Yes, I've seen these guides, and I believe that I have followed everything accurately.
As a test, I installed a new 2019 Server w/ Hyper-V, didn't add it to a cluster, set up constrained delegation to this test server and was able to do Live-Migrations to the test 2019 box. But why can't I do it to my production 2019 Servers?
I am not using VMM. I am just trying to use the Hyper-V MMC and move-vm command to do my moves.
If my NTDS ports, you are referring to TCP/UDP ports, they should all be open without any firewall.
Here is my source computer:
PS C:\Windows\system32> setspn -L ABC-hyper-vr1
Registered ServicePrincipalNames for CN=ABC-HYPER-VR1,OU=DV Servers,DC=ABCDI,DC=company,DC=com:
MSServerClusterMgmtAPI/ABC-HYPER-VR1
MSServerClusterMgmtAPI/ABC-Hyper-VR1.ABCDI.company.com
WSMAN/ABC-Hyper-VR1
WSMAN/ABC-Hyper-VR1.ABCDI.company.com
Microsoft Virtual Console Service/ABC-HYPER-VR1
Microsoft Virtual Console Service/ABC-Hyper-VR1.ABCDI.company.com
TERMSRV/ABC-HYPER-VR1
TERMSRV/ABC-Hyper-VR1.ABCDI.company.com
Microsoft Virtual System Migration Service/ABC-Hyper-VR1.ABCDI.company.com
Microsoft Virtual System Migration Service/ABC-HYPER-VR1
Hyper-V Replica Service/ABC-Hyper-VR1.ABCDI.company.com
Hyper-V Replica Service/ABC-HYPER-VR1
RestrictedKrbHost/ABC-Hyper-VR1.ABCDI.company.com
HOST/ABC-Hyper-VR1.ABCDI.company.com
RestrictedKrbHost/ABC-HYPER-VR1
HOST/ABC-HYPER-VR1
Here is my 2019 production Server (which I can't Live Migrate to):
PS C:\Windows\system32> setspn -L ABC-hyper-v01
Registered ServicePrincipalNames for CN=ABC-HYPER-V01,OU=DV Servers,DC=ABCDI,DC=company,DC=com:
MSServerClusterMgmtAPI/ABC-HYPER-V01
MSServerClusterMgmtAPI/ABC-Hyper-V01.ABCDI.company.com
WSMAN/ABC-Hyper-V01
WSMAN/ABC-Hyper-V01.ABCDI.company.com
Hyper-V Replica Service/ABC-HYPER-V01
Hyper-V Replica Service/ABC-Hyper-V01.ABCDI.company.com
Microsoft Virtual System Migration Service/ABC-HYPER-V01
Microsoft Virtual System Migration Service/ABC-Hyper-V01.ABCDI.company.com
Microsoft Virtual Console Service/ABC-HYPER-V01
Microsoft Virtual Console Service/ABC-Hyper-V01.ABCDI.company.com
TERMSRV/ABC-HYPER-V01
TERMSRV/ABC-Hyper-V01.ABCDI.company.com
RestrictedKrbHost/ABC-HYPER-V01
HOST/ABC-HYPER-V01
RestrictedKrbHost/ABC-Hyper-V01.ABCDI.company.com
HOST/ABC-Hyper-V01.ABCDI.company.com
And finally, a test 2019 server which I can Live Migrate to:
PS C:\Windows\system32> setspn -L ABC-2019test
Registered ServicePrincipalNames for CN=ABC-2019TEST,CN=Computers,DC=ABCDI,DC=company,DC=com:
Hyper-V Replica Service/ABC-2019TEST
Hyper-V Replica Service/ABC-2019test.ABCDI.company.com
Microsoft Virtual System Migration Service/ABC-2019TEST
Microsoft Virtual System Migration Service/ABC-2019test.ABCDI.company.com
Microsoft Virtual Console Service/ABC-2019TEST
Microsoft Virtual Console Service/ABC-2019test.ABCDI.company.com
WSMAN/ABC-2019test
WSMAN/ABC-2019test.ABCDI.company.com
TERMSRV/ABC-2019TEST
TERMSRV/ABC-2019test.ABCDI.company.com
RestrictedKrbHost/ABC-2019TEST
HOST/ABC-2019TEST
RestrictedKrbHost/ABC-2019test.ABCDI.company.com
HOST/ABC-2019test.ABCDI.company.com
I believe that the constrained delegations are set correctly, but I certainly welcome a 2nd look.
Dave