Hyper-V user access permissions

Question

so i got a bit of a simple yet frustrating question i cannot seem to find the correct answer to.

Lets say i have a server and domain with users on it, and i would like the non admin users to gain access to and use hyper-v on various computers, since normally only admin accounts can use hyper-v.

Problem is, i would like to have a GPO or some other setting that allows me to add this feature directly to the domain or server, such that i do not have to go to each individual computer and tell it that each individual non admin user on the domain is allowed to use hyper-v.

but from all the info i have found it seems i can only reach info telling me how to add users on each pc, or to add hyper-v to a server system and how to remove access that singular system from each pc.

Is it at all possible to add policies or anything like that to allow these non admin accounts to use hyper-v on different machines without adding it on each new pc everytime ?

Answer 1

Hi @Frederik Wøhliche ,

Unfortunately to manage Hyper-V you will require to be an administrator of that computer running Hyper-V.
There is no Role-based access control (RBAC) for Hyper-V, unless you install System Center Virtual Machine Manager (SCVMM) or similar tools.

----------

If the reply was helpful please don't forget to upvote and/or accept as answer, thank you!

Best regards,
Leon

Answer 2

Hello Frederik,

Yes, this is possible and the steps are documented in this article: https://learn.microsoft.com/en-gb/archive/blogs/virtual_pc_guy/allowing-non-administrators-to-control-hyper-v

Other option is surely by GPO but never tried before:

In theory from Computer Configuration –> Preferences –> Control Panel Settings –> Local Users and Groups; Add a new rule (New -> Local Group); You can use the Hyper-V Administrators Group to add members there.

Hope this resolves your query,
Best regards,