none
Access is denied Error Id:5 (00000005)

    Question


  • We have windows 2003 cluster with two nodes, when i move the cluster group to the secondary node, there is no problem with that, but the thing is that i cannt open the cluster administration from the secondary node and i get the error "access denied  Error Id:5 (00000005) ", only if i moved back the cluster group to the primary node,

    the last thing has been installed to the windows cluster is the service pack 2 to both node with the last windows updates.

    i dont know i dont see any thing related minitiend from microsoft,
    any one know if there is any fix update for that, or can fix the problem on the second node to be able to open the cluster administration after cluster group resources move to this node.



    Regards,

    Ayman


    Board member of ProRangers IT Pro in Kuwait (MCSA-S, MCSE-S, MCSA-M ). http://www.prorangers.net
    Friday, October 02, 2009 7:46 PM

All replies


  • It seems it is unknown problem
    what you thing guys...

    any update with that,
    Board member of ProRangers IT Pro in Kuwait (MCSA-S, MCSE-S, MCSA-M ). http://www.prorangers.net
    Sunday, October 04, 2009 4:50 PM
  • Hi,

     

    Please check the lmcompatibilitylevel values under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa on both nodes.

     

    What are their values? Are they same? Please set both of them to 0 to check the result. You can also try 1 or 2.

     

    Hope it helps.

     

    Tim Quan - MSFT

     

    Monday, October 05, 2009 8:36 AM
    Moderator


  • The values was 2 on both nodes.  but i changed the value on secoundary node which has the problem, then i restart the server, and then i moved the resources of Cluster group to the Seoundary to test if i can open the Cluster Administration from there, but i got same error.

    Regards,

    Ayman 


    Board member of ProRangers IT Pro in Kuwait (MCSA-S, MCSE-S, MCSA-M ). http://www.prorangers.net
    Monday, October 05, 2009 1:05 PM
  • Hi,

     

    Thank you for the reply.

     

    What’s the result if you change both of them to 0?  What’s the result if you change both of them to 1?

     

    Tim Quan - MSFT

     

    Tuesday, October 06, 2009 2:11 AM
    Moderator
  • Thanks for the reply,


    Acctually i did as your suggestion , i tried both value 0, 1 on both nodes, but same result.



    Regards,


    Ayman




    Board member of ProRangers IT Pro in Kuwait (MCSA-S, MCSE-S, MCSA-M ). http://www.prorangers.net
    • Edited by Ayman Hasan Tuesday, October 06, 2009 1:42 PM
    Tuesday, October 06, 2009 6:47 AM
  • Hi,

     

     

    Now I suggest setting the cluster service account password to more than 15 characters and then check the result.

     

    Related article:

     

    Cluster service account password must be set to 15 or more characters if the NoLMHash policy is enabled

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;828861

     

    If the issue persists, please let me know the error information in the Event Viewer.

     

    Hope it helps.

     

    Tim Quan - MSFT

     

    Tuesday, October 06, 2009 7:17 AM
    Moderator

  • Hi,

    The NoLmHash Plicy is disabled already, and for the Password to be 15 Characters or more; i tried this practice since the starting of the problem, but with no succeded.


       Problem still their, but i tried different way of testing now, i logged on to that node with different Domain Useraccount (local administrator privilage), here i can connect to the Cluster, so what i think ; it is  profile problem with that account on that Node which we usually used to logon to that node, now am thinking to delete that profile on this node and logon with same account and check if i can connect to Cluster from the Cluser Administration. hope this will solve the issue for the that profile.

    i will update you with the status when i do that and check.

    Thanks Tim and appreciate your participation...


    Regards,

    Ayman


    Board member of ProRangers IT Pro in Kuwait (MCSA-S, MCSE-S, MCSA-M ). http://www.prorangers.net
    Tuesday, October 06, 2009 1:34 PM

  • Hi

    I deleted the profile, and logged on again, but same result, same error.


    Still same problem with that account, i checked the local policy and compared with the first node , it is same.


    Regards,

    Ayman
    Board member of ProRangers IT Pro in Kuwait (MCSA-S, MCSE-S, MCSA-M ). http://www.prorangers.net
    Wednesday, October 07, 2009 6:23 AM
  • What’s the error shown in your Event logs?

    Wednesday, October 07, 2009 6:44 AM
    Moderator

  • Nothing appears in the Event Logs..
    Board member of ProRangers IT Pro in Kuwait (MCSA-S, MCSE-S, MCSA-M ). http://www.prorangers.net
    Wednesday, October 07, 2009 10:54 AM