Exchange 2007 CCR vs. W2008 Cluster Service account change
Hello, we would need to change the security context under which the Cluster Service account is running on Windows 2008 (currently running as Local System). The reasonis a backup software whose service needs to run in the same security context as the Cluster service and it cannot run as Local System. My main concern isExchange 2007 (running in CCR mode) that might be negatively affected after the Cluster service context be changed. Can you please advise on how tomake this change as smooth as possible. Thank you in advance.Regasrds,Rasto
September 7th, 2009 3:47pm

You cannot do this. See here: "In Windows Server 2008, the failover cluster does not use a domain user account to run the Cluster service. Instead, the Windows Server 2008 failover cluster logs on by using the Local System account. Therefore, the information in this article does not apply. However, if this setting is changed, the Cluster service fails to start." -http://support.microsoft.com/kb/871236 What backup software are you using? I would imagine it is not supported for cluster use if they have this requirement. Mike Crowley A+, Network+, Security+, MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator Do you still have Exchange 2000? Looking to upgrade to Exchange 2010? Read how.
Free Windows Admin Tool Kit Click here and download it now
September 7th, 2009 6:50pm

Hello Mike, thank you for reply. The backup software is HP Data Protector 6.0 with the latest updates. (to support Windows 2008)From HP docs: (Installing Cluster-Aware Clients)1. Check if the Cluster service account is assigned to the Data Protector Inet service on each cluster node.Based on this the cluster service account on each node needs to be changed to the same account the INET services is running under. The question is how to install the DP client on Windows 2008 cluster node to satisfy the above requirement? When installing DP6.0 client, there is a requirement to chose Domain Service Account (it must not be LocalSystem).Regards,Rastislav
September 16th, 2009 11:30am

I dont know what to say at this point. That KB article says if you change the logonas the services wont start. I'd contact HP and ask them to explain. I believe their free support number is 800-hpinvent Mike Crowley A+, Network+, Security+, MCT, MCSE, MCTS, MCITP: Enterprise Administrator / Messaging Administrator
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2009 4:46pm

yeah, I had already asked them for explanation... Thanks.Rastislav
September 16th, 2009 5:42pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics