Windows 10: RBAC or limited access for Hyper-V on Windows 10 in Domain

Hi,


We've domain 2008 R2 soon will be 2012 R2 or 2016 at least which all systems Windows 10 Professional are part of it and all users are normal limited users.

We want to enabled Hyper-V feature on their system so they can have VMs on their own system instead of us hosting VM for them and they connect remotely.


We are looking for a way to limit their access to Hyper-V so they'll not change anything in virtual switch configuration nor VM network configuration we'll enabled DHCP Guard for security reasons.

As I checked, when Hyper-V is installed, it's creating a group for "Hyper-V administrators" which is not what we want.

I saw some posts 20~25 about RBAC and InitialStore.xml but I can't find InitialStore.xml on none of our systems with Hyper-V.


Also, is it possible to limit the number of VMs user can have or run on their systems?


I'll be grateful if anyone could kindly help with this matter.

Thanks a lot in advance for your kind help

:)

 

Hyper-V Manager Unable to Connect to Remote Servers in Windows 10

I recently upgraded from Win 8.1 Enterprise to Win 10 Enterprise. I had Hyper-V Manager installed to connect to a few Hyper-V hosts running on Windows 8.x. After the upgrade on my machine, I can no longer connect to the remote Hyper-V hosts.

• All Machines are part of the same domain.
• This worked prior to the upgrade.
• Verified that all the Remote Administration and WinRM features were enabled in the firewall post upgrade.

Here's the error I receive:



I've googled this a bit and tried a suggestion about running winrm quickconfig. That ran through it's process but did not resolve the issue.

Any help would be appreciated! I need to get access to manage these hosts through the Hyper-V MMC.

Thanks in Advance,

Doug

 

Hyper-V networking

Windows 10 Pro, Build 10586.71. Hyper-V installed. All was working well, and then I got a chipset update from Dell. Installed the update and rebooted computer. After that networking was not working correctly, windows showed limited connectivity. I looked
a little to roll back the driver update, but Windows did not show a new Nic card driver and the chipsets I looked at also did not show a current date. The Dell Command update program does not provide a way to uninstall updates.

I tried to access hyper-v switch manager but it returns an error that "an error occurred while trying to retrieve a list of virtual switches". Also tried using the powershell cmdlet but got a general error.

I accessed the networking center and deleted the Hyper V adapter, then edited my LAN card's config disabling the two Hyper V protocols and enabling the rest. This let me get back on-line with my computer. I have tried uninstalling the Hyper V feature,
reboot, reinstall - but I am still unable to access the switch manager. I then removed the feature again, re-named the C:\ProgramData\Microsoft\Windows\Hyper-V directory, rebooted, added the feature again. This time (obviously) none of my VM's show up but
I'm still unable to access the switch manager.

There is no critical data in my Hyper V, I use it for testing, re-creating issues, learning, etc. Is there a way for Windows 10 (or something designed for server 2012 that will apply) that I can use to fully reset the Hyper v networking, or fully rest all
of hyper v so I can get it working again? I do use the workstation heavily, it's my work computer so it would be very difficult to impossible to reinstall the OS.

Thoughts and suggestions appreciated.

 

Remote Hyper-V Management Access Denied in an AD Environment.

Good Morning,

I have a small home environment consisting of some Windows 10 workstations (and a Windows 7 machine) and a Hyper-V host. The Hyper-V host runs Windows Server 2016 Standard (Server Core) and has a Windows Server 2016 Standard (Server Core) VM, configured
with AD as a PDC, DNS and File Services server. I additionally have various *nix VM's running unrelated services. The Hyper-V host is also a domain member.

The problem I am having is that I cannot remotely manage the Hyper-V host. Server Manager displays "Online - Access Denied", whilst Hyper-V Manager gives an incorrect username/password error. In both instances, I am logged in with my domain account, which
is a member of both "Domain Admins" and "Hyper-V Administrators". Additionally, I have added my domain account to the local administrators group on the Hyper-V host (as a test, though this should not be necessary).

My domain credentials work on my other machines on the network, and I can also log into the Hyper-V host physically with them.

I have tried removing the Hyper-V host from the domain and re-adding it, to no avail.

I have been reading the documentation online and it seems that for a Hyper-V host to be managed on a domain, one needs only login with a domain administrator account. Does anybody have any experience of a similar situation?

Best regards,

Jack