Why do my Hyper-V created VMs have Computer objects that contain an SCP?

Question

Its simple, I went to delete some computer objects of PCs which no longer existed, and ADUC threw a warning about deleting the subtree. After using ADSI Edit I found that each of the 6 objects had sub-objects that were Service Connection Points named with CN=Windows Virtual Machine.

Why are these being created automatically? Is it Hyper-V or AD that adds them?

Can I just delete the objects by using the Use Delete Subtree server control checkbox safely (Theres only one sub-object for each one, the SCP in question)?

I don't need these empty SCPs being made, can I stop it from happening?

Answer 1

The Service Connection Points (SCPs) you're seeing under the computer objects are created automatically by Hyper-V when virtual machines are joined to Active Directory. These SCPs are used to register services, such as virtual machine management services, within AD.

Regarding deleting these SCPs, using the "Use Delete Subtree server control" option should be safe, especially since you're confident that the SCPs are not needed and are the only sub-objects under the computer objects.

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin