I totally, 100% agree with the suggestion of calling PSS. That said, the CNO in 2008 and above seems quite different from the way things were done in 2003.
http://blogs.technet.com/b/timmcmic/archive/2009/02/24/permissions-required-for-the-cno-cluster-name-object-in-windows-2008-for-exchange-2007-sp1-setup-operations.aspx For grins, I just created a new network name resource on an old 2 node Server 2003 cluster (that I just happen to have lying around waiting for final decommissioning...). I brought the new name resource online and watched the virtual computer object be created in AD*. With the resource online, I deleted the virtual computer object. Next I took the resource offline, but was not able to bring it back up*. I changed the resource's parameters to not enable Kerberos authentication or register DNS and successfully brought it back online. I then took it offline, changed the parameters back to enabled, brought it back online again, and the virtual computer object was re-created. Whether this is the correct recovery procedure or not, I can't say. * Make sure to wait for replication if trying this at home. In your lab. On Mon, Nov 14, 2011 at 2:41 PM, Michael B. Smith <[email protected]>wrote: > Don’t do that! If you do that before the CNO is restored, you’ll kick > the cluster off line.**** > > ** ** > > Call PSS for this. I would.**** > > ** ** > > (This is much easier in the 2008 server releases than in 2003. I’d want > the hand-holding myself.)**** > > ** ** > > Regards,**** > > ** ** > > Michael B. Smith**** > > Consultant and Exchange MVP**** > > http://TheEssentialExchange.com <http://theessentialexchange.com/>**** > > ** ** > > *From:* Richard Stovall [mailto:[email protected]] > *Sent:* Monday, November 14, 2011 2:32 PM > > *To:* NT System Admin Issues > *Subject:* Re: Cluster Q**** > > ** ** > > Sounds like it might not be the service account that the services run > under, but the virtual computer account created in AD. If that's the case, > stopping and restarting the network name resource may do the trick if it is > configured to "Enable Kerberos Authentication." You might want to call PSS > or trawl the MS newsgroups for confirmation...**** > > On Mon, Nov 14, 2011 at 2:22 PM, daemonR00t <[email protected]> > wrote:**** > > Once I was in a similar situation.. problem is that the cluster service > account is listed in many places so I would rather restore the original > account…**** > > **** > > *From:* David Lum [mailto:[email protected]] > *Sent:* Monday, November 14, 2011 12:14 PM > *To:* NT System Admin Issues > *Subject:* Cluster Q**** > > **** > > Three 2003 servers in a cluster. The cluster account got deleted from AD – > we don’t know when because the cluster still works and the cluster name is > still in DNS.**** > > **** > > I am largely cluster illiterate (I can use cluster admin and create > resources, etc). Can you create a new resource in AD and reassign > permissions/resources? I found this but I don’t know that it helps: > > http://blogs.technet.com/b/askcore/archive/2009/04/27/recovering-a-deleted-cluster-name-object-cno-in-a-windows-server-2008-failover-cluster.aspx#comments > **** > > **** > > Anyone ever have to deal with recovering this kind of thing?**** > > *David Lum* > Systems Engineer // NWEATM > Office 503.548.5229 //* *Cell (voice/text) 503.267.9764**** > > **** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin**** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin**** > > ** ** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin**** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
