I have just created a Windows 2012 Failover cluster, and I am unable to add a Fileserver role. I attempted to do so today, and received the following errors (along with the status of failed on the role itself):
Event IDs: 1205, 1069, 1096, 1212. I am most concerned about the last of the four event ID errors, included below:
Cluster network name resource 'fileserver' cannot be brought online. Attempt to locate a writeable domain controller (in domain unspecified domain) in order to create or update a computer object associated with the resource failed for the following reason:
The RPC Server is unavailable.
The error code was '1722'. Ensure that a writeable domain controller is accessible to this node within the configured domain. Also ensure that the DNS server is running in order to resolve the name of the domain controller.
Log Name: System
Source: Microsoft-Windows-FailoverClustering
Event ID: 1212
Level: Error
User: SYSTEM
OpCode: Info
Logged: 2/12/2013 3:51:05PM
Task Category: Network Name Resource
Keywords:
Node: CL-01.xxxx.nt.pitt.edu
It appears that I cannot write to the domain controller, yet earlier this same afternoon, I was able to write the actual cluster name to AD using the same DC. I can verify that the DC is up and running.
The DC is in a DMZ, firewalled from the Secure Server zone where the cluster nodes CL-01 and CL-02 are (this was a decision by our campus IT, and nothing I have control over). However, it was also the case when I created the cluster about two hours ago. And I was able to write the cluster into AD at that time, so nothing has changed in the meantime.
So what would possible cause the resource to not be created? I tried pre-creating the computer object "fileserver" in AD, in the OU that was specified by the wizard, but that simply causes an error where the object already exists, and the wizard cannot continue.
A few minutes later, another 1212 error record appeared, similar to the one above but with one interesting difference:
"Cluster network name resource 'fileserver' cannot be brought online. Attempt to locate a writeable domain controller (in domain \\DC.xxxx.nt.pitt.edu) in order to create or update a computer object associated with the resource failed for the following reason"
Where DC is the name of my domain controller.
Is there a firewall rule that I'm still missing, but if so, why could I create the cluster (and hence, write the cluster computer object to AD?) and yet not be able to do this?
Final note: I am logged into the two nodes as a cluster service account that is a domain admin and DOES have the right to add computer objects to the domain (hence the cluster was created inthe first place).