Cluster service account is missing one or more from the required set of privileges
The Cluster service has detected that it does not have one or more of the privileges that it requires. For more information, see 'Checking the privileges assigned to the Cluster service.' If you do not currently have Event Viewer open, see 'Opening Event Viewer and viewing events related to failover clustering.'
To perform the following procedures, you must be a member of the local Administrators group on each clustered server, and the account you use must be a domain account, or you must have been delegated the equivalent authority.
To check the privileges assigned to the Cluster service:
To set the correct privileges for the Cluster service:
To open Event Viewer and view events related to failover clustering:
To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
Type: SC QPRIVS CLUSSVC
To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
Type the following command or copy and paste it into the command line (copy the command, right-click the command prompt, click Paste, remove any spaces that occur between slash marks, and press ENTER): sc privs clussvc SeBackupPrivilege/SeRestorePrivilege/ SeIncreaseQuotaPrivilege/SeIncreaseBasePriorityPrivilege/ SeTcbPrivilege/SeDebugPrivilege/ SeSecurityPrivilege/SeAuditPrivilege/ SeImpersonatePrivilege/SeChangeNotifyPrivilege/ SeIncreaseWorkingSetPrivilege/SeManageVolumePrivilege
If Server Manager is not already open, click Start, click Administrative Tools, and then click Server Manager. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
In the console tree, expand Diagnostics, expand Event Viewer, expand Windows Logs, and then click System.
To filter the events so that only events with a Source of FailoverClustering are shown, in the Actions pane, click Filter Current Log. On the Filter tab, in the Event sources box, select FailoverClustering. Select other options as appropriate, and then click OK.
To sort the displayed events by date and time, in the center pane, click the Date and Time column heading.
Target | Microsoft.Windows.6.2.Cluster.Monitoring.Service | ||
Category | Alert | ||
Enabled | True | ||
Alert Generate | True | ||
Alert Severity | Error | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
|
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.6.2.Cluster.EventProvider | Default |
WA | WriteAction | Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription | Default |
<Rule ID="Microsoft.Windows.6.2.Cluster.Management.Monitoring.Cluster.service.account.is.missing.one.or.more.from.the.required.set.of.privileges" Enabled="true" Target="Clus8Library!Microsoft.Windows.6.2.Cluster.Monitoring.Service" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.Windows.6.2.Cluster.EventProvider">
<Criteria>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>1234</Value>
</ValueExpression>
</SimpleExpression>
</Criteria>
<LogName>System</LogName>
<PublisherName>Microsoft-Windows-FailoverClustering</PublisherName>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="ClusLibrary!Microsoft.Windows.Cluster.GenerateAlertAction.SuppressedByDescription">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.6.2.Cluster.Management.Monitoring.Cluster.service.account.is.missing.one.or.more.from.the.required.set.of.privileges.AlertMessage"]$</AlertMessageId>
</WriteAction>
</WriteActions>
</Rule>