“Unable to successfully cleanup” Error while creating Windows 2008 R2 Server.

Most of the time, while creating a two node Windows 2008 R2 server Failover Cluster with a low privileged domain account,  you might end up with a generic cluster failure error called “Unable to successfully cleanup”.  You will be surprised to see that the cluster validation on both the nodes complete without any error or warning!.

Resolution:

Most of the cases, this is related to too many ACE’s in the ACL.  Most of the time appears while you are creating the cluster with a user having limited permission in active directory.  In such scenario, we can try to prestage the CNO and remove inheritable permissions which should reduce the number of ACE’s.

Step-by-Step Guide:

Step-1: Prestage a computer account with the name of the new cluster account and disabled it (The account must be disabled so that when the Create Cluster wizard is run, it can confirm that the account it will use for the cluster is not currently in use by an existing computer or cluster in the domain).

Step-2: From Active Directory Users and Computers, right click the Properties of the Prestaged cluster account. Click on Security Tab and then click advanced Button of the Accounts. Clear the checkbox Allow inheritable permissions from parent to propagate to this object and all the child objects. Select Remove when the Security dialogue box opens.

Step-3: Replicated the changes to all other Domain Controllers

Step-4: Create cluster and validate

 

Additional Resources:

Failover Cluster Step-by-Step Guide: Configuring Accounts in Active Directory
http://technet.microsoft.com/en-us/library/cc731002(v=ws.10).aspx

Advertisements

About Jayachandran PK
My passion is for Microsoft technologies and how if properly implemented, they can provide actual value for an organization especially in the field of infrastructure, virtualization and system monitoring. I work for the biggest Microsoft partner in Kuwait, specialized in project consultation and implementation services for enterprise clients. When I'm not at work, I try to contribute back through a charitable organization dedicated to prompting cultural values of Kerala. In my free time, I dabble in gardening and am also an avid solar power aficionado.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: