"The parameter is incorrect" error and cluster validation fails against "Validate Resource" status in Windows Server 2016

Applies to: Windows Server 2016

Symptoms


When you check the Active Directory organizational unit (OU), cluster validation fails against the Validate Resource status, and you receive the following error message: 

An error occurred while executing the test. The operation has failed. An error occurred while checking the Active Directory organizational unit for the cluster name resource. The parameter is incorrect.

If you try to create the client access points, the process can still fail if the IP address used is the same as the address in the error message.

This problem can also occur after you grant CNO permission to the cluster OU, and the user also has full control permissions on the CNO object.

Cause


The parameter error is caused when authenticated users don't have default Read permissions on the default Computers container. 

Resolution


To resolve this problem, grant the Read permission to authenticated users. Authenticated users require Read permissions to objects that are in the Computers container, even if the computer objects aren’t there.

Status


A test has been added to cluster validation to specifically check for the CNO permission.