this article applies to.

Symptoms

If you have a cluster nodes computer account that belongs to an organizational unit (OU) that has a slash character (/) in its name, you encounter the following error during cluster validation in a Windows Server 2012 R2 environment.

Validate Active Directory Configuration

Description: Validate that all the nodes have the same domain, domain role, and organizational unit.
Validating that all nodes have the same domain, domain role, and organizational unit.
Fqdn Domain Domain Role Site Name Organizational Unit
W2k12_R2_Node2.fk.com fk.com Member Server Default-First-Site-Name OU=tes/dev
W2k12_R2-Node1.fk.com fk.com Member Server Default-First-Site-Name OU=tes/dev
The service principal names (SPNs) of node W2k12_R2_Node2.fk.com could not be determined because of this error: Unknown error (0x80005000)
The service principal names (SPNs) of node W2k12_R2-Node1.fk.com could not be determined because of this error: Unknown error (0x80005000)
Node(s) W2k12_R2_Node2.fk.com W2k12_R2-Node1.fk.com can reach a writable domain controller.
The user can create computer objects in the 'fk.com' domain in the 'OU=tes/dev,DC=fk,DC=com' organizational unit.
To successfully create a cluster, either the installer must have the privileges needed to create computer objects in the container of the cluster node computer objects, or a computer object must be pre-created by a domain administrator.
The user creating the cluster requires the 'Create Computer Object' permission on the container where computer objects are created in the domain. If the default container has been modified, then this privilege will need to be granted to the user for the new container.
If a pre-existing computer object is used, please ensure that the computer object is in a Disabled state and that the user creating the cluster has 'Full Control' permission to that computer object using the Active Directory Users and Computers tool prior to creating the cluster.

↑ Back to the top


Workaround

To work around this issue, change the name of the OU so that it doesn't include a slash character (/). Or, move the cluster nodes computer objects to another OU that has no slash character in its name.

↑ Back to the top


Keywords: kb

↑ Back to the top

Article Info
Article ID : 3200150
Revision : 1
Created on : 1/7/2017
Published on : 10/19/2016
Exists online : False
Views : 207