Tag Archives: System Center Virtual Machine Manager

Create A Dedicated Account To Join Computers To A Domain

This is a quick post to describe the process of creating a dedicated account for joining machines to an Active Directory (AD) domain.  This is useful for things like System Center Configuration Manger task sequences and System Center Virtual Machine Manager templates.

First create a standard Windows user account.  Next, right-click on the Computers Organisation Unit (OU) within your AD domain.  From the menu choose Delegate Control…

DJA1

 

On the next screen (Users or Groups) choose Add and select the user account you just created.  Click Next.  Choose “Create a custom task to delegate” on the next screen.

DJA2

 

Next, choose to only delegate control to computer objects and tick Create and Delete selected objects in this folder.  Click Next.

DJA3

 

On the next screen choose to show general permissions and from the list select:

  • Reset password
  • Read and write account restrictions
  • Validated write to DNS host name
  • Validated write to service principal name

DJA4

Click Next and finish to complete the wizard.  Repeat this process for any other OUs where you’ll be joining computers to the domain.

Advertisements

System Center Virtual Machine Manager 2012 SP1 Permission Issues

I recently had to troubleshoot an issue on a System Center Virtual Machine Manager 2012 (SCVMM) SP1 server.

All the managed hosts were in a state of “Needs Attention”.  When viewing the status screen for the host, the WinRM status was critical.  Pressing refresh in the host status screen resulted in the error message:

VMM does not have appropriate permissions to access the resource  on the %SCVMMSERVER% server.

Also, verify that CredSSP authentication is currently enabled on the service configuration of the target computer %HOSTSERVER%. To enable the CredSSP on the service configuration of the target computer, run the following command from an elevated command line: winrm set winrm/config/service/auth @{CredSSP=”true”}

The event log also contained the error:

The Virtual Machine Manager management server could not copy a required Hyper-V authorization file to %HOSTSERVER%.

After trying many things without success, I attempted a re-install of SCVMM.  This also failed with the message:

VMM does not have appropriate permissions to access the resource  on the %SCVMMSERVER% server.

The SetupWizard.log contained the message:

VMMPostinstallProcessor threw an exception: Threw Exception.Type: Microsoft.Carmine.WSManWrappers.WSManProviderException, Exception.Message: VMM does not have appropriate permissions to access the resource  on the %SCVMMSERVER%

The problem turned out to be caused by the proxy configuration on the SCVMM server.  In order to reset the proxy configuration I opened an elevated command prompt and ran “netsh winhttp reset proxy”. I was then able to re-install SCVMM successfully.

Microsoft System Center Virtual Machine Manager 2012 Cookbook

I was lucky enough to be asked to join the technical review panel for the Microsoft System Center Virtual Machine Manager 2012 Cookbook by Edvaldo Alessandro Cardoso and published by Packt.

This is a fantastic book if you’re already using SCVMM 2012, or thinking about doing so.  It covers aspects of SCVMM 2012 from installation through to creating Hyper-V clusters and managing fabric updates with VMM.  Be sure to give it a look http://link.packtpub.com/POCsIQ

6327EN