Hypervisor Hyper-V implies a remote control option as well as many other Windows components. In case when server (or Windows 8 client OS) are included in Windows domain it is quite easy to set Hyper-V remote control. The situation is a little bit more difficult if Hyper-V server (no matter whether it is major Windows 2012 server or Hyper-V 2012 or Windows 8) is a part of a standard Windows Workgroup.
Hyper-V control Manager connects to the Hyper-V server through WMI (Windows Management Interface). WMI is implemented as COM/DCOM service and is remotely available only for those users who have corresponding requirements DCOM remote launch together with WMI name space rights. On Hyper-V server these rights are given by default to the following groups: Administrators, Remote Management Users, Hyper-V Administrators и Remote COM Users.
There exists one more detail: during connection to the remote server Hyper-V console uses current user credentials. This means that during connection to the Hyper-V server manager will try to connect under current account.
In this article we will show how to set stand-alone server (with Hyper-V role) remote control from PC under Windows 8 management.
Permission of Hyper-V Remote Control on Windows Server 2012
- Go to the users management console (Control Panel\All Control Panel Items\Administrative Tools\Computer Management\Local Users and Groups\User) and create new user hypevuser, for example.
- Add hypervuser user to the local groups: Administrators, Hyper-V Administrators, Remote Management Users, WinRMRemoteWMIUsers.
- Open component control console ( through a: Control Panel\All Control Panel Items\Administrative Tools\Component Services or by running dcomcnfg.exe).
- Deploy Component services -> Computers branch. Click by right mouse button on My Computer-> Properties-> COM Security tab. Press Edit Limits button in Access Permissions section. Check if Remote Access is allowed for ANONYMOUS LOGON then add previously created user account and provide it with a Remote Access right (Remote Access option).
- Run command prompt with administrative privilege and allow remote control in Firewall rules:
netsh advfirewall set currentprofile settings remotemanagement enable netsh advfirewall firewall set rule group=”Windows Firewall Remote Management” new enable=yes
Widows 8 client setting for Hyper-V server Managment
- Install Hyper-V Management Tools in Programs and Features section of Control Panel
- Create new user account with Hyper-V (hypervuser) role using the same name and password as in Windows Server 2012. Add a user to the local administrators group.
- Open computer properties in Components Management console. Go to COM Security tab in Access Permissions section and press Edit Limits button. (Remote Access – Allow). Check if remote access is allowed for ANONYMOUS LOGON. Add a new user and provide him with Remote Access rights (Remote Access – Allow).
- Save credentials for server access by running the following command with administrative privilege:
cmdkey /add:hyper-v-server-name /user:hypervuser /pass:hypervuserpassword
- Now run Hyper-V Manager on Windows 8 operation station (virtmgmt.msc) on behalf of previously created user and try to connect to the remote server with Hype-V role.