Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

For Windows Server 2008 failover cluster, I find it is dependent on Windows domain (in other words, Windows domain is pre-requisite of installing Windows Server 2008 fail over cluster). I am not sure why it is dependent on Windows domain? What features of Windows domain will Windows Server 2008 failover cluster utilize?

thanks in advance, George

share|improve this question

migrated from May 21 '10 at 3:22

This question came from our site for professional and enthusiast programmers.

up vote 1 down vote accepted

From this microsoft document: word format / google word->html it's used for security purposes.

Excerpts from the "Security Improvements section" :

The cluster service no longer runs under the context of a domain user account, also known as the Cluster Service Account (CSA). Instead, the failover cluster service runs under the local administrator account with the same privileges as CSA. This account relies heavily on the Cluster Name Object (CNO) in Active Directory.


Legacy NT LAN Manager (NTLM) is no longer required, and instead Kerberos will be the primary authentication. All network name resources will have Kerberos enabled and a computer object created, such as CNO or Virtual Computer Object (VCO). In addition, now all communications between nodes are secure; encrypted inter-node communication is configurable, and off by default. The CNO corresponds to the cluster name and is created in Active Directory when the cluster is created. Since a domain user account is no longer used for the cluster service, the CNO is used for all operations that require security inside the cluster. For example, when a network name is created and the resource is brought online, the CNO is used to create the VCO for that Network Name resource in Active Directory.

share|improve this answer
In short, it is a must requirement to install Active Directory in order to install Windows Server 2008 failover cluster? – George2 May 21 '10 at 6:26
@George2: yep it is – Zypher May 21 '10 at 13:05
Thanks, question answered! – George2 May 21 '10 at 15:52

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.