Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

The Cluster network name resource and the File Share Witness resource may not come online on a Windows Server 2008 failover cluster node if a disjointed namespace is configured


View products that this article applies to.

Symptoms

On a failover cluster node of Windows Server 2008, the DNS suffix of the node's fully qualified domain name (FQDN) differs from the domain name. In this scenario, the Cluster network name resource and the File Share Witness resource may not come online.

Additionally, the following event is logged in the System log: This event reports that a cluster network interface failed. However, when you run the "Validate a Configuration" wizard as instructed by the event description, all tests are passed.

Note A configuration in which the DNS suffix of the node's FQDN differs from the domain name is also known as a "disjointed namespace configuration."

You may also experience problems when you install failover clustering. The network name fails to come online, and the following event is logged.

Log Name: System

Source: Microsoft-Windows-FailoverClustering

Date: Date_Time

Event ID: 1207

Task Category: Network Name
Resource Level: Error

Keywords:

User: SYSTEM

Computer: Computer-name.domain.com Description: Cluster network name resource 'Cluster Name' cannot be brought online. The computer object associated with the resource could not be updated in domain 'disjoined.domain.com' for the following reason: Unable to update password for computer account.



The text for the associated error code is: The password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements.




The cluster identity 'Cluster-name$' may lack permissions required to update the object. Please work with your domain administrator to ensure that the cluster identity can update computer objects in the domain.

↑ Back to the top


Cause

This problem occurs because, in a disjointed namespace configuration, the system mistakes the DNS suffix for the Active Directory domain name when it performs certain actions.

↑ Back to the top


Resolution

The following files are available for download from the Microsoft Download Center:

Hotfix for Windows Server 2008
Download Download the hotfix for Windows Server 2008 package now.

Hotfix for Windows Server 2008 for Itanium-based Systems
Download Download the hotfix for Windows Server 2008 for Itanium-based Systems package now.

Hotfix for Windows Server 2008 x64 Edition
Download Download the hotfix for Windows Server 2008 x64 Edition package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Hotfix information

Important Windows Vista and Windows Server 2008 hotfixes are included in the same packages. However, only one of these products may be listed on the “Hotfix Request” page. To request the hotfix package that applies to both Windows Vista and Windows Server 2008, just select the product that is listed on the page.

Prerequisites

To apply this update, you must have the Failover Clustering feature installed on the computer.

Restart requirement

You must restart the Cluster service after you apply this update.

Update replacement information

This update does not replace any other updates.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows Server 2008, x86-based versions
File nameFile versionFile sizeDateTimePlatform
Clusres.dll6.0.6001.22170911,87201-May-200803:22x86
Windows Server 2008, Itanium-based versions
File nameFile versionFile sizeDateTimePlatform
Clusres.dll6.0.6001.221701,913,34401-May-200803:36IA-64
Windows Server 2008, x64-based versions
File nameFile versionFile sizeDateTimePlatform
Clusres.dll6.0.6001.221701,152,51201-May-200803:48x64

↑ Back to the top


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top


More Information

To use disjointed namespaces, you must verify that the msDS-AllowedDNSSuffixes attribute is set. For more information, visit the following Microsoft TechNet Web site:
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

↑ Back to the top


Keywords: kbexpertiseinter, kbbug, kbfix, kbhotfixserver, kbqfe, atdownload, kb, kbclustering

↑ Back to the top

Article Info
Article ID : 952247
Revision : 2
Created on : 4/9/2020
Published on : 4/9/2020
Exists online : False
Views : 431