Many Error 5605 WMI Errors “Access to the root\mscluster namespace was denied”

Getting a lot of these on my SQL Server cluster (SQL 2008 on Windows 2008), mostly on the inactive nodes. I have Googled a bit and found nothing really helpful.

Access to the root\mscluster namespace was denied because the namespace is 
marked with RequiresEncryption but the script or application attempted to 
connect to this namespace with an authentication level below Pkt_Privacy. 
Change the authentication level to Pkt_Privacy and run the script or 
application again. 
8/9/2010 6:05:32 AM 
Error Microsoft-Windows-WMI 
Error code: 5605 
Eventlog: Application

Note: I did lock down security about this time on these Servers, making the SQL Server Service Account (MYDOMAIN\SQLAcct) not an admin on the box anymore but giving it proper local security policies to run the cluster per Pro SQL Server 2008 Failover Clustering (Apress) by Allan Hirt (see chapter 5 "Service Accounts, Domain Groups, and Rights" p.186).

Local Security Policy                     SQL Server

Adjust memory quotas for a process
(SeIncreaseQuotaPrivilege)                Yes           

Bypass traverse checking
(SeChangeNotifyPrivilege)                 Yes           

Log on as a batch job (SeBatchLogonRight) Yes           

Log on as a service (SeServiceLogonRight) Yes           

Replace a process-level token
(SeAssignPrimaryTokenPrivilege)           Yes    

My first instinct is to make MYDOMAIN\SQLAcct an admin again and see if these go away… rule that out or in, at least. But this won't really solve the problem since I don't want my service account to be an admin on the box.

I am getting these errors every 5 minutes and they seem to be almost entirely on my "B" or passive nodes.
more ▼

asked Aug 10, 2010 at 08:18 AM in Default

goyo gravatar image

40 1 1 2

(comments are locked)
10|1200 characters needed characters left

1 answer: sort oldest

Top of my head -- sounds like remote WMI issues.

See this article for some background and [this one][2] for potential workarounds.

[2]: http://msdn.microsoft.com/en-us/library/aa393266
more ▼

answered Aug 10, 2010 at 10:57 AM

Blackhawk-17 gravatar image

11.9k 28 31 37

(comments are locked)
10|1200 characters needed characters left
Your answer
toggle preview:

Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

New code box

There's a new way to format code on the site - the red speech bubble logo will automatically format T-SQL for you. The original code box is still there for XML, etc. More details here.

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

SQL Server Central

Need long-form SQL discussion? SQLserverCentral.com is the place.



asked: Aug 10, 2010 at 08:18 AM

Seen: 4615 times

Last Updated: Aug 10, 2010 at 08:18 AM