2

I have a Hyper-V 2016 core server installed. We can authenticate using the Hyper-V Manager with the network domain account. We want to use the 'BUILTIN\Hyper-V Administrator' group to delegate access.
Currently, using GPO we have a test user assigned via Restricted Groups to 'BUILTIN\Hyper-V Administrator' and 'BUILTIN\Remote Desktop Users' The test account can access local Hyper-V instances but cannot access the remote hyper-v server through Hyper-V Manager on a local client. The account is able to RDP to it and obtain the CMD/Powershell terminals. We also confirmed that the account shows up in 'net localgroup Hyper-V Administrators'
What other settings need to be configured to assign this role?

Update1-2018-08-17
Here is the current localgroup and domain group settings from the Hyper-V Administrators groups Group settings
I am able to remotely login with the Hyper-V Manager using the Domain Administrator successfully, but when using the 'stefan' domain account it fails with the following
Error message
The powershell cmd 'Enable-PSRemoting -Force' was run and the server was rebooted already.
The users in the 'Hyper-V Administrators' account are able to run Hyper-V Manager on their local machines without an issue.

Improve this question
3
  • What error message do you get? Have you checked the points in <this article>, e.g., checked that Powershell Remoting is enabled and that the Hyper-V Manager version is compatible? There's also a <comment here> from someone saying they had to reboot the host after adding the user to Hyper-V Administrators. – Harry Johnston Aug 16 '18 at 18:19
  • @HarryJohnston I've followed the microsoft document and already had PSRemoting enabled. See my Update1 for screenshots/details – StefB Aug 17 '18 at 19:14
  • Bit of a long shot, but you might try making stefan administrative on the client machine and see if that makes any difference. You'll need to reboot the client. – Harry Johnston Aug 17 '18 at 20:08
1

I was able to get this to work.
The Domain User needs to be added to the following local groups.

Which can be done via GPO 'Restricted Groups'

BUILTIN\Hyper-V Administrators
BUILTIN\Remote Management Users
BUILTIN\Remote Desktop Users

Do a gpupdate /force on the Hyper-V server afterwards

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.