Hyper-V cannot create VMs on a NAS "Failed to create external configuration store General Access is Denied Error (0x80070005)"

Anthony Tropiano 6 Reputation points
2021-08-01T17:23:34.377+00:00

Hello,
I am running into an issue which I cannot seem to solve and I'd need some help. I don't know if this question has been answered in the past but here is my scenario.
I have 2 servers (Server A and Server B)
Both servers have Hyper-V manager installed on them.
I have a QNAP that I want to use as my shared storage. I have shared the drive and am able to map the drive from the QNAP with no issues. My QNAP is joined to my domain so I am mapping it with my domain credentials.

When I try to create a virtual machine from either server to that mapped drive I keep getting General Access is Denied Error. I have no idea what I'm doing wrong, I am looking in the permissions of the QNAP and everything seems to be OK. If I look at the share permissions on the shared drive I can see my domain user with full access.

Can someone please help me shed some light on why this isn't working.

My goal is to have my QNAP acting as the main place to keep all my VMs and spread my VM use across my 2 servers. Also, if in the event one server dies I want to be able to just repoint my VMs to the other server.

This should be pretty straight forward but I can't understand this permission issue.

Thanks!

Hyper-V
Hyper-V
A Windows technology providing a hypervisor-based virtualization solution enabling customers to consolidate workloads onto a single server.
2,733 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Eleven Yu (Shanghai Wicresoft Co,.Ltd.) 10,756 Reputation points Microsoft Vendor
    2021-08-02T04:10:11.433+00:00

    Hi,

    Thank you for posting the question to Q&A forum.

    Please kindly try below methods to see if there is any help.

    1. Use local administrator or domain administrator to log in the server and create the VM.
    2. On both servers, edit the policy to include NT Virtual Machine\Virtual Machines to "Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Log on as Service"
    3. Grant "Everyone“ with full access to the share permissions on the shared drive
    4. Refer to the workaround in this article to see if it works for you.
    5. Check this thread to see if there is any useful information, especially the answer from pkratz.

    Thanks,


    If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

    0 comments No comments

  2. Anthony Tropiano 6 Reputation points
    2021-08-03T11:54:40.42+00:00

    Hello,
    Sorry it took so long to answer this.
    I checked the permissions on the server for NT Virtual Machines and they are there in gpedit
    I also checked the permissions settings on the share folder and both the user i am logged in with as well as the computers have full access to that share.
    In Eric Fang's post I cannot find this group called Virtual Machines. Even if I click on the advanced tab and select Find Now when I want to search for this group it is no where to be found
    I have no idea what this means

    I for sure did not create constrained delegations (I've never done this)
    i still have the issue.
    for paul kratz post in not sure i follow what he did to fix it.
    as far as i can tell he recreated the share rebooted the server and all was fixed but this does not work for me

    im not sure where the permission error is

    0 comments No comments

  3. Anthony Tropiano 6 Reputation points
    2021-08-03T15:55:31.097+00:00

    An edit: I scrapped using the option of using the share as a mapped drive via Microsoft File Service.
    I just configured it as a trusty iSCSI and everything worked pretty much instantly.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.