MS01 -> Win8 Management Station with RSAT installed
HV01 -> Win2012 Hyper-V 3
HV02 -> Win2012 Hyper-V 3
FS01 – Win2012 File Server
All 4 Machines are member of the same Domain with a single DC.
FS01 has share VMs with Full Controll for the HV01,HV02 Computer accounts and the Domain admin groups which contains the User I use to login to whatever machine.
All 4 computers are configured for “Trust this computer for delegation to any service (Kerberos only)”. I will configure constrained delegation as soon as it works.
I start Hyper-V Manager at the MS01 and create a new VM “Test1” with “Store the virtual machine in a different location” and enter the UNC path of the share (\\FS01\VMs). VHD path is\\lg2-w2012-fs01\vms\Test1\Virtual Hard Disks\
I get the error message: User ‘xxxx\Admin1’ failed to create external configuration store at ‘\\fs01\vms\Test1’: General access denied error. (ox80070005)
I rechecked share permissions multiple times and everything looks good. But when I try to check the “Effective Access” in “Advanced security settings” it shows it for the “Domain Admins” but if I choose Device: HV01 it doesn’t offer the “View effective access” button.
I opened Powershell on the MS01 and run a "New-VHD -ComputerName HV01 -Path "\\fs01\VMs" ..." to create a new VHDX file on the share with the same error message as before.
Then I did a remote Powershell session on the HV01 and run the same command there with success. It seems to be that there is a rights or delegation problem when doing it from the Win8 Management station.
Any help is highly appriciated
Paul