Access Denied trying to connect to a cluster with Failover Cluster Manager Exchange 2010

SATISHKUMAR A/L PANNIRSELRAM 0

The issue where you can connect to the Failover Cluster Manager on iphmail04 but not on iphmail02, despite using the same credentials, points to a localized issue on iphmail02

Alex Zhang-MSFT 4,495 Reputation points Microsoft Vendor

2025-01-07T06:07:47.5033333+00:00

Hello, @SATISHKUMAR A/L PANNIRSELRAM,

Just wanted to check if the answer shared below helped. If it helped, then would request you to please "Accept the answer" as it would be helpful to others in the community as well.

Best Wishes,

Alex Zhang
Alex Zhang-MSFT 4,495 Reputation points Microsoft Vendor

2025-01-17T06:08:02.4033333+00:00

Hello, @SATISHKUMAR A/L PANNIRSELRAM,

Just checking in to see if information below was helpful.

If the issue has been resolved, please mark the helpful replies as answers.

Best Wishes,

Alex Zhang
Alex Zhang-MSFT 4,495 Reputation points Microsoft Vendor

2025-01-21T01:56:30.5233333+00:00

Hello, @SATISHKUMAR A/L PANNIRSELRAM,

Just checking in to see if information below was helpful.

If the issue has been resolved, please mark the helpful replies as answers.

Best Wishes,

Alex Zhang
Alex Zhang-MSFT 4,495 Reputation points Microsoft Vendor

2025-01-24T09:36:55.71+00:00

Hello, @SATISHKUMAR A/L PANNIRSELRAM,

Just checking in to see if information below was helpful.

If the issue has been resolved, please mark the helpful replies as answers.

Best Wishes,

Alex Zhang
Alex Zhang-MSFT 4,495 Reputation points Microsoft Vendor

2025-01-31T05:43:45.3766667+00:00

Hello, @SATISHKUMAR A/L PANNIRSELRAM,

Is there any update on this thread? If the issue has been resolved, please mark the helpful replies as answers, this will make answer searching in the forum easier and be beneficial to other community members as well. Thanks for your understanding.

Best Wishes,

Alex Zhang

1 answer

Alex Zhang-MSFT 4,495 Reputation points Microsoft Vendor

2025-01-03T08:48:45.46+00:00

Hello, @SATISHKUMAR A/L PANNIRSELRAM,

Welcome to the Microsoft Q&A platform!

Based on your description, you're encountering an issue with connecting to the Failover Cluster Manager on certain nodes (iphmail04 and iphmail02) while using the same credentials. This issue could be due to permissions or configurations specific to the nodes in your cluster.

Here are a few steps you can take to troubleshoot and resolve this issue:

1.Check Permissions: Ensure that the account you're using has the necessary permissions on both nodes. Sometimes, permissions might be set differently on each node.

2.Validate Cluster Configuration: Use the Failover Cluster Manager to run a validation test on the cluster. This can help identify any configuration issues.

3.Review Event Logs: Check the event logs on both nodes for any errors or warnings that might give more insight into why access is being denied.

4.Network Configuration: Verify that the network settings are consistent across all nodes. Differences in network configuration can sometimes cause connectivity issues.

5.DCOM Settings: Ensure that the Distributed Component Object Model (DCOM) settings are correctly configured. Inconsistent DCOM settings can lead to access issues.

6.Patch Levels: Make sure that all nodes are running the same patch level. Inconsistent patch levels can cause nodes to fail to join the cluster.

7.DNS Resolution: Ensure that all nodes can properly resolve each other’s DNS names. This is crucial for cluster communication.

8.Version Compatibility: Confirm that all nodes are running compatible versions of the Windows Server and Exchange Server software.

In addition, here is a case study similar to your issue for your reference: https://learn.microsoft.com/en-us/answers/questions/2038197/access-denied-trying-to-connect-to-a-cluster-with.

Should you need more help on this, you can feel free to post back.

If the answer is helpful, please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.

Thank you for your support and understanding.

Best Wishes,

Alex Zhang
Please sign in to rate this answer.
SATISHKUMAR A/L PANNIRSELRAM 0 Reputation points

2025-01-09T07:22:10.22+00:00

Hi,
I would like to inform that the exchange server is running 2010

1.Check Permissions:

Answer : With the same permission , able to connect iphmail04 but unable to connect iphmail02.

2.Validate Cluster Configuration: Use the Failover Cluster Manager to run a validation test on the cluster. This can help identify any configuration issues.

Answer: how i can do this >

3.Review Event Logs: Check the event logs on both nodes for any errors or warnings that might give more insight into why access is being denied.

Answer: There is no any error or critical logs. Event ID 2050 and Event ID 2051 (but both server have the same event id which shows there is no any issue can find from event logs)

4.Network Configuration: Verify that the network settings are consistent across all nodes. Differences in network configuration can sometimes cause connectivity issues.

Answer: how i can do this ?

5.DCOM Settings: Ensure that the Distributed Component Object Model (DCOM) settings are correctly configured. Inconsistent DCOM settings can lead to access issues.

6.Patch Levels: Make sure that all nodes are running the same patch level. Inconsistent patch levels can cause nodes to fail to join the cluster.

Answer: there is no patchinh

7.DNS Resolution: Ensure that all nodes can properly resolve each other’s DNS names. This is crucial for cluster communication.

Answer: Yes done

8.Version Compatibility: Confirm that all nodes are running compatible versions of the Windows Server and Exchange Server software.

Answer: Same version for both

SATISHKUMAR A/L PANNIRSELRAM 0 Reputation points

2025-01-09T07:22:32.6333333+00:00

Hi AlexI would like to inform that the exchange server is running 20101.Check Permissions:

Answer : With the same permission , able to connect iphmail04 but unable to connect iphmail02.

2.Validate Cluster Configuration: Use the Failover Cluster Manager to run a validation test on the cluster. This can help identify any configuration issues.

Answer: how i can do this >

3.Review Event Logs: Check the event logs on both nodes for any errors or warnings that might give more insight into why access is being denied.

Answer: There is no any error or critical logs. Event ID 2050 and Event ID 2051 (but both server have the same event id which shows there is no any issue can find from event logs)

4.Network Configuration: Verify that the network settings are consistent across all nodes. Differences in network configuration can sometimes cause connectivity issues.

Answer: how i can do this ?

5.DCOM Settings: Ensure that the Distributed Component Object Model (DCOM) settings are correctly configured. Inconsistent DCOM settings can lead to access issues.

6.Patch Levels: Make sure that all nodes are running the same patch level. Inconsistent patch levels can cause nodes to fail to join the cluster.

Answer: there is no patchinh

7.DNS Resolution: Ensure that all nodes can properly resolve each other’s DNS names. This is crucial for cluster communication.

Answer: Yes done

8.Version Compatibility: Confirm that all nodes are running compatible versions of the Windows Server and Exchange Server software.

Answer: Same version for both

Alex Zhang-MSFT 4,495 Reputation points Microsoft Vendor

2025-01-10T06:34:23.9666667+00:00

Hello, @SATISHKUMAR A/L PANNIRSELRAM,

Thank you for your prompt reply.

As for your several replies and questions, here are my answers.

1.Since you can connect to iphmail04 but not iphmail02 with the same permissions, it suggests a localized issue on iphmail02. Double-check the local security policies and user rights assignments on iphmail02.

2.To run a validation test on the cluster:

a. Open Failover Cluster Manager.

b. Right-click on the cluster and select Validate Cluster.

c. The Validate a Configuration Wizard will open. Click Next to continue.

d. Select Run only tests I select and click Next.

e. Ensure Storage is unchecked to avoid disruptive tests, then proceed with the validation.

(Reference:https://dataonsupport.dataonstorage.com/support/solutions/articles/24000067047-how-to-run-cluster-validation-in-failover-cluster-manager.)

3.Since there are no critical errors or warnings and both servers show the same event IDs, it seems the issue might not be logged.

4.To verify network settings consistency:

a. Compare the IP configurations on both nodes using ipconfig /all.

b. Ensure that the network adapters are configured similarly, including DNS settings, subnet masks, and gateways.

c. Check for any discrepancies in the network adapter settings in the Network and Sharing Center.

(Reference:https://techcommunity.microsoft.com/blog/failoverclustering/validating-a-cluster-with-zero-downtime/371685.)

5.Ensure that DCOM is enabled and configured correctly on both nodes:

a. Open Component Services.

b. Navigate to Computers > My Computer.

c. Right-click My Computer and select Properties.

d. Go to the Default Properties tab and ensure Enable Distributed COM on this computer is checked.

About point 6,7,8, please ensure that all nodes are running the same version of Windows Server and Exchange Server and that there are no patch inconsistencies. Confirm that all nodes can properly resolve each other's DNS names, which is critical for cluster communication. Moreover, both nodes are needed to run the same version to ensure compatibility.

(Notice: Microsoft provides third-party contact information to help you find additional information about this topic. This contact information may change without notice. Microsoft does not guarantee the accuracy of third-party contact information.)

If the answer is helpful, please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.

Thank you for your support and understanding.

Best Wishes,

Alex Zhang

Alex Zhang-MSFT 4,495 Reputation points Microsoft Vendor

2025-01-15T05:26:53.9933333+00:00

Hello, @SATISHKUMAR A/L PANNIRSELRAM,

Just wanted to check if the answer shared above helped. If it helped, then would request you to please "Accept the answer" as it would be helpful to others in the community as well.

Best Wishes,

Alex Zhang

SATISHKUMAR A/L PANNIRSELRAM 0 Reputation points

2025-01-23T06:53:18.4033333+00:00

Hi Alex,

The issue haven't resolve. Even I have try to change the Primary Active Manager role to another server and issue still persists.

Next I would like to check Computer Object Permissions

Regards,
Satish

Alex Zhang-MSFT 4,495 Reputation points Microsoft Vendor

2025-01-24T01:09:51.2566667+00:00

I have understood your plan. If you need further help in the process, please feel free to reply to this post directly so we will be notified to follow it up.

Alex Zhang-MSFT 4,495 Reputation points Microsoft Vendor

2025-01-29T02:31:21.1266667+00:00

Hello, @SATISHKUMAR A/L PANNIRSELRAM,

Just circling back to check to see how things are going on with this thread. Should you need more help on this, you can feel free to post back.

Best Wishes,

Alex Zhang
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Access Denied trying to connect to a cluster with Failover Cluster Manager Exchange 2010

1 answer

Your answer