StoreFront propagation fails with "Access is denied" error / joining the server group fails

StoreFront propagation fails with "Access is denied" error / joining the server group fails

book

Article ID: CTX284710

calendar_today

Updated On:

Description

When attempting to join the secondary storefront server the server group fails,
Below events logged in the Primary storefront server 
Event ID 2850, 2203
===
"An error occurred while executing the following command: 'Remove-DSClusterMember'
The access was denied.
===

Or 

When attempting to propagate changes, it fails.
In Eventviewer of StoreFront server, we observe-
Event 31, Citrix Configuration Replication service-

 

Resolution

1.On all the storefront servers, browse to:

MMC > File > Add & Remove Snap-In > Local Users and Groups > Groups > 


2. Add below accounts on Administrators and CitrixStoreFrontAdministrator group on both storefront servers.

Machine account for storefront 1
Machine account for storefront 2
NT SERVICE\CitrixClusterService
NT SERVICE\CitrixConfigurationReplication"(only on storefront 1)
SYSTEM


3. Restart all servers sequentially.
4. Once servers are back up, ensure services are running and initialize server group join and propagate.
 


Problem Cause

This issue can occur if storefront server machine accounts are missing from the CitrixStoreFrontAdministrator group on the StoreFront servers.

Additional Information

https://support.citrix.com/article/CTX206872