We migrated several file service resources from Windows 2008 R2 cluster A to B. Everything was fine until last week. Couple error messages were logged in the event viewer.
Log Name: System
Source: Microsoft-Windows-FailoverClustering
Date: Date_Time
Event ID: 1207
Task Category: Network Name
Resource Level: Error
Keywords:
User: SYSTEM
Computer: Computer-name.domain.com Description: Cluster network name resource ‘Cluster Name’ cannot be brought online. The computer object associated with the resource could not be updated in domain ‘disjoined.domain.com’ for the following reason: Unable to update password for computer account.
The text for the associated error code is: The password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements.
The cluster identity ‘Cluster-name$’ may lack permissions required to update the object. Please work with your domain administrator to ensure that the cluster identity can update computer objects in the domain.
The cause of this error is that the cluster object doesn’t have the permission to reset the computer password for the resources in the Active Directory. (A cluster computer object is created automatically after the cluster is built up)
To solve this, you need to grant the cluster computer object full control over the resources – find the resource computer account in Active Directory and change the permission in the security tab.
Jackie Chen's IT Workshop 