On a failover cluster node of Windows Server 2008, the DNS suffix of the node's fully qualified domain name (FQDN) differs from the domain name. In this scenario, the Cluster network name resource and the File Share Witness resource may not come online.
Additionally, the following event is logged in the System log:
Log Name: System Source: Microsoft-Windows-FailoverClustering Date: Date_Time Event ID: 1127 Task Category: None Level: Error Keywords: User: SYSTEM Computer: ComputerName Description: Cluster Network interface InterfaceName for cluster node NodeName on network NetworkName failed. Run the Validate a Configuration wizard to check your network configuration.
This event reports that a cluster network interface failed. However, when you run the "Validate a Configuration" wizard as instructed by the event description, all tests are passed.
Note A configuration in which the DNS suffix of the node's FQDN differs from the domain name is also known as a "disjointed namespace configuration."
You may also experience problems when you install failover clustering. The network name fails to come online, and the following event is logged.
Log Name: System Source: Microsoft-Windows-FailoverClustering Date: Date_Time Event ID: 1207 Task Category: Network Name Resource Level: Error Keywords: User: SYSTEM Computer: Computer-name.domain.com Description: Cluster network name resource 'Cluster Name' cannot be brought online. The computer object associated with the resource could not be updated in domain 'disjoined.domain.com' for the following reason: Unable to update password for computer account.
The text for the associated error code is: The password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements.
The cluster identity 'Cluster-name$' may lack permissions required to update the object. Please work with your domain administrator to ensure that the cluster identity can update computer objects in the domain.
This problem occurs because, in a disjointed namespace configuration, the system mistakes the DNS suffix for the Active Directory domain name when it performs certain actions.
The following files are available for download from the MicrosoftDownload Center:
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Important Windows Vista and Windows Server 2008 hotfixes are included in the same packages. However, only one of these products may be listed on the “Hotfix Request” page. To request the hotfix package that applies to both Windows Vista and Windows Server 2008, just select the product that is listed on the page.
To apply this update, you must have the Failover Clustering feature installed on the computer.
You must restart the Cluster service after you apply this update.
Update replacement information
This update does not replace any other updates.
The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows Server 2008, x86-based versions
Windows Server 2008, Itanium-based versions
Windows Server 2008, x64-based versions
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
To use disjointed namespaces, you must verify that the msDS-AllowedDNSSuffixes attribute is set. For more information, visit the following Microsoft TechNet Web site: