General Access Denied Error - Hyper-V


hi

we have hyper-v 2012 3 node cluster, vms stored on server 2012 based 2 node scale out file server.

we created setup new in october 2013 , has worked ok since occasional "general access denied error (0x80070005)" when try live migrate virtual machine.  instructions in below technet article not work - result indicates success when try live migration again same error message.

http://support.microsoft.com/kb/2249906/en-gb

i have in past resolved removing virtual machine failover cluster manager, migrating via hyper-v manager, logging on destination hyper-v host , re-importing failover cluster manager there.

however last night doing system maintenance and went drain host via failover cluster manager.  host had around 20 vms on , 2 vms migrated - other vms did not migrate , cannot move them host love nor money!

the event log fcm indicates have "general access denied" error.

i have tried following:

  • use instructions in above mentioned technet article (shows success, same error happens when try live migrate)
  • tried method have mentioned above (removing fcm etc.).  access denied message
  • checking folder permissions on "virtual machines" folder xmls stored.  permissions appear ok hyper-v hosts (also checked vms vhd permissions)
  • trying live migration directly on hyper-v host rather via constrained delegation scenario
  • checking constrained delegation in ad (seems fine per when set in october)
  • checking permissions on scale out file server

with regards scale out file server have noticed in past odd permissions things going on.  have seen permissions hyper-v hosts going (for example) "full access" on "this folder, subfolders & files" random things " read/modify" on "this folder only".  manually changing permissions full control resolves issue, not stop recurring again.

so i'm bit confused really!  looks mixed basket of permissions issues going on!  of our critical machines on host @ moment , cannot moved.  suggestions appreciated.

many thanks

hi,

first 2-3 questions, have virus scanner installed , if , id check needed settings running virus scanner on hyper-v host?

second, accounts having full access on shares ? domain admins + hyper-v-hosts$ , cluster machie account$ ?

did check recommended hotfixes failover clusters , hyper-v clusters ? if talking version 2012 not r2 ?

http://support.microsoft.com/kb/2784261/en-us

assuming have patched systems, means windows updates date also.

udo



Windows Server  >  Hyper-V



Comments

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

Event ID 64,77,1008 Certificates Events Windows Server 2008, 2008R2