Error on Validating network name resource for Active Directory issues

Question

Hello

I have built a Windows 2019 cluster with two nodes and quorum file share witness. Cluster was created fine. CNO has correct permissions. I can move the the cluster resource between the nodes. DNS is updated accordingly. I can ping the CNO and cluster nodes too. Event log is clean.

When I run validate cluster, run all test, it has error for cluster configuration under Validate Resource Status, it gives

Validating network name resource Name: (removed the name) for Active Directory issues.

An error occurred while executing the test.

The operation has failed. An error occurred while checking the Active Directory organizational unit for the cluster name resource.

The parameter is incorrect

I have checked the permissions as per https://learn.microsoft.com/en-us/troubleshoot/windows-server/high-availability/parameter-incorrect-error-cluster-validation-fails

I made various changes but no joy so far.

Extract from cluster log (removed some information and replaced with XXXX)

00000f7c.00002170::2023/08/18-15:26:28.791 DBG [RCM] rcm::RcmResource::Control: (Cluster Name, GET_RO_PRIVATE_PROPERTIES)

00000f7c.00002170::2023/08/18-15:26:28.791 DBG [RCM] Sending Control Code GET_RO_PRIVATE_PROPERTIES Id 7552

00001918.00000810::2023/08/18-15:26:28.791 DBG [RHS] ResControlCall::CallIntoResource(Cluster Name)

00000f7c.00001714::2023/08/18-15:26:28.796 DBG [API] s_ApiNodeControl(GET_RO_COMMON_PROPERTIES)

00000f7c.00001714::2023/08/18-15:26:28.806 DBG [RCM] rcm::RcmResource::Control: (Cluster Name, UNKNOWN (0n117448993 0x7002121 ) obj: (0n7 CLUSTER) flags: ...., code: (0n2120 0x848) access: (0n1 R))

00000f7c.00001714::2023/08/18-15:26:28.806 DBG [RCM] Sending Control Code UNKNOWN (0n117448993 0x7002121 ) obj: (0n7 CLUSTER) flags: ...., code: (0n2120 0x848) access: (0n1 R) Id 7553

00001918.00001150::2023/08/18-15:26:28.806 DBG [RHS] ResControlCall::CallIntoResource(Cluster Name)

00001918.00001150::2023/08/18-15:26:28.806 INFO [RES] Network Name <Cluster Name>: Netname check OU permissions

00001918.00000810::2023/08/18-15:26:28.807 INFO [RES] Network Name <Cluster Name>: AccountAD: CheckOUPermissionsInternal Enter

00000f7c.00001714::2023/08/18-15:26:28.809 DBG [RCM] rcm::RcmPriorityManager::RunRestartTasks(false, 616)

00000f7c.00001714::2023/08/18-15:26:28.809 DBG [RCM] rcm::RcmPriorityManager::StartPreemptedGroups(6)

00000f7c.00001714::2023/08/18-15:26:28.809 DBG [RCM] rcm::PreemptionTracker::GetPreemptedGroups()

00000f7c.00001714::2023/08/18-15:26:28.809 DBG [RCM] got asked for preempted groups, returning 0 records

00000f7c.00001714::2023/08/18-15:26:28.809 DBG [RCM] preemption tracker tracking 0 preemptees

00000f7c.00001714::2023/08/18-15:26:28.809 DBG [RCM] preemptions are still going on, or no preemptees. Not restarting any preemptees

00000f7c.00001714::2023/08/18-15:26:28.809 DBG [RCM] scheduling next RunRestartTasks task...

00000f7c.00002170::2023/08/18-15:26:28.811 DBG [RCM] rcm::RcmResource::Control: (Cluster Name, GET_CRYPTO_CHECKPOINTS)

00000f7c.00002170::2023/08/18-15:26:28.812 DBG [RCM] rcm::RcmResource::Control: (Cluster Name, GET_CRYPTO_CHECKPOINTS)

00001918.00000810::2023/08/18-15:26:28.816 INFO [RES] Network Name <Cluster Name>: AccountAD: PopulateNetnameADState - DCFlags 1073745937 LdapReferralAllowed 0

00001918.00000810::2023/08/18-15:26:28.816 INFO [RES] Network Name: [NNLIB] FindSuitableDCNew - objectName XXXXXX, username - XXXXXXXX, firstChoiceDCName -

00001918.00000810::2023/08/18-15:26:28.955 INFO [RES] Network Name: [NNLIB] Found first choice DC that has the object XXXXXXX DCName - \XXXXXXX.

00001918.00000810::2023/08/18-15:26:28.958 INFO [RES] Network Name: [NNLIB] GetOUForVCOCreation - OU name of CNO is OU=XXXXXXX,OU=XXXXXXX,OU=XXXXXXX,OU=XXXXXXX,OU=XXXXXXX,OU=XXXXXXX,OU=XXXXXXX,DC=XXXXXXX,DC=XXXXXXX,DC=XXXXXXX

00001918.00000810::2023/08/18-15:26:28.958 INFO [RES] Network Name: [NNLIB] GetOUForVCOCreation - CNO SID is XXXXXXX

00001918.00000810::2023/08/18-15:26:28.968 INFO [RES] Network Name: [NNLIB] Checking permissions (value = 1) on object OU=XXXXXXX,OU=XXXXXXX,OU=XXXXXXX,OU=XXXXXXX,OU=XXXXXXX,OU=XXXXXXX,OU=XXXXXXX,DC=XXXXXXX,DC=XXXXXXX,DC=XXXXXXX successful, HasAccess = TRUE.

00001918.00001150::2023/08/18-15:26:28.975 WARN [RHS] Error 87 from ResourceControl 117448993 for resource Cluster Name.

Please any assistance is much appreciated. Thanks.

Answer 1

Hello there,

Check that firewalls and antivirus software on the cluster nodes are not blocking communication with Active Directory or other cluster nodes. Temporarily disabling such software for testing purposes can help identify any conflicts.

The parameter error is caused when authenticated users don't have default Read permissions on the default Computers container.

To resolve this problem, grant the Read permission to authenticated users. Authenticated users require Read permissions to objects that are in the Computers container, even if the computer objects aren't there.

This article helps to resolve the error "The parameter is incorrect" that occurs when cluster validation fails against the Validate Resource status. https://learn.microsoft.com/en-us/troubleshoot/windows-server/high-availability/parameter-incorrect-error-cluster-validation-fails

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer–