Event ID 10030 — Virtual Machine Snapshot Operation

Applies To: Windows Server 2008

This is preliminary documentation and subject to change.

Virtual Machine Snapshot Operation.

Event Details

Product: Windows Operating System
ID: 10030
Source: Microsoft-Windows-Hyper-V-VMMS
Version: 6.0
Symbolic Name: MSVM_VMMS_VM_SID_HIJACKED_WARNING
Message: '%1' failed to create security identifier mapping from '%3' to %4 because it is already mapped to another name. (Virtual machine ID %2)

Resolve

Reinstall Hyper-V

A possible security compromise has been created. Completely reimage the server (sometimes called a bare metal restoration), install a new operating system, and enable the Hyper-V role.

Verify

The snapshot operation succeeds when retried.

Virtual Machine Snapshot Operation

Hyper-V