we have quite a simple set up here on our HPC Server 2008 R2: one cluster admin ('administrator') and one widely used cluster user account ('fred'). Until yesterday, fred was also a cluster admin by the HPC Cluster Manager. Fred ist also a member of
the Administrators, Domain Admins, Domain Users and HPCUsers group on the head node. The head node is the domain controller for a separate hpc domain.
Everything was fine until we decided that the normal users did not need the HPC Admin privileges and set the role of fred to User in the Cluster Manager. With that, fred cannot use the Job Manager any more (everything greyed out), but he can submit jobs
via a different application, but those jobs fail because fred is suddenly no longer allowed to start or stop services on the compute nodes (which we do as node prep and release tasks for our specific jobs).
What's wrong? Why do we need cluster admin privileges?