question

goyo avatar image
goyo asked

Many Error 5605 WMI Errors “Access to the root\mscluster namespace was denied”

Getting a lot of these on my SQL Server cluster (SQL 2008 on Windows 2008), mostly on the inactive nodes. I have Googled a bit and found nothing really helpful. Access to the root\mscluster namespace was denied because the namespace is marked with RequiresEncryption but the script or application attempted to connect to this namespace with an authentication level below Pkt_Privacy. Change the authentication level to Pkt_Privacy and run the script or application again. 8/9/2010 6:05:32 AM Error Microsoft-Windows-WMI Error code: 5605 Eventlog: Application Note: I did lock down security about this time on these Servers, making the SQL Server Service Account (MYDOMAIN\SQLAcct) not an admin on the box anymore but giving it proper local security policies to run the cluster per Pro SQL Server 2008 Failover Clustering (Apress) by Allan Hirt (see chapter 5 "Service Accounts, Domain Groups, and Rights" p.186). Local Security Policy SQL Server Adjust memory quotas for a process (SeIncreaseQuotaPrivilege) Yes Bypass traverse checking (SeChangeNotifyPrivilege) Yes Log on as a batch job (SeBatchLogonRight) Yes Log on as a service (SeServiceLogonRight) Yes Replace a process-level token (SeAssignPrimaryTokenPrivilege) Yes My first instinct is to make MYDOMAIN\SQLAcct an admin again and see if these go away… rule that out or in, at least. But this won't really solve the problem since I don't want my service account to be an admin on the box. I am getting these errors every 5 minutes and they seem to be almost entirely on my "B" or passive nodes.
sql-server-2008securityclustererror-message
10 |1200 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

· Write an Answer
Blackhawk-17 avatar image
Blackhawk-17 answered
Top of my head -- sounds like remote WMI issues. See [this article][1] for some background and [this one][2] for potential workarounds. [1]: http://msdn.microsoft.com/en-us/library/aa389290 [2]: http://msdn.microsoft.com/en-us/library/aa393266
10 |1200 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.