Windows 2012 3(three) Node custer Quorum Configuration
Hi
I have 3 Node windows 2012 R2 cluster. now i wanted to perform the quorum configuration so if any body having document or steps please let us know.
Hi SPV4645,
Since we don’t know which witness you will use, please refer the following series of article to determine which type is the best choose.
Introduction to the Cluster Quorum Model (Part 2)
http://blogs.msdn.com/b/clustering/archive/2010/06/15/10024985.aspx
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Similar Messages
-
File Share Cluster Transfer Issues - Windows 2012 R2 - Two Nodes
Hi There,
I am having some issues in creating a simple file share on a 2 node cluster.
Each "File Server" is Windows 2012 R2 Standard.
Each server has 4 Nic Ports, 2 are configured as a Control Team and the other 2 as a Media Team. The media team is specifically for any storage and file sharing traffic, the control team is purely for access to the server via RDC.
The storage is from a NetApp SAN connected via SAS cables to the 2 "File Servers" and transfer speeds to and from that are good (1GB/s)
I have looked at different step-by-steps to get this working, they all are similar to: https://robertsmit.wordpress.com/2012/06/26/clustering-fileserver-on-windows-2012-step-by-step/
The share permissions are configured with Everyone with Full Control.
Once the file shares are all set up, I can browse the shares and any current folders and files.
I can download any files that exist on these shares...
The issue is when I try to put a file on the share from a "client" server (win 2008 r2) or even from the other node (connecting to the file share location as I would on another machine)
I just get the copying dialogue attached, which sits there for about 3-4 minutes and then just finishes with a Network Error.
This only occurs during an upload of a file to the share.
All servers can ping each other, there are no cluster event errors..
Can anyone help, I need to get this fixed ASAP.
If you need more info then please ask.
Thanks,
-TimHi Tim,
Did you run the cluster validation before you create this cluster? Please disable any firewall or AV soft and install the recommended hotfixes and updates for Windows Server
2012 R2-based failover clusters update to narrow down the issue first.
Recommended hotfixes and updates for Windows Server 2012 R2-based failover clusters
http://support.microsoft.com/kb/2920151
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected] -
Hi,
Can i know how the High Availability feature works foe three node cluster.I configured two node cluster and it works fine, if one goes down the other runs the application. What in case of three node or higher topology cluters.
Is the High availability feature confined to two node cluster , if not how it works for higher topology clusters.
Can anyone help me on this.This assumes you use the agent builder to do this. If that is the case, you will need to put each of the generated packages on all of the nodes of the cluster. However, it's probably far easier to just create the resources from the command line. You only actually need to specify a start method, e.g
# clrg create my-rg
# clrs create -t SUNW.gds -g my-rg -p network_aware=false -p Start_command=/var/tmp/gds-start my-gds-rs
where /var/tmp/gds-start in my case contains:
#!/bin/ksh
sleep 100000 &
but in your case would contain the start commands for you application - which leaves some sort of process tree in place. If the process in the tree all fail, then the service would be restarted.
Have a look at the other resources on the web about writing GDS services.
Tim
--- -
Windows 2012 Nodes - Slow CSV Performance - Need help to resolve my iSCSI issue configuration
I spent weeks going over the forums and the net for any publications and advice on how to optimize iSCSI connections and i'm about to give up. I really need some help in determining if its something i'm not configuring right or maybe its an equipment
issue.
Hardware:
2x Windows 2012 Hosts with 10 Nics (same NIC configuration) in a Failover Cluster sharing a CSV LUN.
3x NICs Teamed for Host/Live Migration (192.168.0.x)
2x NICS teamed for Hyper-V Switch 1 (192.168.0.x)
1x NIC teamed for Hyper-V Switch 2 (192.168.10.x)
4x NICs for iSCSI traffic (192.168.0.x, 192.168.10.x, 192.168.20.x 192.168.30.x)
Jumbo frames and flow control turned on all the NICs on the host. IpV6 disabled. Client for Microsoft Network, File/Printing Sharing Disabled on iSCSI NICs.
MPIO Least Queue selected. Round Robin gives me an error message saying "The parameter is incorrect. The round robin policy attempts to evenly distribute incoming requests to all processing paths. "
Netgear ReadyNas 3200
4x NICs for iSCSI traffic ((192.168.0.x, 192.168.10.x, 192.168.20.x 192.168.30.x)
Network Hardware:
Cisco 2960S managed switch - Flow control on, Spanning Tree on, Jumbo Frames at 9k - this is for the .0 subnet
Netgear unmanaged switch - Flow control on, Jumbo Frames at 9k - this is for .10 subnet
Netgear unmanaged switch - Flow control on, Jumbo Frames at 9k - this is for .20 subnet
Netgear unmanaged switch - Flow control on, Jumbo Frames at 9k - this is for .30 subnet
Host Configuration (things I tried turning on and off):
Autotuning
RSS
Chimney Offload
I have 8 VMs stored in the CSV. When try to load all 8 up at the same time, they bog down. Each VM loads very slowly and when they eventually come up, most of the important services did not start. I have to load
them up 1 or 2 at a time. Even then the performance is nothing like if they were loading up on the Host itself (VHD stored on the host's hdd). This is what prompted me to add in more iSCSI connections to see if I can improve the VM's
performance. Even with 4 iSCSI connections, I feel nothing has changed. The VMs still start up slowly and services do not load right. If I distribute the load with 4 VMs on Host 1 and 4 VMs on Host 2, the load up
times do not change.
As a manual test for file copy speed, I moved the cluster resources to Host 1 and copied a VM from the CSV and onto the Host. The speed would start out around 250megs/sec and then eventually drop down to about 50/60 megs/sec. If I turn
off all iSCSI connections except one, it get the same speed. I can verify from the Windows Performance Tab under Task Manager that all the NICS are distributing traffic evenly, but something is just limiting the flow. Like what I stated on top,
I played around with autotuning, RSS and chimney offload and none of it makes a difference.
The VMs have been converted to VHDx and to fixed size. That did not help.
Is there something I'm not doing right? I am working with Netgear support and they are puzzled as well. The ReadyNas device should easily be able to handle it.
Please help! I pulled my hair out over this for the past two months and I'm about to give up and just ditch clustering all together and just run the VMs off the hosts themselves.
GeorgeA few things...
For starters, I recommend opening a case with Microsoft support. They will be able to dig in and help you...
Turn on the CSV Cache, it will boost your performance
http://blogs.msdn.com/b/clustering/archive/2012/03/22/10286676.aspx
A file copy has no resemblance of the unbuffered I/O a VM does... so don't use that as a comparison, as you are comparing apples to oranges.
Do you see any I/O performance difference between the coordinator node and the non-coordinator nodes? Basically, see which node owns the cluster Physical Disk resource... measure the performance. Then move the Physical Disk resource for the
CSV volume to another node, and repeat the same measure of performance... then compare them.
Your IP addressing seems odd... you show multiple networks on 192.168.0.x and also on 192.168.10.x. Remember that clustering only recognizes and uses 1 logical interface per IP subnet. I would triple check all your IP schemes...
to ensure they are all different logical networks.
Check you binding order
Make sure you NIC drivers and NIC firmware are updated
Make sure you don't have IPsec enabled, that will significantly impact your network performance
For the iSCSI Software Initiator, when you did your connection... make sure you didn't do a 'Quick Connect'... that will do a wildcard and connect over any network. You want to specify your dedicated iSCSI network
No idea what the performance capabilities of the ReadyNas is... this could all likely be associated with the shared storage.
What speed NIC's are you using? I hope at least 10 GB...
Hope that helps...
Elden
Hi Elden,
2. CSV is turned on, I have 4GB dedicated from each host to it. With IOmeter running within the VMs, I do see the read speed jumped up 4-5x fold but the write speed stays the same (which according to the doc it should). But even with the read
speed that high, the VMs are not starting up quickly.
4. I do not see any difference with IO with coordinator and non coordinator nodes.
5. I'm not 100% sure what your saying about my IPs. Maybe if I list it out, you can help explain further.
Host 1 - 192.168.0.241 (Host/LM IP), Undefined IP on the 192.168.0.x network (Hyper-V Port 1), Undefined IP on the 192.168.10.x network (Hyper- V port 2), 192.168.0.220 (iSCSI 1), 192.168.10.10 (iSCSI2), 192.168.20.10(iSCSI 3), 192.168.30.10 (iSCSI 4)
The Hyper-V ports are undefined because the VMs themselves have static ips.
0.220 host NIC connects with the .231 NIC of the NAS
10.10 host NIC connects with the 10.100 NIC of the NAS
20.10 host NIC connects with the 20.100 NIC of the NAS
30.10 host NIC connects with the 30.100 NIC of the NAS
Host 2 - 192.168.0.245 (Host/LM IP), Undefined IP on the 192.168.0.x network (Hyper-V Port 1), Undefined IP on the 192.168.10.x network (Hyper- V port 2), 192.168.0.221 (iSCSI 1), 192.168.10.20 (iSCSI2), 192.168.20.20(iSCSI 3), 192.168.30.20 (iSCSI 4)
The Hyper-V ports are undefined because the VMs themselves have static ips.
0.221 host NIC connects with the .231 NIC of the NAS
10.20 host NIC connects with the 10.100 NIC of the NAS
20.20 host NIC connects with the 20.100 NIC of the NAS
30.20 host NIC connects with the 30.100 NIC of the NAS
6. Binding orders are all correct.
7. Nic drivers are all updated. Didn't check the firmware.
8. I do not know about IPSec...let me look into it.
9. I did not do quick connect, each iscsi connection is defined using a specific source ip and specific target ip.
These are all 1gigabit nics, which is the reason why I have so many NICs...otherwise there would be no reason for me to have 4 iscsi connections. -
Hello There,
Issue: High Memory Utilization in Below Scenario. Pl. See the below configuration of Win 12 Server
Pl. see for committed memory bytes . m little bit confused that about committed memory
OS: Windows Server 2012
Memory: Total 24 GB Free:1.3 GB Committed:27.6 GB
App Configure: Three Hyper V Instances Configure For Lync Server 2013
Pls provide me solution on this issueVirtual memory system. Committed memory is the physical memory for which space has been reserved in the disk paging file. So, you are paging, which is quite common in virtual memory systems.
On a completely different topic. Lync is an application that works best on real cores. Most systems are configured by default to use hyperthreading. Hyperthreading increases the logical processor count on a system and logical processors
are treated equally. Since a hyperthread 'core' (logical processor) performs at a small fraction of a real core (logical processor), if you are running VMs that work best with real cores, it is best to change your BIOS on the Hyper-V host to disable
hyperthreading, sometimes called simultaneous multithreading (SMT).
. : | : . : | : . tim -
Upgrade from windows 2008 R2 to windows 2012 and Quorum
Dear Sir.
I am going to upgrade hyper-v cluster of 4 nodes 2008 r2 to windows 2012 hyper-v cluster.
i am going to evict tow node and build new cluster.
should I configure new quorum for new cluster or can i use the the quorum from old system ?
thanksHi,
Base on my experience, you need create a new cluster when you choose migrate the cluster, so you need the new witness disk.
The
related article:
Best practices for migration of cluster windows 2008 R2 / 2012 - As melhores Praticas para migrar um Cluster de Windows 2008 para Windows 2012
http://blogs.technet.com/b/hugofe/archive/2012/12/06/best-practices-for-migration-of-cluster-windows-2008-r2-2012-as-melhores-praticas-para-migrar-um-cluster-de-windows-2008-para-windows-2012.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
Windows 2012 Teaming configuration
Dear All,
i want to configure teaming in windows 2012. i have 4 lan card and i am confuse in switch dependent and switch independant.
which option gives me best performance? this server having failover cluster node.
teaming will create any problem with cluster?
please help
Sunil
SUNIL PATEL SYSTEM ADMINISTRATORHi,
It depend on your configurations and requirements.
In Switched Independ Mode, all the network adapters are connected to different switches provide alternate routes through the network. This configuration doesn't require switch to participate in the teaming. Since the switch is independent mode the switch doesnot
know which adapter is part of the NIC Team. This again classified into two mdes:
Active / Active Mode
Active / Passive Mode
In Switched Dependant Mode, it requires the switch to participate in the teaming. And also required all the NIC card to be connected to the same physical switch. This can be configured in Two modes:
Generic / Static Mode
Dynamic Teaming
Network card teaming is now supported in Windows Server 2012 with cluster. However, when iSCSI is used with dedicated NICs, then using any teaming solution is not recommended and MPIO/DSM should be used. But when iSCSI is used with shared NICs, those
shared NICs can be teamed and will be supported as long as it’s being used with Windows Server 2012 NIC Teaming solution.
Is NIC Teaming in Windows Server 2012 supported for iSCSI, or not supported
for iSCSI?
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] -
Failover Cluster Core Resources question on a Windows 2008R2 three node cluster
We have a three node Windows 2008R2 cluster with SQL Server 2008 R2 as a clustered resource. There are three resource groups in this cluster 1) Available Storage 2) Cluster Group 3) SQL Server. The Available Storage and SQL Server resource groups
reside on one node while the Cluster Group resides on another. The only resources residing in the Cluster Resource Group is the Cluster name and IP. I'd like to failover the Cluster Resource Group to be on the same node as everything else.
I'm not sure what the implications are on doing this. Failing over the Cluster Group shouldn't have any impact on the SQL Server Resource Group correct or would there be an interruption to SQL because of the failover of the Cluster Group. It's
an critical application of which I'm trying to gather some information for a change request and I know I'm going to be asked if this impacts the production database and everybody using it.
Thanks
RGNo, that should not impact anything. The cluster group is completely separate from the SQL group.
. : | : . : | : . tim -
Windows 2012 Server multinode failover cluster (6 nodes)
Dear All,
We are facing problem of Huge time takes for cluster validation test on IBM Blade Server with Storage. The details are given below.
Escalated with IBM OEM, confirmed that "there is no hardware issue with Server and storage, Please take support from OS (Microsoft) OEM as 2 node validation test is working fine".
Server : IBM BladeCenter S-HS23
OS : Windows 2012 X64 Datacenter Edition
MPIO.SYS Version: Default came from OS
Note : Failover cluster validation test is successful on 2 nodes in 15 min with 5 shared volumes between 2 nodes and also between set of 2 on other 6 nodes.
When we are running validation test on 6 nodes its taking 30 min in list and more than 45 min potential cluster disk.
Thanks in adv for support from your end....
T & R,
Kamlesh
kamleshHello,
I'd ask in the
High Availability (Clustering) subforum of the Windows Server forums.
Karl
When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
My Blog:http://unlockpowershell.wordpress.com
My Book:Windows PowerShell 2.0 Bible
My E-mail: -join ('6F6C646B61726C40686F746D61696C2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}}) -
Clients Windows automatic update is not working after configured EndPoint 2012
I have all my client machines to look for Windows update automatically from the internet. After I configured my SCCM 2012 to have EndPoint 2012 Protection and all clients to sync to the SCCM server for new definitions. Now all client machines are
checking for Windows updates on my SCCM server as well.
1. How can I have my client machines to still check for Windows update from the internet WHILE synching AV definition from SCCM server?
THANK YOU FOR ANY HELP.I don't believe it's possible to do what you wish. Have a look at the local policy on one of your clients (gpedit.msc).
Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Updates > Specify intranet Microsoft update service location
Does it specify your Primary Site server?
Endpoint Protection leverages the software update component of ConfigMgr for delivery of definitions. This local Windows Updates policy was created when you configured this component.
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson -
High Network Utilization on HeartBeat and LiveMigration networks - Windows 2012 R2 Hyper-V cluster
Hi all,
I have just setup a fresh Windows 2012 R2 Hyper-V cluster with 4 nodes.
Config:
Network:
2 x Networks for iSCSI
1 x VM network 1
1 x VM network 2
1 x Heartbeat
1 x LiveMigration
Disks:
5 GB = Quorum
2 x 2.99 TB (Deduplication enabled)
The problem I am getting is that HeartBeat and LiveMigration (both configured with Cluster Only traffic) have alot of traffic on them even though no LiveMigration (the only card configured for LiveMigration) is going on.
All network configuration is the same as it was in Windows 2008 R2 SP1 cluster which these machines where running before (not upgrade, fresh install and migration) and did not have this "problem".
Has anyone experienced this or have a solution to this?
Regards,
Thorir
thorirHi Thorir,
According to your discription , you can try to monitor and analyse the traffic of LM via network monitor for troubleshooting .
Here is the links for downloading and using network monitor :
http://www.microsoft.com/en-us/download/details.aspx?id=4865
http://technet.microsoft.com/en-us/library/cc723623.aspx
Any further information please feel free to let us know.
Hope this helps
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
Replication error on windows 2012 DC
Hi,
I have added Windows 2012 R2 server (cadpdc1) to windows 2003 sp2 DC (Primary DC) and promoted it as DC. After the promote I have ran dcdiag and it shows errors.
Each of servers have three NICs connected to different networks.
Please help me with your expertise since I need to bring this up on monday.
Thank you
Kind regards
Chamara
here the dcdiag output of new DC
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = CADPDC1
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\CADPDC1
Starting test: Connectivity
Error during resolution of hostname CADPDC1.engineer.com through
IPv6 stack.
*** Warning: could not confirm the identity of this server in the
directory versus the names returned by DNS servers. Hostname
resolution error 0x2af9 "No such host is known."
......................... CADPDC1 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\CADPDC1
Starting test: Advertising
Warning: DsGetDcName returned information for
\\cadpdc.engineer.com, when we were trying to reach CADPDC1.
SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE.
......................... CADPDC1 failed test Advertising
Starting test: FrsEvent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... CADPDC1 passed test FrsEvent
Starting test: DFSREvent
......................... CADPDC1 passed test DFSREvent
Starting test: SysVolCheck
......................... CADPDC1 passed test SysVolCheck
Starting test: KccEvent
......................... CADPDC1 passed test KccEvent
Starting test: KnowsOfRoleHolders
[CADPDC] DsBindWithSpnEx() failed with error -2146893022,
The target principal name is incorrect..
Warning: CADPDC is the Schema Owner, but is not responding to DS RPC
Bind.
[CADPDC] LDAP bind failed with error 8341,
A directory service error has occurred..
Warning: CADPDC is the Schema Owner, but is not responding to LDAP
Bind.
Warning: CADPDC is the Domain Owner, but is not responding to DS RPC
Bind.
Warning: CADPDC is the Domain Owner, but is not responding to LDAP
Bind.
Warning: CADPDC is the PDC Owner, but is not responding to DS RPC
Bind.
Warning: CADPDC is the PDC Owner, but is not responding to LDAP Bind.
Warning: CADPDC is the Rid Owner, but is not responding to DS RPC
Bind.
Warning: CADPDC is the Rid Owner, but is not responding to LDAP Bind.
Warning: CADPDC is the Infrastructure Update Owner, but is not
responding to DS RPC Bind.
Warning: CADPDC is the Infrastructure Update Owner, but is not
responding to LDAP Bind.
......................... CADPDC1 failed test KnowsOfRoleHolders
Starting test: MachineAccount
......................... CADPDC1 passed test MachineAccount
Starting test: NCSecDesc
......................... CADPDC1 passed test NCSecDesc
Starting test: NetLogons
Unable to connect to the NETLOGON share! (\\CADPDC1\netlogon)
[CADPDC1] An net use or LsaPolicy operation failed with error 67,
The network name cannot be found..
......................... CADPDC1 failed test NetLogons
Starting test: ObjectsReplicated
......................... CADPDC1 passed test ObjectsReplicated
Starting test: Replications
[Replications Check,CADPDC1] A recent replication attempt failed:
From CADPDC to CADPDC1
Naming Context: DC=ForestDnsZones,DC=engineer,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2014-06-27 17:05:59.
The last success occurred at 2014-06-27 17:01:21.
1 failures have occurred since the last success.
[Replications Check,CADPDC1] A recent replication attempt failed:
From CADPDC to CADPDC1
Naming Context: DC=DomainDnsZones,DC=engineer,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2014-06-27 17:05:59.
The last success occurred at 2014-06-27 17:01:21.
1 failures have occurred since the last success.
[Replications Check,CADPDC1] A recent replication attempt failed:
From CADPDC to CADPDC1
Naming Context: CN=Schema,CN=Configuration,DC=engineer,DC=com
The replication generated an error (1727):
The remote procedure call failed and did not execute.
The failure occurred at 2014-06-27 17:05:59.
The last success occurred at 2014-06-27 17:01:06.
1 failures have occurred since the last success.
[Replications Check,CADPDC1] A recent replication attempt failed:
From CADPDC to CADPDC1
Naming Context: CN=Configuration,DC=engineer,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2014-06-27 17:05:59.
The last success occurred at 2014-06-27 17:01:07.
1 failures have occurred since the last success.
[Replications Check,CADPDC1] A recent replication attempt failed:
From CADPDC to CADPDC1
Naming Context: DC=engineer,DC=com
The replication generated an error (-2146893022):
The target principal name is incorrect.
The failure occurred at 2014-06-27 17:05:59.
The last success occurred at 2014-06-27 17:01:21.
1 failures have occurred since the last success.
......................... CADPDC1 failed test Replications
Starting test: RidManager
......................... CADPDC1 failed test RidManager
Starting test: Services
......................... CADPDC1 passed test Services
Starting test: SystemLog
A warning event occurred. EventID: 0x000727A5
Time Generated: 06/27/2014 17:01:38
Event String:
The WinRM service is not listening for WS-Management requests.
A warning event occurred. EventID: 0x80050004
Time Generated: 06/27/2014 17:05:03
Event String:
HP Ethernet 1Gb 2-port 332T Adapter: The network link is down. Check to make sure the network cable is properly connected.
A warning event occurred. EventID: 0xA004001B
Time Generated: 06/27/2014 17:05:06
Event String: HP NC112T PCIe Gigabit Server Adapter
An error event occurred. EventID: 0x40000004
Time Generated: 06/27/2014 17:05:39
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server cadpdc1$. The target name used was LDAP/cadpdc.engineer.com/[email protected]. This indicates that the target
server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account
used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured
to use the same password. If the server name is not fully qualified, and the target domain (ENGINEER.COM) is different from the client domain (ENGINEER.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified
name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 06/27/2014 17:05:39
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server cadpdc1$. The target name used was ldap/cadpdc.engineer.com/[email protected]. This indicates that the target
server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account
used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured
to use the same password. If the server name is not fully qualified, and the target domain (ENGINEER.COM) is different from the client domain (ENGINEER.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified
name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 06/27/2014 17:05:41
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server cadpdc1$. The target name used was cadpdc$. This indicates that the target server failed to decrypt the ticket provided
by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen
if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name
is not fully qualified, and the target domain (ENGINEER.COM) is different from the client domain (ENGINEER.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 06/27/2014 17:05:43
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server cadpdc1$. The target name used was GC/cadpdc.engineer.com/engineer.com. This indicates that the target server failed
to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the
server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the
same password. If the server name is not fully qualified, and the target domain (ENGINEER.COM) is different from the client domain (ENGINEER.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to
identify the server.
A warning event occurred. EventID: 0x000727AA
Time Generated: 06/27/2014 17:05:43
Event String:
The WinRM service failed to create the following SPNs: WSMAN/CADPDC1.engineer.com; WSMAN/CADPDC1.
An error event occurred. EventID: 0x40000004
Time Generated: 06/27/2014 17:05:55
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server cadpdc1$. The target name used was cifs/cadpdc.engineer.com. This indicates that the target server failed to decrypt
the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This
error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password.
If the server name is not fully qualified, and the target domain (ENGINEER.COM) is different from the client domain (ENGINEER.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
A warning event occurred. EventID: 0x84350444
Time Generated: 06/27/2014 17:05:58
Event String:
System Information Agent: Health: Post Errors were detected. One or more Power-On-Self-Test errors were detected during server startup.
An error event occurred. EventID: 0x40000004
Time Generated: 06/27/2014 17:05:59
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server cadpdc1$. The target name used was E3514235-4B06-11D1-AB04-00C04FC2DCD2/5122bd13-c8ac-4265-a879-3a6831224994/[email protected].
This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN
is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server
and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (ENGINEER.COM) is different from the client domain (ENGINEER.COM), check if there are identically named server accounts in these two
domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x40000004
Time Generated: 06/27/2014 17:05:59
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server cadpdc1$. The target name used was ldap/cadpdc.engineer.com. This indicates that the target server failed to decrypt
the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This
error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password.
If the server name is not fully qualified, and the target domain (ENGINEER.COM) is different from the client domain (ENGINEER.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x0000410B
Time Generated: 06/27/2014 17:05:59
Event String:
The request for a new account-identifier pool failed. The operation will be retried until the request succeeds. The error is
An error event occurred. EventID: 0x40000004
Time Generated: 06/27/2014 17:06:07
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server cadpdc1$. The target name used was LDAP/cadpdc.engineer.com. This indicates that the target server failed to decrypt
the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This
error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password.
If the server name is not fully qualified, and the target domain (ENGINEER.COM) is different from the client domain (ENGINEER.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
An error event occurred. EventID: 0x0000041F
Time Generated: 06/27/2014 17:06:30
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0x0000041D
Time Generated: 06/27/2014 17:07:07
Event String:
The processing of Group Policy failed. Windows could not resolve the user name. This could be caused by one of more of the following:
An error event occurred. EventID: 0x0000041F
Time Generated: 06/27/2014 17:11:32
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0x0000041F
Time Generated: 06/27/2014 17:16:33
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
An error event occurred. EventID: 0x40000004
Time Generated: 06/27/2014 17:16:38
Event String:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server cadpdc1$. The target name used was LDAP/5122bd13-c8ac-4265-a879-3a6831224994._msdcs.engineer.com. This indicates that
the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered
on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are
both configured to use the same password. If the server name is not fully qualified, and the target domain (ENGINEER.COM) is different from the client domain (ENGINEER.COM), check if there are identically named server accounts in these two domains, or use
the fully-qualified name to identify the server.
An error event occurred. EventID: 0x0000041F
Time Generated: 06/27/2014 17:21:35
Event String:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
......................... CADPDC1 failed test SystemLog
Starting test: VerifyReferences
......................... CADPDC1 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : engineer
Starting test: CheckSDRefDom
......................... engineer passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... engineer passed test CrossRefValidation
Running enterprise tests on : engineer.com
Starting test: LocatorCheck
......................... engineer.com passed test LocatorCheck
Starting test: Intersite
......................... engineer.com passed test IntersiteHi,
Please check the following :
- Confgigure IPv6 in DNS Management
- Kerberos and LDAP records of dns.
- Zone transfer from old server to new server.
Thanks.
Alper YAZGAN * -
Slow printing on windows 2008 std, R2 and windows 2012
Hi All,
I have a print server which is configured on windows 2008 R2. We are experiencing slow printing when printing directly from the server or from a client through the server. Small sized files prints fast, anything which has image takes a long time. All the
printers in our organization are Xerox Colorqube 9303. When installed the driver directly on to windows 7 32 bit PC, it prints without any delay. Also, when prints from the server a 2 MB file becomes 15 MB or more while sending. We have tried PCL6 and PS drivers.
To replicate it, i have installed a windows 2012 server ended up with the same result. Installed windows 2008 standard 32 bit with SP2 and the result remains same. Also tried it on windows 8, 64 bit without any luck. So effectively, it works fine only when
directly installed on a windows 7 PC. I have disabled all three: disabling TCP Chimney Offload, RSS, Receive Window Auto-Tuning .
After shooting the print, if you observe the printer properties, it sends data at a very low rate which results a 10 MB documents prints take around 10 minutes. At the same time, file copying from the server to and fro is working normally. All these servers
are directly connected to the cisco 6509 core switch. All the above tests were performed on the same physical switch. The server and clients are on the same network (subnet).
Have anybody come across to a similar issue. Any useful suggestions would deeply appreciated.
Thanks,
Prince MathewHi Prince Mathew,
Based on your description, this issue seems that it’s related to this specific model printer (Xerox
colorqube 9303). Please install the latest version of the driver and the firmware from Xerox website, and then check if this issue still exists.
If it still persists, please clear Printer Spooler Files and enable the Spooler Service again.
For details, please refer to.
1. Click Start, run "Services.msc" (without the quotation marks).
2. In Services list, please double click "Printer Spooler". Then click
Stop, and then click OK.
3. Please locate to: "%WINDIR%\system32\spool\printers", delete all files in this folder.
4. Click Start, run "Services.msc" (without the quotation marks). In Services list, double click
"Printer Spooler". Click on Start. In the Startup Type list, make sure that "Automatic" is selected and click OK.
Then check if this issue can be solved.
Hope this helps.
Best regards,
Justin Gu -
Install Remote Desktop Services Failed on Windows 2012 Server
I understand RDS is not recommended on DC due to security consideration. However since I want to play it at home, it is not much a concern. Such scenario works fine on Windows 2008 R2. But on Windows 2012, the RDS (session-based, have not
tried VDI, but expect same result) installation always fails and is incomplete on DC.
In \Administrative Tools\Terminal Services, I only have RD Licensing Diagnoser and RD licensing manager. The remote desktop service management service cannot be started (Error code: 0x88250001). Is there any extra configuration needed for RDS
working on Server 2012 DC or before the installation? Thanks.
Update: this issue has been solved in Windows 2012 R2 Server. According to
http://blogs.msdn.com/b/rds/archive/2013/07/09/what-s-new-in-remote-desktop-services-for-windows-server-2012-r2.aspx
"Single server RDS deployment including Active Directory. We now support running our RD Connection Broker role service on the same physical instance as an Active Directory Domain Controller. In addition, we published
guidelines for how RD Session Host could be used without the RD Connection Broker."
The guidelines (http://support.microsoft.com/kb/2833839/en-us) primarily apply to Windows 2012 Server.Asinine. Simply Asinine. Microsoft took it out because of $GREED$.
RemoteDesktop has become so popular, they had to break it to make more money. Thats why they discontinued SmallBusinessServer. If this practice is so tabooo... Why did MS go the opposite direction with SBS 2011 Premium Cal's? SBS2011
had DC, Exchange, RDS and Sharepoint,SQL, RemoteWebWorkplace, OWA all working in perfect harmony. It is an untrue statement then, that it was "allowed but not recommended"
Now you by Server2012 (core + two virtual) and its not enough for all this.
You need at least another $700 for another sever licence to have it all
and who knows if SQL will run on a DC, or Exchange, or R-DERP server. Another reacherous bridge to cross.
By far, the absloute worse release since Millennium. The product is not ready for production, we broke our rule of waiting until the first SP1 upgrade for this and Exchange 2013. Problems with USB drivers and networking running extreamly slow.
Our 2003 SBS server was at least three times as fast, and this server has SAS and SSD drives running. It can't get out of its own way, and IE10 is the most unstable piece of crap to come out of Redmond. Open wide and swallow - Mother Microsoft
knows whats best for you. YOU WILL EAT OUR SLOP AND LEARN TO LIKE IT. Server2012 AKA "METRO-SERVER"
Now here I sit after 50 Hours back to back setting up a new R-DERP server 2012, AD, Have my RDP licences in my hand at $100 each, and WTH does Microsoft care if I install it on my DC. ITS MY DC. And the cost savings versus the "risk" was
previously MY decision.
Sure, I can install a couple of Virtual HyperV sessions but they are so tempremental to a power-outage in a small business its not worth it. I have to double up my server hard drive resources, buy a $800 battery backup unit and make sure to attach
the cable, and even then, if that Bi**H does not shut down properly, one bit goes awry in a VHD or VHDX file and you are screwed. Restore from lastnights backup and forget about todays work. Not to mention it will probably take a half day to try
to fix it, then recover it then tell the 30 users they lost a days worth of work.
HYPER-V is for test servers and has no place in a small (micro) business environment. 5-30 users.
Microsoft's solution, buy another server. Need Exchange? Buy another server or take the risky cheapskate route and spin up some VHD's. Might as well put a gun to your head and play russian roulette, at least you know you have a one in six
chance of failure. With MS, its a 100% failure for a dirty shutdown power loss, motherboard blows, memory goes corrupt in a few years, your conventional method of recovery is gone, and you have some upchucked VHD file to try to recover some of TODAYS
data from.
Screw server 2012 forever.
I will sell 2008 and SBS2011 Premium unitl it rots in hell like XP (of which there is NOTHING wrong with for the average, WORD, EXCEL, OUTLOOK and QUICKBOOKS that all SMB's use. Its MS $GREED$ Grab the world by the B**ls and squeeze with all
your might to squeeze every dime you can out of *SMB* because big business is going to run thier 2003 Exchange and 2008 servers into ground before they switch to this garbage.
YOU CANNOT INSTALL EXCHANGE 2013 on DC , OR on R-DERP server.
Go buy another server license and server or MOVE TO THE CLOUD and get fleeced every month.
I have 30 DC/R-DERP/Exchange and SBS2011 Premium servers all running for years in perfect harmony, locked down with security so the users can't even WIGGLE with something they are not supposed to work with. They get their apps, cannot install anything
and all these servers are running just fine behind the firewall and perfectly save. The track record of this combination is 100% stable and is up 24/7/365 with no problems. Do yourself a favor and throw this 2012 into the river, you don't need
any weights because it is LEAD and will sink to the bottom by itself.
Why, you ask? Official is "Its for your protection" The real reason? To sell you more $700 server licences.
Maybe for SMB, we start selling Linux NAS Servers, host the Exchange in the cloud and be hearded like cattle to the Microsoft slaughterhouse. One way or another, you are going to bleed. A little each month to move to the cloud, or
a small fortune if you want to have it in house. Microsoft wants it to be more expensive to have in house. No more buying a server and running it for six years before you upgrade. They can't have in house servers competing with their cloud,
and small businesses are the low hanging fruit ripe for the pickin'. -
FTP in Windows 2012 Failover Cluster
Hi,
Understand that Windows 2012 is having much improved Failover Clustering features,however i have faced issues when i configured FTP in Windows 2012 Failover Cluster.
1) As per the process configured the shared disk for FTP data path.
2)Installaed FTP feature in both Nodes of Clustert
3)Finally created the Generic Service in Cluster Roles for FTP Service.
After the configuration i found everything working fine but when i try to failover the FTP role found that FTP resource is not moving smoothly. Also i observed that Microsoft FTP service gets in to "starting" mode in the destination Node. To run the FTP
resource Microsft FTP service should be in Started mode.
This happens only when we try to failover else it works fine if you start freshly.
Have any one tried this? Any clue about such issue ?
Regards:MaheshHi,
In earlier versions of Internet Information Services, Microsoft provided generic resource monitor components to support high availability Web server instances by using the Microsoft Clustering infrastructure. However, custom code was needed to fully realize
the potential of this solution. Also, the generic scripts that Microsoft provided did not satisfy customer needs.
From IIS 7 to configure IIS in a clustered environment by using Windows Server failover clustering, you have to use a custom (scripting) code to enable such a high availability scenario.
Note:
We recommend that administrators carefully evaluate the use of Network Load Balancing (NLB) instead of using failover clustering as the primary and preferred method for improving the scalability and availability of Web applications that have multiple servers
that are running new IIS (from IIS 7) . One benefit of NLB is that all servers can actively participate in the concurrent handling of incoming HTTP requests. Another benefit is that in an NLB IIS environment, it can be much easier to support rolling updates
and rollbacks while still providing high availability of Web applications.
To configure high availability for IIS FTP servers using Failover Clustering:
Install the Web Server role on all cluster nodes.
Install the Failover Clustering feature on all cluster nodes and create the cluster.
Set up a file share that will be used for IIS shared configuration
Configure the IIS shared configuration on all cluster nodes
Configure Offline Files for IIS Shared Configuration on all cluster nodes
Configure the FTP site and specify the location of its content on one cluster node
Configure high availability for your FTP site by creating a generic script in Failover Cluster Manager
For more detailed configuration procedure please refer to following MS articles:
Note: I didn’t find IIS 8 in Windows Server 2012 failover cluster configuration guide, below guide was published for II 7 in Windows server 2008 and Windows Server 2008 R2, but its basis configuration procedures should also apply to Windows Server 2012.
How to configure FTP 7.5 for IIS 7.0 in a Windows Server 2008 failover cluster
http://support.microsoft.com/kb/974603
Configure IIS Network Load Balancing
http://www.iis.net/learn/web-hosting/configuring-servers-in-the-windows-web-platform/network-load-balancing
Deploying IIS on a Failover Cluster
http://blogs.msdn.com/b/clustering/archive/2009/06/01/9674799.aspx
Hope this helps!
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Lawrence
TechNet Community Support
Maybe you are looking for
-
How to change sheduled jobs from one users to other user?
Hi, I want to change shoulded jobs from one users to other user. Is there any way that we change job from one user to other user. apart procedure with sm37: single job selecting with copy option. Regards, Gianluca Vinco
-
Mac Mini & The Simpsons DVD Boxsets.
Today, I tried to watch a DVD of The Simpsons on my Mac Mini. However, when I insert the DVD, the drive spins for about 30 seconds, and then just ejects the disc without mounting the DVD or trying to load DVD player at all. I cannot find any mention
-
Hi, During the definition of metadata i usually find table and column comments very usefull in an Oracle schema. However, my experience is that deploying a table definition does not add comments on the table even if a COMMENTS DDL script is produced
-
Link in my places sub-folder has dissapeared
HI, In my places folder i used to have the following: Places Desktop Wells Applications Documents However i dragged the "Wells" sub-folder out onto my desktop and i got the noise that sounds like you've dragged it to the trash. However it is not in t
-
External procedure call for cobol programs
I'm trying to call cobol programs using external procedure calls. I followed metalink doc#119543.1 but when the cobol shared library is called from PL/SQL, the session hangs. I'm running Oracle 9.2.0.4 EE, Microfocus Server Express 2.2, C for AIX v6,