The Cluster service has detected that it does not have one or more of the privileges that it requires. For more information, see "Checking the privileges assigned to the Cluster service." If you do not currently have Event Viewer open, see "Opening Event Viewer and viewing events related to failover clustering."
To perform the following procedures, you must be a member of the local Administrators group on each clustered server, and the account you use must be a domain account, or you must have been delegated the equivalent authority.
To check the privileges assigned to the Cluster service:
SC QPRIVS CLUSSVC
To set the correct privileges for the Cluster service:
sc privs clussvc SeBackupPrivilege/SeRestorePrivilege/
SeIncreaseQuotaPrivilege/SeIncreaseBasePriorityPrivilege/
SeTcbPrivilege/SeDebugPrivilege/
SeSecurityPrivilege/SeAuditPrivilege/
SeImpersonatePrivilege/SeChangeNotifyPrivilege/
SeIncreaseWorkingSetPrivilege/SeManageVolumePrivilege
To open Event Viewer and view events related to failover clustering:
Target | Microsoft.Windows.2008.Cluster.Monitoring.Service | ||
Category | Alert | ||
Enabled | True | ||
Alert Generate | True | ||
Alert Severity | Error | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
|
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.2008.Cluster.EventProvider | Default |
WA | WriteAction | Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription | Default |
<Rule ID="Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.account.is.missing.one.or.more.from.the.required.set.of.privileges" Enabled="onEssentialMonitoring" Target="Clus2008Library!Microsoft.Windows.2008.Cluster.Monitoring.Service" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.Windows.2008.Cluster.EventProvider">
<Criteria>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>1234</Value>
</ValueExpression>
</SimpleExpression>
</Criteria>
<LogName>System</LogName>
<PublisherName>Microsoft-Windows-FailoverClustering</PublisherName>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="ClusLibrary!Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.2008.Cluster.Management.Monitoring.Cluster.service.account.is.missing.one.or.more.from.the.required.set.of.privileges.AlertMessage"]$</AlertMessageId>
</WriteAction>
</WriteActions>
</Rule>