Cannot remove Virtual Machine additions from DC,

Migrating our VM's from Virtual Server to Hyper-V.

On the Domain Controllers the Integration components cannot be installed because the Virtual Machine additions cannot be removed.

I get the following message when I remove the Virtual Machine additions via add/remove programs:

Due to Group Policy, you do not have sufficient permissions to install Virtual Machine Additions. for more information, contact your system administrator

Windows Server 2003

Solution:

835350            Virtual Machine Additions do not work after you install them in a virtual machine in Virtual PC 2004

http://support.microsoft.com/default.aspx?scid=kb;EN-US;835350

This article also applies to Virtual Server 2005.

This issue may occur if the user account that you use to install Virtual Machine Additions does not have the "Impersonate a client after authentication" local security policy assigned.
By default, the local Administrator account has this right assigned. However, if you remove this assignment, you cannot use the Administrator account to assign Virtual Machine Additions. You must use an account that has administrator credentials to install Virtual Machine Additions.

To resolve this issue, assign the "Impersonate a client after authentication" local security policy to the Administrator account, and then reinstall Virtual Machine Additions. To do so, follow these steps:

1. Log on to the virtual machine with an account that has administrator credentials.

2. Click Start, point to All Programs, point to Administrative Tools, and then click Local Security Policy.

3. Expand Local Policies, and then click User Rights Assignment.

4. In the right pane, double-click Impersonate a client after authentication.

5. Click Add User or Group, type administrator, click Check Names, click OK, and then click OK.

6. Quit the Local Security Settings tool, and then restart the virtual machine.

7. Log on to the virtual machine with an account that has administrator credentials.

8. On the Action menu, click Install or Update Virtual Machine Additions.

9. Follow the instructions that appear on the screen to remove Virtual Machine Additions.

10. Restart the virtual machine when you are prompted, and then reinstall Virtual Machine Additions

If you don’t have Service Pack 2 installed:

· Add W2K3 SP2, and then remove VS Additions under VS2005.

· Then mount under HyperV and add the all the integration services to the image.

· Reboot twice and it should work.

2:

It's a standalone server, so we need to get the error message and check some local policy settings.
1. Please send the error message to me. (Better to have screenshot).
2. Please open "Gpedit.msc", check "Computer Settings" >> "Administrative
Templates" >> "Windows Components" >> "Windows Installer".

Make a screenshot for all the settings.

1. Make sure the VM is now running under "Virtual Server".

If it's in "Hyper-V" now, it's not a supported scenario and need move back to "Virtual Server" first.
2. Please check this KB http://support.microsoft.com/kb/835350/en-us, make sure
your account have the previlege for "Impersonate a client after authentication.".

4. Check this key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Msiserver
There should be a value "RequiredPrivileges",