Symptoms
On a failover cluster node of Windows Server 2008, the DNS suffix of the node's fully qualified domain name (FQDN) differs from the domain name. In this scenario, the Cluster network name resource and the File Share Witness resource may not come online.
Additionally, the following event is logged in the System log: This event reports that a cluster network interface failed. However, when you run the "Validate a Configuration" wizard as instructed by the event description, all tests are passed.
Note A configuration in which the DNS suffix of the node's FQDN differs from the domain name is also known as a "disjointed namespace configuration."
You may also experience problems when you install failover clustering. The network name fails to come online, and the following event is logged.
Log Name: System
Source: Microsoft-Windows-FailoverClustering
Date: Date_Time
Event ID: 1207
Task Category: Network Name
Resource Level: Error
Keywords:
User: SYSTEM
Computer: Computer-name.domain.com Description: Cluster network name resource 'Cluster Name' cannot be brought online. The computer object associated with the resource could not be updated in domain 'disjoined.domain.com' for the following reason: Unable to update password for computer account.
The text for the associated error code is: The password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements.
The cluster identity 'Cluster-name$' may lack permissions required to update the object. Please work with your domain administrator to ensure that the cluster identity can update computer objects in the domain.
Cause
This problem occurs because, in a disjointed namespace configuration, the system mistakes the DNS suffix for the Active Directory domain name when it performs certain actions.
Resolution
The following files are available for download from the Microsoft Download Center:
Hotfix for Windows Server 2008
Hotfix for Windows Server 2008 for Itanium-based Systems
Hotfix for Windows Server 2008 x64 Edition
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Hotfix information
Important Windows Vista and Windows Server 2008 hotfixes are included in the same packages. However, only one of these products may be listed on the “Hotfix Request” page. To request the hotfix package that applies to both Windows Vista and Windows Server 2008, just select the product that is listed on the page.
Prerequisites
To apply this update, you must have the Failover Clustering feature installed on the computer.
Restart requirement
You must restart the Cluster service after you apply this update.
Update replacement information
This update does not replace any other updates.
File information
The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows Server 2008, x86-based versions
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Clusres.dll |
6.0.6001.22170 |
911,872 |
01-May-2008 |
03:22 |
x86 |
Windows Server 2008, Itanium-based versions
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Clusres.dll |
6.0.6001.22170 |
1,913,344 |
01-May-2008 |
03:36 |
IA-64 |
Windows Server 2008, x64-based versions
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Clusres.dll |
6.0.6001.22170 |
1,152,512 |
01-May-2008 |
03:48 |
x64 |
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More Information
To use disjointed namespaces, you must verify that the msDS-AllowedDNSSuffixes attribute is set. For more information, visit the following Microsoft TechNet Web site:
http://technet2.microsoft.com/windowsserver/en/library/94117cd8-f54d-454d-aa49-c337d56619831033.mspx?mfr=trueFor more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
