Event ID 1234 — Cluster Service Startup

  • Article

Applies To: Windows Server 2008 R2

The Cluster service is the essential software component that controls all aspects of failover cluster operation and manages the cluster configuration database. If the Cluster service fails to start on a failover cluster node, the node cannot function as part of the cluster.

Event Details

Product: Windows Operating System
ID: 1234
Source: Microsoft-Windows-FailoverClustering
Version: 6.1
Symbolic Name: CLUSTER_EVENT_ACCOUNT_MISSING_PRIVS
Message: Cluster service has detected that its service account is missing one or more from the required set of privileges. The missing privilege list is: '%1' and is not currently granted to the service account. Please use the 'sc.exe qprivs clussvc' to verify the privileges of the Cluster Service (ClusSvc). Additionally check for any security policies or group policies in the Active Directory that may have altered the default privileges. Type the following command to grant the Cluster Service the necessary privileges to function correctly:

sc.exe privs clussvc SeBackupPrivilege/SeRestorePrivilege/SeIncreaseQuotaPrivilege/SeIncreaseBasePriorityPrivilege/SeTcbPrivilege/SeDebugPrivilege/SeSecurityPrivilege/SeAuditPrivilege/SeImpersonatePrivilege/SeChangeNotifyPrivilege/SeIncreaseWorkingSetPrivilege/SeManageVolumePrivilege/SeCreateSymbolicLinkPrivilege

Resolve

Check privileges of Cluster service

The Cluster service has detected that it does not have one or more of the privileges that it requires. For more information, see "Checking the privileges assigned to the Cluster service." If you do not currently have Event Viewer open, see "Opening Event Viewer and viewing events related to failover clustering."

To perform the following procedures, you must be a member of the local Administrators group on each clustered server, and the account you use must be a domain account, or you must have been delegated the equivalent authority.

Checking the privileges assigned to the Cluster service

To check the privileges assigned to the Cluster service:

  1. To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.

  2. Type:

    SC QPRIVS CLUSSVC

Setting the correct privileges for the Cluster service

To set the correct privileges for the Cluster service:

  1. To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.

  2. Type the following command or copy and paste it into the command line (copy the command, right-click the command prompt, click Paste, remove any spaces that occur between slash marks, and press ENTER):

    sc privs clussvc SeBackupPrivilege/SeRestorePrivilege/``SeIncreaseQuotaPrivilege/SeIncreaseBasePriorityPrivilege/``SeTcbPrivilege/SeDebugPrivilege/``SeSecurityPrivilege/SeAuditPrivilege/``SeImpersonatePrivilege/SeChangeNotifyPrivilege/``SeIncreaseWorkingSetPrivilege/SeManageVolumePrivilege

To open Event Viewer and view events related to failover clustering:

  1. If Server Manager is not already open, click Start, click Administrative Tools, and then click Server Manager. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. In the console tree, expand Diagnostics, expand Event Viewer, expand Windows Logs, and then click System.
  3. To filter the events so that only events with a Source of FailoverClustering are shown, in the Actions pane, click Filter Current Log. On the Filter tab, in the Event sources box, select FailoverClustering. Select other options as appropriate, and then click OK.
  4. To sort the displayed events by date and time, in the center pane, click the Date and Time column heading.

Verify

To perform this procedure, you must be a member of the local Administrators group on each clustered server, and the account you use must be a domain account, or you must have been delegated the equivalent authority.

Verifying that the Cluster service is started on all the nodes in a failover cluster

To verify that the Cluster service is started on all the nodes in a failover cluster:

  1. To open the failover cluster snap-in, click Start, click Administrative Tools, and then click Failover Cluster Management. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. In the Failover Cluster Management snap-in, if the cluster you want to manage is not displayed, in the console tree, right-click Failover Cluster Management, click Manage a Cluster, and then select or specify the cluster that you want.
  3. If the console tree is collapsed, expand the tree under the cluster you want to manage, and then click Nodes.
  4. View the status for each node. If a node is Up, the Cluster service is started on that node.

Another way to check whether the Cluster service is started is to run a command on a node in the cluster.

Using a command to check whether the Cluster service is started on a node

To use a command to check whether the Cluster service is started on a node:

  1. On the node that you are checking, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.

  2. Type:

    CLUSTER NODE /STATUS

    If the node status is Up, the Cluster service is started on that node.

Cluster Service Startup

Failover Clustering