The computer object associated with the cluster network name resource 'Cluster Name' could not be updated in domain ‘domain.com during the Password change operation.

sanjay yadav 6 Reputation points
2020-10-08T18:27:15.49+00:00

Hello all,

I have already scout through all other related topics but couldn't find the solution yet.

The computer object associated with the cluster network name resource 'Cluster Name' could not be updated in domain ‘domain.com during the 
Password change operation.

The text for the associated error code is: There are currently no logon servers available to service the logon request.

The cluster identity 'SVV-MC-IPCLU$' may lack permissions required to update the object. Please work with your domain administrator to ensure that the cluster identity can update computer objects in the domain.

any help / tip will be appreciated.

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,347 questions
Windows Server Clustering
Windows Server Clustering
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Clustering: The grouping of multiple servers in a way that allows them to appear to be a single unit to client computers on a network. Clustering is a means of increasing network capacity, providing live backup in case one of the servers fails, and improving data security.
950 questions
0 comments No comments
{count} vote

2 answers

Sort by: Most helpful
  1. Shashank Singh 6,246 Reputation points
    2020-10-09T04:18:21.75+00:00

    The problem I believe is this error

    The cluster identity 'SVV-MC-IPCLU$' may lack permissions required to update the object. Please work with your domain administrator to ensure that the cluster identity can update computer objects in the domain.

    The issue points to permission issue in OU where this object resides. This support article says about password update permission and it seems that is missing

    Start the Active Directory Users and Computers snap-in from Administrative Tools.
    On the View menu, click Advanced Features.
    Locate the computer object that you want the Cluster service account to use.
    Right-click the computer object, and then click Properties.
    Click the Security tab, and then click Add.
    Add the Cluster service account or a group that the Cluster Service account is a member of.
    Grant the user or the group the following permissions:

    Reset Password
    Validated Write to DNS Host Name
    Validated Write to Service Principal Name

    Click OK.

    Did you got chance to go through this blog the-computer-object-associated-with.html


  2. Xiaowei He 9,866 Reputation points
    2020-10-14T07:54:15.777+00:00

    Hi,

    According to the error message, please check if the port 464 is open on DC. The port 464 on DC side needs to be opened to update CNO.

    Besides, we may also use the command below to test the connection between cluster nodes and DC:

    nltest /SERVER: <SERVER NAME> /sc_query: <DomainName>

    Thanks for your time!
    Best Regards,
    Anne

    -----------------------------

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.