Cluster nodes loosing communication

Question

Hello,
http://support.microsoft.com/kb/2462468
I have checked the services on both nodes, they are all started: Cluster Service, TCP/IP etc... all automatic services
are started on both nodes.
Log Name: Application
Source: SRMSVC
Date: 3/9/2015 11:56:25 AM
Event ID: 12317
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: MBFSCL1B.ad.
Description:
File Server Resource Manager failed to enumerate share paths or DFS paths. Mappings from local file paths to share and DFS paths may be incomplete or temporarily unavailable. FSRM will retry the operation at a later time.
Error-specific details:
Error: NetShareEnum, 0x80070005, Access is denied.
this event is only on Node B....
get-clusteraccess
IdentityReference AccessControlType ClusterRights
NT AUTHORITY\SYSTEM Allow Full
NT AUTHORITY\NETWORK SERVICE Allow Full
BUILTIN\Administrators Allow Full
NT SERVICE\MSDTC Allow Full
Where to look for more information about this issue as periodically, once or twice a week the two nodes do not see each other!!!
I restart the services (Cluster Service) and they see each other again!!!
This cluster has been working fine for 3 years and the issue came within the last two weeks!!!
- Changes:
- Tivoli upgrades
- Security tied
etc...
Node A I have also time to time some errors:
Log Name: System
Source: srv
Date: 3/10/2015 8:03:27 AM
Event ID: 2012
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: MBFSCL1A.ad
Description:
While transmitting or receiving data, the server encountered a network error. Occassional errors are expected, but large amounts of these indicate a possible error in your network configuration. The error status code is contained within the returned data (formatted as Words) and may point you towards the problem.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="srv" />
<EventID Qualifiers="32768">2012</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-03-10T15:03:27.958443300Z" />
<EventRecordID>469908</EventRecordID>
<Channel>System</Channel>
<Computer>MBFSCL1A.ad</Computer>
<Security />
</System>
<EventData>
<Data>\Device\LanmanServer</Data>
<Binary>0000040001002C0000000000DC07008000000000840100C0000000000000000000000000000000008F050000</Binary>
</EventData>
</Event>
not sure what could have created this problem, any clue?
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Answer 1

Hi Felyjos,
There have a article for the detail steps troubleshooting about this known issue, have you try it?
An Event 12317 showing access denied is caused when the NT AUTHORITY\Authenticated Users group is not a member of the BUILTIN\Users group in the domain. (As you might know, the local BUILTIN\Users group on a domain controller is mapped to the domain built-in
group Users. Therefore, the effect of removing NT AUTHORITY\Authenticated Users from the BUILTIN\Users group on a domain controller has a domain-wide effect.) 
The realted article:
Troubleshooting event ID 12317, “File Server Resource Manager failed to enumerate share paths or DFS paths.”
http://blogs.technet.com/b/filecab/archive/2006/09/29/459430.aspx
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]