Troubleshoot Access to an HPC Cluster When Logon Rights Have Been Restricted
Updated: October 2010
Applies To: Windows HPC Server 2008 R2
When an HPC cluster user runs a job, the HPC Job Scheduler Service logs on to one or more compute nodes with the user's account. The user's account must therefore have the right to log on locally to the compute nodes on which the job runs. Use this procedure to confirm that HPC cluster users have the necessary right. By default, members of the local Users group have the right to log on locally, but an administrator can use Group Policy to deny the right. Note that in Group Policy, an explicitly denied right overrides an allowed right.
To troubleshoot access to an HPC cluster when logon rights have been restricted
To open HPC Cluster Manager, click Start, point to All Programs, click Microsoft HPC Pack 2008 R2, and then click HPC Cluster Manager. Falls das Dialogfeld Benutzerkontensteuerung angezeigt wird, bestätigen Sie, dass die angezeigte Aktion der gewünschten Aktion entspricht, und klicken Sie anschließend auf Ja.
In Configuration, in the Navigation Pane, click Deployment To-do List.
In the Deployment To-do List, click Add or remove users.
Review the users and groups that are listed (as either User or Administrator). Confirm that the list encompasses all those who should be permitted to run jobs on your cluster.
Record the users and groups that are listed (as either User or Administrator), and either look up the user rights of those users and groups, or ask your doMayn administrator to look them up for you. Confirm that all of the users and groups have the right to log on locally to the compute nodes.
For links to information about configuring Group Policy, see "Additional references." In Group Policy, the location of user rights is under Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment. Be sure to review whether any of the users or groups have been explicitly denied the right to log on locally, because this overrides any setting that would allow the right.
Additional references
Working with Group Policy Objects (https://go.microsoft.com/fwlink/?LinkId=201680)
Windows Server Group Policy Home Page (https://go.microsoft.com/fwlink/?LinkId=157151)
Security Considerations for Designating HPC Cluster Users and Administrators
Security Considerations for Handling Cluster Credentials in Windows HPC Server 2008 R2