Răspuns Permission issue on VHD....

  • Friday, May 04, 2012 5:11 AM
     
     

    Hi,

    Yesterday i replaced windows 2008 os vhd file with new sysprep image for one of my virtual machines. Now when i tried to start the machine i get access denied error. I tried to figure out the permissions on previous VHD file but not able to find the same accounts using active directory. Our setup is like this -->

    All the Hyper-V servers are in cluster and they are storing vhd files on CSV. We have installed the clustered using another AD user account rather than using domain administrator.

    Please let me know how can i find the account that needs to be set on this vhd in order to get the virtual machine started.

    Thanks.

All Replies

  • Friday, May 04, 2012 6:11 AM
     
     

    Hello,

    Did you check for event viewer?

    Are you getting error like ;

    ‘VMName’ failed to start. (Virtual machine ID
    5FC5C385-BD98-451F-B3F3-1E50E06EE663)

    ‘VMName’ Microsoft Emulated IDE Controller (Instance ID
    {83F8638B-8DCA-4152-9EDA-2CA8B33039B4}): Failed to Power on with Error ‘General
    access denied error’ (0x80070005). (Virtual machine ID
    5FC5C385-BD98-451F-B3F3-1E50E06EE663)

    ‘VMName’: IDE/ATAPI Account does not have sufficient privilege to open attachment
    ‘E:\VMs\VMName\Disk0.vhd. Error: ‘General access denied error’ (0x80070005). (Virtual
    Machine ID 5FC5C385-BD98-451F-B3F3-1E50E06EE663)

    ‘VMName’: Account does not have sufficient privilege to open attachment
    ‘E:\VMs\VMName\Disk0.vhd. Error: ‘General access denied error’ (0x80070005). (Virtual
    Machine ID 5FC5C385-BD98-451F-B3F3-1E50E06EE663)

    If then please follow the steps in the link.

    http://support.microsoft.com/kb/2249906

    Sincerely,

    Murat Demirkiran


    If the post helps you and remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. www.scvmm2012.com (TR Language) Please note that I'm not a Microsoft Representative or SpokesPerson.

  • Friday, May 04, 2012 6:29 AM
     
     

    Hi,

    Thanks Murat. I already followed the article, but when i try to give the permissions using icacls tool I get an error somewhat like not able to match sid.

    Thanks.

  • Friday, May 04, 2012 6:36 AM
     
     

    Hi,

    Thanks. I got the reply. Actually the owner of the machine is different and I am trying to run the command on different hyper-v machine in the same cluster. I think if I run the command on the same hyper-v server which is owner of the vm then there will be no problem. Please correct me if I am wrong.

    Thanks.

  • Friday, May 04, 2012 10:32 AM
     
     Answered

    Hello Decoder,

    you can try to take ownership and grant full access. Below was for SP1 problem.

    But can also be used for VM Permission.

    takeown /F c:\Windows\Servicing\Packages /D y /R

    Then assign full control using:

    cacls c:\Windows\Servicing\Packages /E /T /C /G "UserName":F

    This will grant you full control over the directory.

    Sincerely,

    Murat Demirkiran


    If the post helps you and remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. www.scvmm2012.com (TR Language) Please note that I'm not a Microsoft Representative or SpokesPerson.

  • Wednesday, May 23, 2012 5:32 PM
     
     

    Hello Dec0der,

    Is your issue resolved?

    Sincerely,

    Murat Demirkiran


    If the post helps you and remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. www.scvmm2012.com (TR Language) Please note that I'm not a Microsoft Representative or SpokesPerson.

  • Thursday, June 21, 2012 9:29 AM
     
     

    Hi,

    Thanks Murat, issue is resolved now. I have already updated that I was trying to provide permission from another host in the cluster which is not the current owner of the machine because of which I was getting error.

    Thanks.