Hi,
Windows 2008 R2 cluster.
The cluster was created with a non domain-admin account, just the permissions needed to create all the AD objects in the Active Directory and give them the needed permissions.
I've been checking the permissions needed for the cluster objects according to Microsoft documentation (http://technet.microsoft.com/en-us/library/cc731002(v=ws.10).aspx) and the the cluster object in the AD has Full Control permissions for itself (there's an ACE for SELF account within the ACL with Full Control permissions.
The permissions for SELF account are reset and change from Full Control to only Change Password every month, as the cluster itself were resetting the permissions for itself after a password change. The permissions for the cluster itself (SELF account) are reset just after the cluster account password change.
Why the permissions for the cluster itself are changed after the machine password change?
Thank you.