Share via

Event ID 10031 — Virtual Machine Snapshot Operation

  • Article

Applies To: Windows Server 2008

This is preliminary documentation and subject to change.

Virtual Machine Snapshot Operation.

Event Details

Product: Windows Operating System
ID: 10031
Source: Microsoft-Windows-Hyper-V-VMMS
Version: 6.0
Symbolic Name: MSVM_VMMS_VM_SID_HIJACKED_WARNING_SUMMARY
Message: Failed to create security identifier mapping from '%3' to %4.

Resolve

Reinstall Hyper-V

A possible security compromise has been created. Completely reimage the server (sometimes called a bare metal restoration), install a new operating system, and enable the Hyper-V role.

Verify

The snapshot operation succeeds when retried.

Virtual Machine Snapshot Operation

Hyper-V