Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

John Howard : Part 1 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ???COMPUTERNAME???

Sat, 29 Mar 2008 06:13:09 GMT

PingBack from http://blogs.technet.com/jhoward/archive/2008/03/28/part-1-hyper-v-remote-management-you-do-not-have-the-requested-permission-to-complete-this-task-contact-the-administrator-of-the-authorization-policy-for-the-computer-computername.aspx

Quick Linking

Virtual PC Guy's WebLog — Sat, 29 Mar 2008 10:01:58 GMT

I am feeling lazy today - but thankfully my colleagues have been working hard :-) Mike Kolitz has done

"Idiots guide to Server Core" (aka Server Core Installation Option of Windows Server 2008 Step-By-Step Guide)

John Howard — Sun, 30 Mar 2008 01:08:21 GMT

More for my own reference, as I keep having to search the Internet for this document and never bookmark

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Mike P — Sun, 30 Mar 2008 19:29:06 GMT

I use Windows One Care on my Vista PC. The settings above do not work as the Windows FW is turned off.

Can you post the specific programs, ports etc... to accomplish the same thing as listed above.

If I turn off the firewall on the Vista PC all works as advertised.

Thanks is advance

Part 3 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

John Howard — Mon, 31 Mar 2008 03:58:14 GMT

Although I thought I’d finished at part two, after even more emails and comments on part one and two

Part 5. Domain client to Workgroup Server: Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

John Howard — Sat, 05 Apr 2008 05:49:52 GMT

So far, I’ve covered the following Hyper-V Remote Management scenarios: Workgroup: Vista client to remote

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Ivan Versluis — Mon, 07 Apr 2008 14:08:19 GMT

Hi John, thank you. I took me around 15 minutes to configure this remote management Hyper-V MMC console in a workgroup scenario. It works fine for me, but I had couple of problems with copy and paste of the netsh scripts in your post and enabled the rules manually using control panel. Kind regards, Ivan Versluis

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Tore — Thu, 10 Apr 2008 21:41:41 GMT

I have a wierd problem.

I got 2 computers (main and laptop) both running vista ultimate in workgroup mode.

I have the same user\password on both but only the main one can access the hyper-v server.

The only difference i've found is that the main one uses x64 while the laptop uses Vista x86.

Any idea why one should fail when the other works perfectly?

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Fri, 11 Apr 2008 19:50:45 GMT

Tore - I got your email and have just replied.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Andrew Somervell — Thu, 17 Apr 2008 13:58:35 GMT

Brand new Vista x64 install, i'm getting a "Group cannot be specified along with other identification conditions" error when I enter the "netsh advfirewall firewall set rule group=”Windows Management Instrumentation (WMI)” new enable=yes" command. Any clues?

Regards,

andrew (at) somervell dot com

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Thu, 17 Apr 2008 22:47:38 GMT

Andrew - were you copying and pasting by any chance from above? I had exactly this error when copying and pasting when setting up another box. Have you tried typing it manually? (And no, I really can't explain why)!

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

robr — Thu, 17 Apr 2008 22:48:32 GMT

I was pointed here after trying to connect and getting the error "Cannot connect to the RPC service, make sure your RPC service is running".

I followed all the instructions, with the exception of the firewalls steps as Windows Firewall is disabled on both computers.

My client PC is here at the office behind a firewall. I log into a domain here at work from the PC, so it's not a workgroup config on the client side.

The server is located remotely at a data center, no firewall in front of it, windows firewall disabled, and is a standalone server. Because of this setup, I need to get this working so I can have mouse control of the remote VMs.

Could my error be a firewall issue here at work related to RPC? Thanks for all the work and well documented instructions.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Fri, 18 Apr 2008 03:11:11 GMT

Rob - there's a couple of things here. Make sure you cover the steps in part 5 which covers a domain joined client to a workgroup server. Similar to this, but a couple of nuances.

However, what's most likely blocking this working is the external firewall you are describing. WMI/DCOM are not particularly "external firewall friendly" due to the number of ports you need to open, so I would not recommend the scenario you are trying to achieve. I'm not sure the exact list of ports you need for this - haven't tried it myself, but as I understand it the default ports are

135

49152-65535

2179

There's a couple of articles about this you may want to read: http://msdn2.microsoft.com/en-us/library/ms809327.aspx

http://support.microsoft.com/kb/217351

If you're also behind a NAT router, I don't believe remote DCOM calls would work.

I'm not sure of your exact topology, but I would look towards a TSGateway which you can remote Hyper-V manager through and use mouse (once the integration services are installed - I have an entry a short while ago describing how to use the keyboard to drive the installation of that without mouse), or use TS directly to the server and run Hyper-V Mnaager on the server (unless it is Server Core).

Hope that helps.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

robr — Fri, 18 Apr 2008 15:24:41 GMT

Thanks very much John, I'll take a look at some of your other suggestions. I'm running some Linux VMs, so I'm not certain integration services (in the case of SLES 10 which does have integration services installed, but I also have a Fedora VM) will solve all my mouse related issues. I've installed them remotely without a mouse and just ssh in, but it would be nice to have access to the GNOME desktop.

So far, Hyper-V has been absolutely brilliant, but this ONE issue just makes everything they've done so right seem tarnished. I have to imagine a great majority of people will be running production Hyper-V servers remotely.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Fri, 18 Apr 2008 23:02:36 GMT

Robr - I was thinking about this some more. With the caveat that I have never tried this, it may be possible to tunnel DCOM over HTTP using the RPC over HTTP proxy mechanism. When I get a chance, I'll build up a lab environment to see whether it's possible. There's some interesting information here: http://msdn2.microsoft.com/en-us/library/ms809302.aspx

You will still need port 2179 for the VMConnect video RDP connection though.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

robr — Fri, 18 Apr 2008 23:18:22 GMT

I'd absolutely love to see if you can get this working in your copious free time :). I have previously played around with RPC over HTTP trying to get Outlook clients on the outside of our network to connect to the Exchange server behind our NATted firewall and failed miserably :).

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Michael Sainz — Sat, 19 Apr 2008 03:18:12 GMT

John- I'm experiencing the same problem as Robr, but my topology is different. Instead of going through firewalls, mine is being routed by firewalls. I use ISA 2004 at two points to create a site to site VPN tunnel. Other MMC consoles seem to work, but this Hyper-V one does not. Again, it's not going through NAT, but in a routed environment.

I would like to be kept up to date also if you could.

-Michael

michaelsainz@(takemeout)sunsetpres.org

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Andrew Somervell — Tue, 22 Apr 2008 11:10:14 GMT

Hahaha, you wouldnt believe how much I danced around when it worked John, you were right i had to type it in. Thank you.

So when's this all become less of a pain in the.... ? :P

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Rhynier — Fri, 25 Apr 2008 03:08:52 GMT

Thank you very much! I would never have thought it would be so difficult to get Hyper-V Manager running with a remote connection. Two comments below.

1) I installed the RC0 for Hyper-V and found both on the server and my Vista SP1 client that some new firewall rules had been added which looked very much like the WMI rules (same ports, etc.), but starting with "Hyper-V". I disabled the WMI firewall rules from your steps and everything still worked.

2) The reason you can't copy and paste the firewall rules from the blog post is that the open and closing quotes are not the same ASCII character as the one on the keyboard :). I've seen this many times using Word as it replaces the quote character with fancy open and close quotes that the command prompt does not recognize.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

mmcaulay — Sat, 26 Apr 2008 22:12:32 GMT

I couldn't get this to work until I explicitly added my user name to the appropriate steps in the server portion of this guide. Even though that user was a member of the Administrators group on the server. This was not enough to allow the connection. The user had to be added separately. At least on my setup. Running Server 2008 Full x64 with a client running Vista Business x86 SP1.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Greg — Sat, 03 May 2008 05:23:30 GMT

The reason the shell commands don't work if you cut and paste them is because the inverted commas - ie " " don't come across right - they must be some kind of unicode character I imagine - if you paste the command into a command prompt box, then just go back and re-type the " over the existing ones, they'll work.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Darin — Fri, 16 May 2008 11:51:21 GMT

What about if Hyper-V server and Client Vista are in different domains? Do I need to create the two indentical users in both domains?

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Fri, 16 May 2008 20:14:34 GMT

Darin - untrusted domains or part of the same forest? If the latter, then part 4 should work. Untrusted domains has seperate challenges which I'm still working through for a future part.

Cheers,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

evan — Wed, 28 May 2008 01:44:26 GMT

robr, I ran into this error message. Not sure if my issue is the same but it ended up being that the user account I was connecting with through Hyper-v remote management tools had an expired password. Odd error message but that is what it ended up being for me.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Tom Ace — Tue, 10 Jun 2008 11:59:30 GMT

I'm in! Thanks so much. There's no way I would've figured any of that out.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Thomas Goddard — Thu, 12 Jun 2008 01:05:24 GMT

Hey it works!!! I hope this issue is somehow resolved in the next release. Would be great if the setup did this for us!

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

iWalker — Sun, 15 Jun 2008 13:12:00 GMT

Jonh,

thanks a lot for this post, it is very useful.

But, in scenarios with Windows Live OneCare this solution doesn't work due to OneCare firewall restrictions :(

Only one solution turn off firewall at all... :(

10 commonly asked questions or issues seen during Hyper-V beta

Ask the Core Team — Wed, 25 Jun 2008 14:43:46 GMT

With the RTM release of Hyper-V just around the corner, I thought it would be a good idea to re-visit

Part 4. Domain joined environment: Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

John Howard — Thu, 26 Jun 2008 00:48:48 GMT

So after even more feedback and questions, part 4 of this series provides the walkthrough steps necessary

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Christian — Sat, 28 Jun 2008 03:39:03 GMT

YOU ROCK!!!

thanks john, great walkthrough!!!

/Chris

How to add the Hyper-V role to a Windows Server 2008 Server Core machine

John Howard - Hyper-V and virtualization blog — Mon, 30 Jun 2008 02:49:08 GMT

Soon, I promise, I will be publishing part 3 which is the workgroup server-core version of “ Hyper-V

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

uddhav regmi — Wed, 02 Jul 2008 23:19:11 GMT

I did all the way as mentioned in this article.

I have windows 2008 in vmware workstation installed as bare metal

Vista Ultimate is also in same box, as virtual.

I did all the way in vista as well as in 2008

Now, while loading Hyper V manager and connecting, I get this error exactly

Hyper-V Manager

An error occured while attempting to connect to server 10.10.10.100, check that the virtual machine management service is running and that you are authorized to connect to server

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Thu, 03 Jul 2008 20:13:13 GMT

I'm not sure I understand your configuration: Are you saying that Windows Server 2008 is in the virtual machine under VMWare workstation? Have you enabled the Hyper-V role (which I don't believe will succeed when the OS instance is running in a VM - never actually tried)?

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Oliver Schroeder — Mon, 07 Jul 2008 13:00:00 GMT

Thank you, thank you, thank you!

Regards from Germany.

Oliver

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Gottfried Auer — Tue, 22 Jul 2008 23:18:01 GMT

Thank you - from Austria

Gottfried

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Roshan — Thu, 24 Jul 2008 20:19:48 GMT

Thank you John for such a detailed post.

After connecting to the core server from my W2k8 full server i see the following message under Virtual Machines "You might not have permission to perform this task".

I have a windows 2008 full installation server and a core server. I did the following on the core server

assign Hostname, IP, DNS, WINS.

Enabled remote management and remote desktop

applied patched and enabled hyper-V role

Just to make things simpler I used the administrator username and gave the same password to both the machines.

Then on W2k8 full and core servers I

enabled firewall rules for WMI

since I used the administrator account i didnot have to do any changes for DCOM etc.

I rebooted the server and from the full installation server opened Hyper-V manager. I was able to connect to the core server and it displayed correctly under hyper-V manager.

But on the middle pane under Virtual Machines i got the following messages in this order

"Connecting to virtual machine management service" foilowed by

"You might not have permission to perform this task"

Please help

Thanks

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

NguyenIvan — Sun, 27 Jul 2008 18:44:02 GMT

I also get "Cannot connect to RPC service on 'servername' Make sure RPC Service is running" error when trying to bring up Hyper-V manager.

THe issue definitely has some thing to do with DNS server (If you point the client and Hyper-V server dns to dns server on active directory, the problem goes away). Will figure out a way to resolve NetBIOS and DNS right.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

ScottW — Tue, 29 Jul 2008 10:54:29 GMT

Brilliant walkthrough, and quite dissapaointing that it actually needs to be this complicated!

One observation and one question:

Observation: You don't need to restart the server after making the changes for it to work. Just restart the "Windows Management Instrumentation" service, which will in turn restart Hyper-V for you. Much easier than a whole reboot!

Question: What security issues are there now that you have enabled anonymous logon remote wmi to the admin workstations?

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Thu, 31 Jul 2008 00:04:07 GMT

Scott - correct. I was being over cautious in saying reboot. Restarting the Hyper-V services which are dependent on winmgmt is sufficient - it was just easier to say "reboot".

Obviously allowing anonymous callbacks has a security implication, but I don't know the specifics. The closest information I could find published was at http://technet2.microsoft.com/windowsserver/en/library/4c9a2873-2010-4dbb-b9dd-6a7d1e275f0f1033.mspx?mfr=true.

However, please note that you do not need to enable anonymous callbacks if both machines are in trusted domains. This is something I keep meaning to add to the walkthrough, but haven't got round to quite yet.....

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Thu, 07 Aug 2008 20:50:18 GMT

Roshan - if this is a workgroup environment, you still need to enable anonymous DCOM callbacks to the client machine (ie the Windows Server 2008 full machine in your configuration).

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Jonathan Gray — Wed, 13 Aug 2008 17:39:09 GMT

Great read and I can see this one is commented all over the web now..

But I followed it and it did progress me further but I now get

"Cannot connect to RPC service on 'servername'

I get this on my Vista SP1 Desktop and I have been through all stages. This is on domain (server/client).. I have all the firewall entries in but still if I disable firewall on the vista desktop it works first time.. as soon as I enable firewall it kills it off with that message.

I am using Onecare on Vista which is the only difference I can see.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Sat, 16 Aug 2008 05:30:41 GMT

Hi Jonathan - Yes, I've seen reports of OneCare which (as I understand it - never have used it) has it's own firewall which blocks part of remote management. Let me see if I can get hold of a copy to install and see what the problem is to find the solution. Stay tuned...

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Jonathan Gray — Sat, 16 Aug 2008 10:33:25 GMT

Hi John, For those with Onecare I cracked it for me, rather than cover it here I covered it with screenshots below

http://itreallyisfun.spaces.live.com/

This is NOT replacing Johns info but dealing specifically with Onecare..

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Jonathan Gray — Sat, 16 Aug 2008 10:44:25 GMT

Hi again John,

To update the previous blog link I sent which goes direct

http://itreallyisfun.spaces.live.com/blog/cns!34EB0BCD9D9A2686!1355.entry

That was they just get the article and not the blog entries totally unrelated.

【仮想化】ワークグループ環境の Hyper-V 環境をリモートから管理

Hiroshi Okunushi's Blog ☆ミ — Wed, 20 Aug 2008 21:42:21 GMT

日本語だと↓なエラーが出る件です。「このタスクを完了するために必要なアクセス許可がありません。このコンピュータ ‘xxxxxxx’ の承認ポリシーの管理者に問い合わせてください。」

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Kim — Wed, 27 Aug 2008 15:18:14 GMT

Brilliant! Thanks a lot! You saved my day!!!!!!!!!!! You're the hero of the month!!

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

JohnFF — Fri, 03 Oct 2008 00:25:24 GMT

With ESXi, you just download and install the VI Client and it works. Why is this so HARD???

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Paul — Sun, 12 Oct 2008 03:30:43 GMT

JohnFF, you are so correct. The problem is that ESXi crashes when I try to install Windows Server 2008 and it's doesn't read my SATA card on my other computer.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Robin — Tue, 04 Nov 2008 19:22:47 GMT

Thanks great walk through worked perfectly.

Hyper-V Management Console on Vista x64

Geek Noise — Wed, 05 Nov 2008 02:34:06 GMT

Hyper-V Management Console on Vista x64

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Tomohawk — Fri, 07 Nov 2008 05:51:18 GMT

John, thank you very much, the steps are crystal and worked like a charm

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

joel — Mon, 10 Nov 2008 07:59:49 GMT

Hello John:

I'm on my 2nd try with your directions, no joy. Workgroup setting, Hyper-V standalone (downloaded fresh today!) with a Vista client.

All goes well until I go to use Hyper-V manager to connect. I get this error:

>>>

[Window Title]

Hyper-V Manager

[Main Instruction]

An error occurred while attempting to connect to server "VIRTUALSERVER". Check that the Virtual Machine Management service is running and that you are authorized to connect to the server.

[Content]

The computer 'VIRTUALSERVER' could not be resolved. Make sure you typed the machine name correctly and that you have network access.

[Close]

>>>>

I can RDP into the server fine.

I can ping from the SERVER to the CLIENT

I can NOT ping from the CLIENT to the SERVER (via name or IP).

Any suggestions?

Thanks in advance.

joel*

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Tue, 11 Nov 2008 06:48:08 GMT

Joel - first off, try and resolve the ping issue. Pings by default are disabled on Server, so try temporarily disabling the firewall and trying again. That should work by IP address at least. If name does not work, then it's a DNS issue. You can verify that by temporarily putting an entry in \windows\system32\drivers\etc on the client machine for the name and IP address of the server.

I have a stack of subsequent troubleshooting steps, but let's get the ping and DNS issue sorted out first - it's often a common cause.

Thanks,

John.

Configure Hyper-V Remote Management in seconds

John Howard - Hyper-V and virtualization blog — Sat, 15 Nov 2008 04:44:04 GMT

It has been a little quiet on the blog front, but sometimes, at least in this case, I hope I've come

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Dave — Sun, 16 Nov 2008 05:41:14 GMT

John,

I am receiving the same "exact" error as what "Joel" has stated (above).

Error:

"An error occurred while attempting to connect to server "VIRTUALSERVER". Check that the Virtual Machine Management service is running and that you are authorized to connect to the server"

If I disable the firewall on the Hyper-V server, then my Vista client connects remotely just fine (via Hyper-V Manager).

BTW: The new "HVRemote" you uploaded last night is pretty slick!

Here is a piped text file from HVRemote of my configuration on my Hyper-V server:

Microsoft (R) Windows Script Host Version 5.7

Hyper-V Remote Management Configuration & Checkup Utility

John Howard, Microsoft Corporation. http://blogs.technet.com/jhoward

Version 0.2 14th Nov 2008

INFO: Computername is SVSS2K8PM1

INFO: Computer is in workgroup WORKGROUP

INFO: Assuming /mode:server as the role is installed

INFO: This machine has the Hyper-V (v1) QFE installed (KB950050)

-------------------------------------------------------------------------------

Discretionary Access for WMI Namespace root\cimv2

-------------------------------------------------------------------------------

Required for Hyper-V remote mangement: Allow, EnabAct, RemEnab, InheritAce

HVRemote also sets NoPropInheritAce and ValidInheritFlags

BUILTIN\Administrators (S-1-5-32-544)

Allow: Exec FullWrt PartWrt ProvWrt EnabAct RemEnab RdSec EdSec (393279)

Flags: InheritAce InheritedAce ValidInheritFlags (18)

NT AUTHORITY\NETWORK SERVICE (S-1-5-20)

Allow: Exec ProvWrt EnabAct (19)

Flags: InheritAce InheritedAce ValidInheritFlags (18)

NT AUTHORITY\LOCAL SERVICE (S-1-5-19)

Allow: Exec ProvWrt EnabAct (19)

Flags: InheritAce InheritedAce ValidInheritFlags (18)

NT AUTHORITY\Authenticated Users (S-1-5-11)

Allow: Exec ProvWrt EnabAct (19)

Flags: InheritAce InheritedAce ValidInheritFlags (18)

-------------------------------------------------------------------------------

Discretionary Access for WMI Namespace root\virtualization

-------------------------------------------------------------------------------

Required for Hyper-V remote mangement: Allow, EnabAct, RemEnab, InheritAce

HVRemote also sets NoPropInheritAce and ValidInheritFlags

BUILTIN\Administrators (S-1-5-32-544)

Allow: Exec FullWrt PartWrt ProvWrt EnabAct RemEnab RdSec EdSec (393279)

Flags: InheritAce InheritedAce ValidInheritFlags (18)

NT AUTHORITY\NETWORK SERVICE (S-1-5-20)

Allow: Exec ProvWrt EnabAct (19)

Flags: InheritAce InheritedAce ValidInheritFlags (18)

NT AUTHORITY\LOCAL SERVICE (S-1-5-19)

Allow: Exec ProvWrt EnabAct (19)

Flags: InheritAce InheritedAce ValidInheritFlags (18)

NT AUTHORITY\Authenticated Users (S-1-5-11)

Allow: Exec ProvWrt EnabAct (19)

Flags: InheritAce InheritedAce ValidInheritFlags (18)

-------------------------------------------------------------------------------

Contents of Authorization Store Policy

-------------------------------------------------------------------------------

Hyper-V Registry configuration:

- Store: msxml://C:\ProgramData\Microsoft\Windows\Hyper-V\InitialStore.xml

- Service Application: Hyper-V services

Application Name: Hyper-V services

Operation Count: 33

100 - Read Service Configuration

105 - Reconfigure Service

200 - Create Virtual Switch

205 - Delete Virtual Switch

210 - Create Virtual Switch Port

215 - Delete Virtual Switch Port

220 - Connect Virtual Switch Port

225 - Disconnect Virtual Switch Port

230 - Create Internal Ethernet Port

235 - Delete Internal Ethernet Port

240 - Bind External Ethernet Port

245 - Unbind External Ethernet Port

250 - Change VLAN Configuration on Port

255 - Modify Switch Settings

260 - Modify Switch Port Settings

265 - View Switches

270 - View Switch Ports

275 - View External Ethernet Ports

280 - View Internal Ethernet Ports

285 - View VLAN Settings

290 - View LAN Endpoints

295 - View Virtual Switch Management Service

300 - Create Virtual Machine

305 - Delete Virtual Machine

310 - Change Virtual Machine Authorization Scope

315 - Start Virtual Machine

320 - Stop Virtual Machine

325 - Pause and Restart Virtual Machine

330 - Reconfigure Virtual Machine

335 - View Virtual Machine Configuration

340 - Allow Input to Virtual Machine

345 - Allow Output from Virtual Machine

350 - Modify Internal Ethernet Port

1 role assignment(s) were located

Role Assignment 'Administrator' (Targetted Role Assignment)

- All Hyper-V operations are selected

- There are 1 member(s) for this role assignment

- BUILTIN\Administrators (S-1-5-32-544)

-------------------------------------------------------------------------------

Contents of Group Distributed COM Users

-------------------------------------------------------------------------------

There are no members in Distributed COM Users

-------------------------------------------------------------------------------

Firewall Settings for Hyper-V

-------------------------------------------------------------------------------

Public Firewall Profile is active

Enabled: Hyper-V (SPL-TCP-In)

Enabled: Hyper-V (RPC)

Enabled: Hyper-V (RPC-EPMAP)

Enabled: Hyper-V - WMI (Async-In)

Enabled: Hyper-V - WMI (TCP-Out)

Enabled: Hyper-V - WMI (TCP-In)

Enabled: Hyper-V - WMI (DCOM-In)

-------------------------------------------------------------------------------

Firewall Settings for Windows Management Instrumentation (WMI)

-------------------------------------------------------------------------------

Public Firewall Profile is active

Enabled: Windows Management Instrumentation (ASync-In)

Enabled: Windows Management Instrumentation (WMI-Out)

Enabled: Windows Management Instrumentation (WMI-In)

Enabled: Windows Management Instrumentation (DCOM-In)

Note: Above firewall settings are not required for Hyper-V Remote Management

Thanks, Dave

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Sun, 16 Nov 2008 06:05:11 GMT

Dave - That's really odd if disabling the firewall on the *SERVER* makes connections start working. Can you try turning it back on again and creating a seperate user account - I'm assuming you're using "Administrator" here: On server net user <username> /add *, type the password. Do same on client and make sure the passwords are the same. Then run hvremote /add:username on server. If the client is workgroup, please also run hvremote /anondcom:grant. Also remember to run hvremote /mmc:enable on the client. Try that, when logged on as the new user. If that still fails, and also fails after a reboot, please can you re-post the hvremote /show on both the client AND the server.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Dave — Sun, 16 Nov 2008 06:37:45 GMT

John,

Before I setup a new user and try it, I wanted to confirm that 'yes" I am using the Administreator account on both the client and server and am using the same password on both platforms.

Also, (to be more accurate in my setup), I'm actually using the Administrator group, instead of the built-in Administrator account.

Also, both platforms are in a workgroup called "WORKGROUP".

Thanks, Dave

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Sun, 16 Nov 2008 06:55:28 GMT

Dave - in which case, you should get the same result as creating a new user by simply runing "hvremote /add:yourusername" on the server. You still need to verify the client settings though (mmc and anondcom) as this is a workgroup. It *should* work then :) I hope, anyway!

Cheers,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Dave — Sun, 16 Nov 2008 22:42:43 GMT

John,

Disable "File and Printer Sharing" on your Hyper-V server (via Windows Firewall - Exceptions) and then try using your Vista client to connect to your Hyper-V server.

Do you get the following error after doing this?

Error:

"An error occurred while attempting to connect to server "VIRTUALSERVER". Check that the Virtual Machine Management service is running and that you are authorized to connect to the server"

If you do receive this error, then I have a question that you may be able to answer:

Why does Hyper-V Manager (on the Vista client) require the enabling of "File and Printer Sharing" on the Hyper-V server?

Thanks, Dave

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Sun, 16 Nov 2008 23:13:17 GMT

Dave - I'm not sure is the simple answer - I'll need to verify in my "test lab" which is all setup in my office at work (quicker than trying to set it up on my home servers) and run some network traces to work that out. Let me check tomorrow. If that is the case, as you seem to be saying, then I'll add that to HVRemote to report on in the /show and to have the ability to change in the next version....

That having been said, now you mention it, this does ring some distant bells. I'll have to have a dig through my archives in the office. Out of interest, did you deliberately change any of the firewall rules on the server before running the tool. When I was doing my testing, I used a vanilla install and only ran the tool for the configuration, so I never tried it with other combinations.

Thanks,

John.

Configure Hyper-V Remote Management in seconds

HyperVoria — Tue, 18 Nov 2008 00:34:26 GMT

Announcing "HVRemote"...., a tool to "automagically" configure Hyper-V Remote Management

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Dave — Tue, 18 Nov 2008 01:14:37 GMT

John,

I also noticed the folowing:

HVRemote commands do not work on the Hyper-V server unless you are the "Built-in" Administrator. If you use another "Administrator" account or "User" account, you will receive a "Failed to call GetSecurity Descriptor" and will stop at the "Cimv2 Namespace".

All HVRemote commands work fine on the Vista client.

Thanks, Dave

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Tue, 18 Nov 2008 01:23:19 GMT

Dave - I should have made it a bit clearer in the post (and I can make a check in the code if I can work out how). You must run the script as an administrator from an elevated command prompt. Without elevation, or running it as a standard user will give exactly that error. It should work when elevated by any account that is a local administrator.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Tue, 18 Nov 2008 01:44:34 GMT

Dave - regardling your ealier question about file and printer sharing, I can't repro this. I have a Hyper-V Server (rather than 2008) and ran "netsh advfirewall firewall set rule group="File and Printer Sharing" new enable=no", even restarted the server and connected from a vista box successfully. Is it possible you have other firewall software running on the server?

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Dave — Tue, 18 Nov 2008 04:16:38 GMT

Hi John,

I have Windows 2008 DataCenter Edition with the Hyper-V role installed. Do you have the standalone Hyper-V Server version that does not include additional roles (other than the Hyper-V role)? Does it boot up to a blue configuration box? on top of a WinPE (green background)?

BTW: I haven't changed any of the Windows Firewall settings.

Thanks, Dave

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Dave — Tue, 18 Nov 2008 04:25:21 GMT

How come HVRemote operates in Windows Vista without having to elevate the command prompt? HVRemote runs as a standard "User" or "Administrator" without have to run in an elevated command prompt.

Does the settings (ex: "Cimv2 Namespace, etc") that HVRemote needs to configure require elevated privileges to set them up properly?

Thanks, Dave

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Tue, 18 Nov 2008 04:57:15 GMT

Dave - actually not quite true. You can /show the settings as an administrator from an unelevated command prompt on a Vista client, but not change the /mmc or /anondcom settings - you will hit permission denied.

Similarly on the server, you cannot read the security permission for a WMI namespace unless you are elevated. I'm pretty sure this is related (for WMI) to UAC token filtering as described http://msdn.microsoft.com/en-us/library/aa826699(VS.85).aspx. However, in both client and server cases, this is really a question for those who developed the security model rather than for myself who's trying to manipulate it :)

So nutshell.... you still need to be elevated on both client and server to do anything useful.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Tue, 18 Nov 2008 05:02:55 GMT

re "I have Windows 2008 DataCenter Edition with the Hyper-V role installed. Do you have the standalone Hyper-V Server version that does not include additional roles (other than the Hyper..." question. Not sure I understand the question, but I've tried this on full and Hyper-V Server with no repro.

Microsoft Hyper-V Server is not based on WinPE - it should have a black background with a default install, so not sure where green comes into this.

Realistically, if you're still having problems here, please run hvremote /show /debug:verbose on the server and the client and let's see if there some other clue in there. Email link is at the top.

Thanks,

John.

Hyper-V Remote Management Configuration Utility

Microsoft, su tecnología y yo — Tue, 18 Nov 2008 23:49:29 GMT

Hola Una herramienta imprescindible para configurar los servidores con Hyper-V para que se puedan administra

How to resolve errors like "Cannot connect to the RPC service, make sure your RPC service is running" with Hyper-V Server and Hyper-V Manager

David Overton's Blog — Sun, 23 Nov 2008 04:45:18 GMT

In my last post on installing Hyper-V for my home setup I said I had a number of issues.  One was

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Zoltan — Mon, 24 Nov 2008 18:48:46 GMT

Hello

we tested it brutally.)Turned off the fireall also on the vista and also on the server.Nothing, the same rpc error.As I plug back the vista to the locla network, everything works fine.So?Any idea?

I can ping the server by name from client and back.

But I can not nslookup it, but I really dont understand, whí does it needed?

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Mon, 24 Nov 2008 19:14:39 GMT

Zoltan - I answered your other comment on the HVRemote article. Please follow up on that one.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Kyle — Tue, 02 Dec 2008 21:39:55 GMT

I'm completely stumped... I have three systems, one Hyper-V server 2k8 (server core install w/ hyper-v role), a windows server 2008 standard edition install and the last being my Vista SP1 workstation.

I am trying to connect to the Hyper-V role on the server-core install via remote management on my Vista box and I am getting the authorization policy error that has been posted a million times. I have ran hvremote on both my client machine and the remote server-core instance.

It is important to note that I can connect to the hyper-v role on the server-core instance from my win2k8 standard edition box that also has the hyper-v role installed and configured. So I can remotely manage the hyper-v role on the server-core system from the 2k8 server but not my vista box.

I do not have the firewall enabled on the server-core or my vista box. All systems are in the same domain and are in the same subnet with no ACL's between them. The fact that I can remotely manage it from another server instance but I can't from my vista box tells me that it is a problem with my workstation's security. Also important to note that I cannot remotely connect to the hyper-v role on the windows server 2008 standard box either.

I have done everything multiple times and followed instructions to the letter. I have also gone out and turned off UAC on my vista box. Still nothing works...

Any ideas?

How to resolve errors like "Cannot connect to the RPC service, make sure your RPC service is running" with Hyper-V Server and Hyper-V Manager

David Overton's Blog — Wed, 03 Dec 2008 04:04:36 GMT

In my last post on installing Hyper-V for my home setup I said I had a number of issues.  One was

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Tue, 09 Dec 2008 04:38:14 GMT

Kyle - there really shouldn't be any need to turn off the firewall or UAC, so there's probably something really simple making this not work in your case.

Can you run hvremote /show on both the server and the vista box and send it to me using the email option at the top of my blog, or post it back as another comment.

It would be helpful also if you can verify you have the RTM management tools installed on the Vista box, rather than pre-release. RTM is KB952627.

If you can also include the output of ipconfig on both machines, and an attempt to ping by name the server from the client and the client from the server (just to verify there isn't a DNS issue as well).

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Clive — Thu, 11 Dec 2008 01:50:32 GMT

When copying and pasting

netsh advfirewall firewall set rule group="Windows Management Instrumentation (WMI)" new enable=yes

from the web page it uses the "wrong sort" of double-quotes. If you copy into Notepad, change the quotes and then copy/paste from Notepad it will work.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Dave — Thu, 18 Dec 2008 08:58:44 GMT

Hi John,

I run the following command on my Hyper-V server:

cscript hvremote.wsf /mode:server /show

...and receive the following error:

***** Failed to call GetSecurityDescriptor

***** Giving up as not able to get the security descriptor for the cimv2 namespace

This error is happening because I am not running the hvremote.wsf script in elevated mode.

Could you put some error checking in the code when a user is not running a elevated command prompt (like you did with the client side).

The client-side message that you created in v0.3 was something like this:

“All client operations which change the configuration must be run from an elevated command prompt.”

Thanks, Dave

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Thu, 18 Dec 2008 09:02:16 GMT

Dave - I thought I *HAD* put this check into v0.3 for both client *AND* server. Are you sure you are running 0.3 on the server as well? If you are, please can you drop me an email using the option at the top of the blog.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Dave — Thu, 18 Dec 2008 09:14:58 GMT

Hi John,

I'm tired tonight.

I had v0.2 on this server. I thought I had copied v0.3 on each of my Hyper-V hosts. Forgot one...I guess :+)

Thanks, Dave

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Dave — Thu, 18 Dec 2008 09:20:55 GMT

What's this message at the bottom of the /show results:

INFO: Are running the latest version

Is the script checking it's version?

Thanks, Dave

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Thu, 18 Dec 2008 09:46:31 GMT

Dave. Yes. See the documentation for more info.

Thanks,

John.

Outils pour Hyper-V

pascals.blog — Mon, 29 Dec 2008 12:50:44 GMT

Aujourd'hui deux outils pour Hyper-V. Pas tout neufs, mais extrêmement utiles. Le premier vous servira

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Brett — Wed, 31 Dec 2008 05:10:51 GMT

I think it's pathetic it's this difficult to admin a Hyperv box. Wasn't there ever a "Man, we can't release this to the public" statement made at MS head quarters? I kicking myself for deciding to go this route--should have went with VMWare.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Jacques — Mon, 26 Jan 2009 16:37:54 GMT

hi wonder if everyone can help me, i have this same error message but only it is on Server 2008 standard edition with the hyper-v role installed, but we use terminal sessions to connect to this server! please if anyone can help me!!

thank you very much!

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Tue, 27 Jan 2009 06:00:44 GMT

Jacques - what do you mean by terminal sessions. Do you mean you are using mstsc to logon to the hyper-v server and then running the Hyper-V management client locally on the server that is being targetted?

Who is connecting? Standard users, administrators, both?

What happens if you log on to the console of the Hyper-V machine and start Hyper-V Manager. Does it connect and work correctly? In the out of box configuration, as a local administrator, this should work with no configuration needed. For users to access, you need to update authorization manager as the access denied is an expected valid denial - you haven't granted them access.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

rloureiro — Thu, 05 Feb 2009 21:36:19 GMT

John,

Excellent guide, it worked perfectly for me.

Thanks!

Rafael

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Fabrice — Thu, 19 Feb 2009 11:25:09 GMT

Maybe one step is missing in the post (which is handled by the script), at least for Microsoft Hyper-V Server 2008.

For this release, no configuration seems needed on server side, all setup has to be done on Vista.

The missing step could be the cmdkey command is case of a workgroup scenario. On Vista : cmdkey /add:<server-name> /user:<admin-user-on-server> /pass:<admin-user-password>

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Thu, 19 Feb 2009 16:50:42 GMT

Fabrice - it depends entirely on whether you are using "The Administrator" account, and whether you are are in a workgroup or domain. Generally, as "The administrator", you don't need any configuration on the server. See part 5 of the series for a scenario where you do need to use cmdkey for Hyper-V remote management.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Evandro Reis — Thu, 23 Apr 2009 04:41:58 GMT

John, first of all congratulations for the great HVRemote tool. It rocks. Also, your articles are of great value. Thank your for putting them together. I have a weird situation here. I have two machines running on the same WORKGROUP and inside the same network segment (same IP class/net mask for both - 192.168.1.25 server e 192.168.1.7 client). I am able to connect to the server and change its configurations via Remote Management running on Vista SP1. But in the Virtual Machines group I get the message "RPC Server unavailable". And when I try to create new vms, HVRM creates de VHD file but crashes in the middle with the error above. In summary, I can change Hyper-V Server configuration (like default folders and virtual networks), but when I try to manage VMs (create, for instance) I get the RPC error.

Any thoughts?

Thanks again.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Evandro Reis — Thu, 23 Apr 2009 04:49:10 GMT

One additional comment: after getting the "RPC unavailable" error and clicking on "Refresh" Hyper-V Manager sits idle with the message: "Loading virtual machines..." and nothing happens. I am running Hyper-V as a role of a Windows 2008 Server Core.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Fri, 24 Apr 2009 03:55:14 GMT

Evandros - can you post up the output of hvremote /show, plus a ping by name in each direction.

Thanks,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Eric — Tue, 12 May 2009 06:27:32 GMT

Thanks John for taking the time to put this together! I didn't use your HVRemote because I wanted to see what was involved to configure Hyper-V Manager.

You did an excellent job! Thanks Again!

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

dbinfl — Sat, 23 May 2009 06:12:46 GMT

Wow! I just followed these instructions, and indeed got this working. So, hats off to you for taking the time to document and post this; I sure appreciate it.

Now, as to MS, maybe they could make this a little harder, but why bother since they've pretty much aced this in the PITA department (including a reboot -- wouldn't be complete without a reboot).

Thanks for this and all the other helpful posts I've found here.

cheers

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Larry — Tue, 30 Jun 2009 19:01:51 GMT

John, you are definately a legend!! We need guys like you around. :)

Cheers

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Greg L — Thu, 09 Jul 2009 19:17:50 GMT

Thanks for such detailed work. I've followed the examples to a "T" but this problem persists for me: Once I've connected to the Hyper-V server from the client (Vista Ent 64, SP2), I get an RPC error. After refreshing the detail pane simply says "loading virtual machines" but nothing ever comes up. I can manage the server settings, and have even created a VM, but I cannot see them. I disabled the firewall on both server and client and the same thing happens. Any ideas? Thanks!

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Greg L — Thu, 09 Jul 2009 19:25:19 GMT

Ok, at the last moment, I found the source of my problem. My the network adapter in my Vista client, running as a VM in Sun VirtualBox, was configured with NAT. Once I switched it to bridged, all worked fine. Thanks, sorry for the false alarm.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jhoward — Thu, 09 Jul 2009 19:28:22 GMT

Greg - glad you resolved it :)

Cheers,

John.

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

jpavly — Fri, 25 Sep 2009 12:24:45 GMT

Thanks a lot, that totally worked!

Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

John Howard : Part 1 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ???COMPUTERNAME???

Quick Linking

"Idiots guide to Server Core" (aka Server Core Installation Option of Windows Server 2008 Step-By-Step Guide)

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Part 3 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Part 5. Domain client to Workgroup Server: Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

10 commonly asked questions or issues seen during Hyper-V beta

Part 4. Domain joined environment: Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

How to add the Hyper-V role to a Windows Server 2008 Server Core machine

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

【仮想化】 ワークグループ環境の Hyper-V 環境をリモートから管理

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the requested permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Hyper-V Management Console on Vista x64

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Configure Hyper-V Remote Management in seconds

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Configure Hyper-V Remote Management in seconds

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

Hyper-V Remote Management Configuration Utility

How to resolve errors like "Cannot connect to the RPC service, make sure your RPC service is running" with Hyper-V Server and Hyper-V Manager

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

How to resolve errors like "Cannot connect to the RPC service, make sure your RPC service is running" with Hyper-V Server and Hyper-V Manager

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

re: Part 2 - Hyper-V Remote Management: You do not have the required permission to complete this task. Contact the administrator of the authorization policy for the computer ‘COMPUTERNAME’

【仮想化】ワークグループ環境の Hyper-V 環境をリモートから管理