Part 4. Domain joined environment: Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’
Update 14th Nov 2008. I've just released a script which does all this configuration in one or two command lines: HVRemote
Quick links to the all parts in the series: 1, 2, 3, 4 and 5
So after even more feedback and questions, part 4 of this series provides the walkthrough steps necessary to perform Hyper-V remote administration in a domain joined environment.
For reference:
- Part one is the server configuration for a full server installation in a workgroup environment
- Part two is the client configuration for parts one and three
- Part three is the server configuration for a server core installation in a workgroup environment
- Part four, this post, contains the relevant bits from parts two and three as applicable to deploying remote management of Hyper-V in a domain environment
- Setting up and the pre-requisites for Hyper-V on server core are in this post.
- More information on server core commands is here
Follow the same steps for setting up the server core box itself as before, but remember to join the machine to the domain by using netdom join <computername> /domain:<domainname> /userd:<domain user> /passwordd:*. Don't forget to enable remote administration.
Let’s first logon as domain administrator on the Vista machine and connect to the remote machine using Hyper-V Manager. As you can see, that works fine.
Obviously running as domain administrator isn’t a practical option in anything but a contrived lab environment. So I’ve created a standard user account in the domain called “domainuser” who is not an administrator either in the domain, the server core box with the Hyper-V role enabled, or on the Vista machine. Let’s see what happens when I start Hyper-V Manager on the Vista machine targeting the remote server core box. As you can in the screenshot below, it indicates that I am unauthorized. This is expected at this stage.
Step 1 Authorization Manager configuration
I need to authorize the domain user account for operations on the Hyper-V server, the same as I did in the workgroup environment. This is easier if I use an administrative account on the remote server core machine. For simplicity, I’m going to log back on to the Vista machine as domain administrator and run configure the Hyper-V authorization policy. (Note in the real world, you don't need domain administrator - this is for simplicity in the walkthrough only).
Logon to the Vista machine as Domain Admin and click start/run AZMan.msc.
Now open InitialStore.xml from the %systemdrive%\programdata\microsoft\windows\Hyper-V directory on the remote server machine. Right click on Open Authorization Manager and select Open Authorization Store…
Select XML and enter the path to InitialStore.xml (or browse to it, noting that the programdata directory is hidden).
Expand the tree through Hyper-V services\Role Assignments\Administrator and select “Administrator”. Note that I’m making this walkthrough as simple as possible by making the domain user an administrator in the context of being able to perform all operations on the machine running the Hyper-V role. This does not however mean that the domain user becomes, or needs to be a local administrator on the Hyper-V machine (or on the Vista machine).
In the right-hand side of the window, right click and select Assign Users and Groups then From Windows and Active Directory….
Select the domain user account and click OK.
You can now close Authorization Manager
Step 2 DCOM Configuration
Again, this is similar to the configuration steps necessary in the workgroup environment. You need to grant the appropriate users access rights to remote DCOM on the server. Use the same steps as in the workgroup configuration and add those users to the Distributed COM Users group.
On the Vista machine logged on with an account with administrative rights on the server core machine, click start/control panel/administrative tools/computer management.
Remember in the server core configuration steps, I allowed remote management to enable this to work. If you get an error - go back to the server core configuration steps (links at top of this post). Right Click on the top of the tree on the “Computer Management (Local Computer)” node and click Connect to another computer…
Enter the name of the remote server (jhoward-hp2 in my walkthrough)
Expand the tree down through Computer Management/System Tools/Local Users and Groups/Groups and select Distributed COM Users on the right hand side.
Double click on "Distributed COM Users", click Add… and select the appropriate users (domainuser in my walkthrough), and click OK.
Step 3. Remote WMI
This step is the same as the configuration steps necessary in the workgroup environment. You need to allow the domain user account access to the Root\CIMV2 and Root\virtualization namespaces. While Computer Management is still open from Step 2, expand out Services and Applications and select WMI Control.
Right click on WMI Control and select properties. Then switch to the "Security" tab. Expand the tree and select the "Root\CIMV2" namespace node.
IMPORTANT: You need to set the security twice. Once for the Root\CIMV2 namespace, and then again for the Root\virtualization namespace.
Click the "Security" button. If the appropriate user or group does not already appear, use “Add…” as you did in Step 2 above to add them.
Now select the user and click the Advanced button below the “Permissions for <user>” area.
Again, make sure the user/group is selected and click Edit.
You need to make three changes here:
- In the “Apply to:” drop-down, select “This namespace and subnamespaces”
- In the Allow column, select Remote Enable
- Check “Apply these permissions to objects and/or containers within this container only”
The screen should look like below. If so, click OK through the open dialogs.
Repeat for the Root\virtualization namespace
Click OK as appropriate to confirm all open dialogs and close Computer Management.
After completing this step, reboot your server for the changes you made in step 2 to take effect.
Step 4. Test it out
I logged back onto the Vista machine using the test domain user account. I started Hyper-V Manager and targeted jhoward-hp2, the remote server core machine. I then created a new virtual machine with all default settings, except selecting to add a virtual hard disk later. I started the virtual machine and connected to it. And as you can see in the screenshot below, the virtual machine is up and running (the boot failure message is expected as there’s no bootable media in the virtual machine).
Cool!
Cheers,
John.
Update 14th Nov 2008. I've just released a script which does all this configuration in one or two command lines: HVRemote
Comments
Anonymous
January 01, 2003
Aujourd'hui deux outils pour Hyper-V. Pas tout neufs, mais extrêmement utiles. Le premier vous serviraAnonymous
January 01, 2003
Hyper-V Management Console on Vista x64Anonymous
January 01, 2003
Hola Una herramienta imprescindible para configurar los servidores con Hyper-V para que se puedan administraAnonymous
January 01, 2003
Oleg - I have seen this when there are incompatible versions between the management client and the server. Remote management does not work in Beta from a Vista client - I suspect that you have not applied the RC0 update to your server (KB949219). That should resolve the problem. Thanks, John.Anonymous
January 01, 2003
Eric - yes, absolutely correct. Remote management does not work on Hyper-V beta. This series is specific to our RC release. Thanks, John.Anonymous
January 01, 2003
Geoff - Short answer is I'm not sure. You're certainly asking about an area far outside my expertise and doesn't look like anything specific to Hyper-V (please correct me if I'm wrong - if you're seeing different behaviour between physical machines and virtual machines, that's a different matter). My best suggestion would probably be to post a question on the Technet forums. The platform networking forum may be a good place to start: http://social.technet.microsoft.com/forums/en-US/winserverPN/threads/ Thanks, and sorry I can't provide more assistance. Thanks, John.Anonymous
January 01, 2003
The comment has been removedAnonymous
January 01, 2003
The comment has been removedAnonymous
January 01, 2003
Matt - Hyper-V has reached RTM - I assume the pre-release builds have been pulled. See http://blogs.technet.com/jhoward/archive/2008/06/26/hyper-v-rtm-announcement-available-today-from-the-microsoft-download-centre.aspx for RTM links. Please upgrade to RTM and let me know if you are still seeing the same issue. Thanks, John.Anonymous
January 01, 2003
eisenpony - this should work (http://blogs.msdn.com/virtual_pc_guy/archive/2008/01/17/allowing-non-administrators-to-control-hyper-v.aspx), I've not heard of it not working if the AZMan configuration has been done. Can you email me a screenshot of the AZMan configuration? Thanks, John.Anonymous
January 01, 2003
Kyle - Can you verify a few things to start narrowing this down.
- The "No Heartbeat" is because the Integration Services aren't installed inside the virtual machine. However, if you can't connect to the virtual machine to be able to do this, that explains that one, so it's probably not relevant.
- On the Domain Controller, did you installed KB949219 as well to get the RC0 version of the management tools installed as well?
- Is it possible to verify if there is a firewall issue here by disabling the firewall on both the computer running the MMC and the server core installation of Hyper-V? (netsh firewall set opmode disable). Thanks, John.
Anonymous
January 01, 2003
Ryan/Hilton - can you both please confirm the details of the account you are running step 3 in. If you have the opportunity, can you confirm if you can expand the namespaces when logged on as "the" domain admin. If that is not possible, please confirm you are running this as a domain user account which has local administrative rights on both the vista and remote server core machines, and not a local account. One other interesting thing would be to run wbemtest on the Vista machine and attempt to connect to \remoteserverrootcimv2 and \remoteserverrootvirtualization. Does that succeed, or do you get an access denied error? Thanks, John.Anonymous
January 01, 2003
Geoffrey - can you try using HVRemote to verify things are configured correctly. code.msdn.microsoft.com/hvremote.
In particular run HVRemote /show /target:otherboxname on both client and server and follow it's diagnosis if errors are shown.Anonymous
January 01, 2003
The comment has been removedAnonymous
January 01, 2003
So far, I’ve covered the following Hyper-V Remote Management scenarios: Workgroup: Vista client to remoteAnonymous
January 01, 2003
Joe - part 2 referred to a workgroup scenario. You should not need to enable Anonymous DCOM for a domain scenario. Thanks, John.Anonymous
January 01, 2003
Naresh - I have absolutely no idea what you are referring to?????! Cheers, John.Anonymous
January 01, 2003
Ryan - yes, these two specifically: netsh advfirewall firewall set rule group=”Windows Management Instrumentation (WMI)” new enable=yes and netsh advfirewall firewall set rule group=”Remote Administration” new enable=yes It's also possible that you're getting domain policy being pushed down for the firewall. Of that though, I can't comment on what's present, but it is possible you are being blocked by it. Thanks, John.Anonymous
January 01, 2003
The comment has been removedAnonymous
January 01, 2003
Hilton - so your environment is different to the walkthrough I'm describing. I have not validate this scenario, but you will probably need to enable anonymous callbacks to make this work in your setup. Using dcomcnfg you will need to allow remote access to "ANONYMOUS LOGON". See step 7 in part two. I'm still tracking down why WMI namespace enumeration is failing in the clean environment described above in Ryans case - as you have a mixmatch of domain and non-domain machines, it is possible you are hitting a different problem. I see a part 5 coming.... Thanks, John.Anonymous
January 01, 2003
Announcing "HVRemote"...., a tool to "automagically" configure Hyper-V Remote ManagementAnonymous
January 01, 2003
It has been a little quiet on the blog front, but sometimes, at least in this case, I hope I've comeAnonymous
January 01, 2003
The comment has been removedAnonymous
January 01, 2003
Don - you need to emulate the Hyper-V Management Client rules in the OneCare firewall. To be honest, I've never used OneCare so don't know how you go about this. My best suggestion would be to ask the OneCare team themselves - they maintain a team blog athttp://windowsonecare.spaces.live.com/default.aspx?wa=wsignin1.0&sa=928167145. However, maybe over the Christmas holiday, I'll have time to work it out and post up entry.... no promises though. The OneCare team would probably be quicker though. Thanks, John.Anonymous
January 01, 2003
Shiva - what build of Windows 7 (R2) are you using - are they equivalent builds ie beta-beta or rc-rc, or an interim build between beta and rc. You will hit this issue in certain combinations of mismatched bits due to a bug which existed in the development cycle (fixed now, and rc-rc should not have this bug). Thanks, John.Anonymous
January 01, 2003
The comment has been removedAnonymous
January 01, 2003
Prabhat - by far the easiest was to diagnose this is to run hvremote /show on both the client and the server. If you can post that back, and also the output of a ping by name (not IP) from server to client and client to server, it will probably give me everything needed. Thanks, John.Anonymous
January 01, 2003
Many thanks for your whole series. Without it, i wouldn't have been able to get Hyper-V remote management to work the way i want it. I hope you'll write about AzMan and VM Scopes in the future - i've got it working (and wrote about it here: http://projectdream.org/wordpress/2008/07/03/delegating-hyper-v-virtual-machines/ ), but i'm not entirely sure if i did everything correctly.Anonymous
January 01, 2003
Glenn - partly correct. Hyper-V remote management tools on Vista (KB952627) requires Business, Enterprise or Ultimate SKUs. Thanks, John.Anonymous
January 01, 2003
The comment has been removedAnonymous
January 01, 2003
Shiva - if you're and MS employee (which I assume you are from the reference to MSIT SUPPORTED VERSION), please follow up with me internally, or on the internal aliases. Thanks, John.Anonymous
April 01, 2008
Again, I can't thank you enough for taking the time to find a solution for this problem. However, it is still not working for me. I got through steps one and two without any problems and then hit a snag at step three. When I go to the WMI Control Security Tab all I can see it the Root namespace, nothing below it, not even after I expand it. This shouldn't really matter because my domain user is part of the Local Administrators group on my Server Core install and that group is given full control over all of WMI by default. I am really at a complete loss here, it should be working just fine. I haven't been able to see if I can manage it from a full Server 08 install using its Hyper-V Manager so that is what I am going to have to try next. Thanks, Ryan LenkersdorferAnonymous
April 01, 2008
I am able to remotely manage everything else but Hyper-V. I have enabled all the firewall rules that exist for WMI and remote administration in general on both the client and the server, still nothing. Is there some specific command that you had in mind? Thanks, RyanAnonymous
April 02, 2008
I ran both commands, I am pretty sure I have ran them in the past as well, but it said it updated a few rules. I also went though our Group Policies and removed all policies regarding the firewall config on the server. I then ran a gpupdate on the server and restarted it. I then ran gpresult to make sure it wasn't applying anything else and tested it. Nothing. I am not sure what in the world could be wrong now. Clean install of Server 2008 Datacenter Server Core x64 with nothing else running on it. Clean install of Vista Business SP1 x64. Both on the same domain (Windows 2000 level domain if that matters), both have my domain user added to their Local Admin groups. I also get the same error if I point the Management Console at another server running Hyper-V Beta. Disabling the firewall on both client and server does nothing. It just doesn't make any sense. Thanks, RyanAnonymous
April 02, 2008
The comment has been removedAnonymous
April 02, 2008
The comment has been removedAnonymous
April 02, 2008
HI John, Although I don't have a domain-joined Core+Hyper-V setup, I have the exact same issue - I can start and stop services via Computer Management on my Vista SP0 machine, yet I have no namespaces under Root in WMI Control. (I also posted this, or similar, at the end of Part 3, but since Ryan's issue above is almost identical to my issue, I thought it only sensible to tag along in here instead. :)Anonymous
April 02, 2008
The comment has been removedAnonymous
April 02, 2008
... and as to the wbemtest test, I can connect to both cimv2 and virtualization without errors, but past that, I'd not know what to do to know that these have actually connected properly. So, as for not getting errors saying access is denied, it seems that this works fine.Anonymous
April 02, 2008
Okay, I have verified that I am running a true domain user and that the user has been added to the local administrators group on both the Vista machine and the remote server core machine. I do not have the ability to log in as 'the' domain admin but I have verified the above information. I also used wbemtest and was able to connect to both namespaces without issues. Thanks again for you help! -RyanAnonymous
April 02, 2008
Here are the results of "net localgroup Administrators" ran on both machines: Remote Server Core Machine: C:Usersscs!admin>net localgroup Administrators Alias name Administrators Comment Administrators have complete and unrestricted access to the computer/domain Members
ADDomain Admins ADrdlenk Administrator The command completed successfully. Vista Workstation: C:Usersrdlenk>net localgroup Administrators Alias name Administrators Comment Administrators have complete and unrestricted access to the computer/domain Members
ADDomain Admins ADrdlenk Administrator The command completed successfully.
Anonymous
April 02, 2008
Our domain here is "AD" and both computers are joined to it. My domain username is ADrdlenk, so it is defiantly added to both admin groups and it is defiantly a domain account. Thanks, RyanAnonymous
April 02, 2008
The comment has been removedAnonymous
April 02, 2008
The comment has been removedAnonymous
April 03, 2008
John, Thanks for the help (so far). I too have a mixed domain issue. My case is typical for a classroom environment. The HV host contains a unique 2k8 domain controller (Full 2008, not core). Students will connect using laptops they provide and are clearly not in this domain. I want to give them access to the Hyper-V manager from machines that are not in the domain. It is looking like I will have to give them remote logon access from where they can start it from within the domain. I have followed your instructions, but attempting to provide all permissions to 'everyone'. Still, ultimately, the wbemtest will fail to connect unless I provide a domain account. It is looking to me like the remote Hyper-V Manager needs to allow specification of alternate credentials so it can pass them along in the WMI calls, but there does not seem to be a way to do that. I thought I would pass this on and I am hoping you might find a "part 5" solution!Anonymous
April 04, 2008
The comment has been removedAnonymous
April 09, 2008
I was getting the same problem. It appears that the new management client for 2008 Hyper-V on x64 cannot connect to the Hyper-V Beta. I just installed this patch "http://www.microsoft.com/downloads/details.aspx?FamilyID=ddd94dda-9d31-4e6d-88a0-1939de3e9898&DisplayLang=en" and it fixed it for me. Hope this helps.Anonymous
April 15, 2008
Any idea how to make this work when the hyper-v server is also a DC without a local dcom user group? Client is Vista Ultimate x64.Anonymous
April 18, 2008
The comment has been removedAnonymous
May 07, 2008
I have hyper-v running on a core 2008 install in a 2k8 domain. I used your walkthrough and was able to get everything working correctly, with one exception. After I create a VM, I am unable to connect to it to install the OS. I simply get an error stating "Cannot connect to the virtual machine. Try to connect again. If the problem persists, contact your system administrator." Also at the bottom of the MMC, the heartbeat is reporting as no contact, if that helps. Hyper-V is running RC0, and the MMC is running on a 2k8 DC (for testing purposes only). Any help would be appreciated. Thanks.Anonymous
May 08, 2008
John, Thanks for the quick reply. I have verified that KB949219 has been installed on the DC. After I disabled the firewall on both servers, I was able to connect. I double checked my firewall policy to ensure that I did have the inbound rule set to allow "Hyper-V Management Clients - WMI (Async-In, DCOM-In, and TCP-In)" on the DC. Is there another rule that I have overlooked? Thanks, KyleAnonymous
May 22, 2008
John, First if thanks for the guide. Second, I am experiencing a slightly different issue that I hope you may be able to help with. I am able to connect to my core server hyper-v installation (from a server running full 2k8 and hyper-v) and manage VMs but when I attempt to set up the virtual network I receive the following error: "There was an error enumerating the machine's network switches. make sure the Microsoft Hyper-V Network Service is installed and working properly You may not have permission to perform this task" I followed the steps above, and I am able to remotely manage the server. I don't see a service named "Microsoft Hyper-V Network" running on either server so I am not sure what exactly the error is referring to. I am currently using a Domain Admin account.Anonymous
May 31, 2008
John, I've upgraded my server to rc1 as well as my client management console. I was able to successfully connect and control the VMs from the vista client before the upgrade. After, not so much. I get the following message in the Virtual Machines Pane: "Access denied. Unable to establish connection between 'Server' and 'Client'." I'm able to control other aspects of the server, like creating and deleting virtual networks. But can't manage the VMs. Also the VM creation wizard (run from a host local manager of course) fails for me if I try to create a VM without a network connection.Anonymous
June 02, 2008
Very helpful article! For users trying to connect to a domain controller, add your user to the BuiltinDistributed COM group in your AD instead of in local groups.Anonymous
July 14, 2008
Can anyone tell me where to download KB949219? When I go to download that KB from here http://support.microsoft.com/kb/949219 It says the page is gone. I am really struggling with getting Core to work with a remote management client (x86) vista sp1. Both machines are in the same domain. I have done all the steps above but still get the same problem as John May 22nd and Kyle from May 7th...ERRRR!!! Seems that MS would have it, you know, just work.Anonymous
July 21, 2008
I've upgraded to RTM and I continue to get an error when I try to connect to the console of the Virtual machine. I right click a machine in hyper V and get "cannot connect to the virtual machine. Try to connect again, If the problem persists, contact your system administrator" (Dont you hate it when you're the guy youre asked to contact? heh) Anyway, its 64bit 08. Ive tried turning off the firewall on the host and everything else in this string of comments and cannot connect to my VM. I have a bad habit of asking for help as a last resort only, but I would really like to see this work. Any insight anyone can offer would be greatly appreciated. ccollieratscg.netAnonymous
August 05, 2008
The comment has been removedAnonymous
September 10, 2008
Kyle - To solve the "Cannot Connect to the virtual machine. Try to connect again. If the problem persists, contact your system administrator." error, you need to enable inbound port TCP port 2179 see: http://www.winfreddekreij.com/windows-2008/74-hyper-v-virtual-machine-connection-error for more info.Anonymous
September 19, 2008
If you get "Group cannot be specified along with other identification conditions" when trying to do either of the "netsh advfirewall firewall set rule group=" rules, try TYPING them out in full and don't cut and paste. It worked for me!Anonymous
September 26, 2008
Hi, I'm facing the exact same problem described in this article right now but I'm not even able to connect using the domain administrator account. I set up the domain just for the purpose of testing hyper-v. The firewall is disabled on all member machines and I did my best to verify that all COM / WMI rights are properly set. On top of that everything works just fine if I'm logged on to the hyper-v core installation while trying to connect from a remote machine. Once I "logoff", the connection from the management machine fails again. Has anyone seen similar behaviour before?Anonymous
October 08, 2008
The comment has been removedAnonymous
October 13, 2008
John, In a domain environment, is it possible to remotely manage Hyper-V from a Vista machine without enabling remote access for Anonymous Logon in DCOM as you outlined in part 2? I was logged into a Vista machine as a domain admin connecting to a Hyper-V machine in the same domain and received "Access denied. Unable to establish communication between 'SERVER' and 'CLIENT'" error messages in the Hyper-V Management console until I enabled this setting in dcomcnfg.Anonymous
December 06, 2008
Kindly correct the " when you run the abobe commandAnonymous
December 12, 2008
Hi John, I've been plagued with the Unable to connect to the server because of the RPC issue. I'm using a Workgroup configuration and have isolated the issue to conflicts with my "two" firewalls. I followed the instrucitons and installed the exception rules. However, my second firewall is OneCare. If I login and OneCare is running then I cannot connect. If I shut down the OneCare firewall and turn on (or off) the Windows Firewall then I can connect in less than a second. After connecting "during my Windows login session" I can turn either or both firewalls on and happily connect through the Hyper-V manager in a workgroup Vista configuration.Anonymous
January 14, 2009
John, I installed KB952627 on a Vista Home Basic SP1 (x86), but the Hyper V manager does not appear when I try to add it to the mmc. Does it require Vista Ultimate ? ThanksAnonymous
January 23, 2009
The comment has been removedAnonymous
January 31, 2009
Hello Another Question: Can I uninstall Hyper-v MMC from my VISTA Client PC? If YES, How - As I dont see this in Manage Programs in Controlpanel. Thanks, PrabhatAnonymous
February 06, 2009
The comment has been removedAnonymous
March 09, 2009
The comment has been removedAnonymous
March 09, 2009
belay my request for information! I just realized that I hadn't applied the KB950050 update on the server. I just completed that and I can now make remotely manage VMs. I'm off and running. Big kudos again to taking the time to help us little folks along the way!! DanAnonymous
April 06, 2009
Hi John, In Hyper-V, Is there anyway to configure a DHCP which is part of a Virtual Network through WMI? i.e.. The DHCP is enabled in a Win 2K8 VM. I wish to configure the DHCP via WMI running from the Host Server. Thanks again for the article, I have taken key scripts from HVRemote utility. It helped a LOT!! Thanks ShivaAnonymous
June 26, 2009
When do we get our host key, and web interface back, so that we can be done with all this remote management garbage?Anonymous
August 04, 2009
In some machines when we make a VMConnect, I am getting a certificate error. It goes as follows "Your remote desktop connection failed because the remote computer cannot be authenticated. The remote computer could not be authenticated due to problem with the security certificate. It may be unsafe to proceed." I ran the HVRemote utility for the users by which I am going to authenticate with the host servers. In one windows 7 machine I got this error. Any thoughts on the same?Anonymous
August 04, 2009
Hi John, Thanks for the reply. The Windows 7 version is 7100 RC MSIT SUPPORTED VERSION. Can we expect the certificate message "Your remote desktop connection failed because the remote computer cannot be authenticated." in this version. Also from which version the fix is available? Please let me know. Thanks, ShivaAnonymous
October 08, 2009
Hi John Thanks for all your work on this. I have been using HVRemote to configure W2K8 R2 Hyper-V for remote access from my Vista PC. If I give myself admin rights on the server then everything works a treat. If I remove admin rights though, after running HVRemote then everything works apart from the media drives. When I click on the Media item in the Virtual Machine Console I get a message saying "Drives not loaded". This seems to tie in with the following event log message on the server Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 07/10/2009 16:53:25 Event ID: 4656 Task Category: Other Object Access Events Level: Information Keywords: Audit Failure User: N/A Computer: hvserver.local.com Description: A handle to an object was requested. Subject: Security ID: mydomainmyaccount Account Name: myaccount Account Domain: mydomain Logon ID: 0x2db3b20 Object: Object Server: PlugPlayManager Object Type: Security Object Name: PlugPlaySecurityObject Handle ID: 0x0 Process Information: Process ID: 0x38c Process Name: C:WindowsSystem32svchost.exe Access Request Information: Transaction ID: {00000000-0000-0000-0000-000000000000} Accesses: Unknown specific access (bit 0) Access Reasons: - Access Mask: 0x1 Privileges Used for Access Check: - Restricted SID Count: 0 Any thoughts on how to resolve this? Thanks AlanAnonymous
February 11, 2010
The comment has been removedAnonymous
March 10, 2010
The comment has been removedAnonymous
March 07, 2014
Hello John, thank you so much for this article.
I've some problems with my user, trying to connect and to manage my hyperV server.
If I add a user as local admin on the hyperV server, this user can do everything (remote connection, remote management...)
I creat a new user, without any admin right and I follow your article, this user can now remote manage the server but he can't remote connect to it and the remote management is very limited : I can't see VM, I can't creat VM... I can only "start services" whereas in admin, I can see VM, start and creat VM...
Can you help me ? (I used a HyperV server 2012, an AD on Windows Server 2012 and a client on Windows 8)
Sorry for my english, I'm french and I hope you could understand my problem.
Thank you very much