none
Windows Server 2016 Hyper-V Host: Mounting ISOs in the settings of a VM from a CIFS/SMB share via Hyper-V Manager RRS feed

  • Question

  • Hello,

    after we did a switch from Windows Server 2012 R2 Core to Windows Server 2016 Core for our Hyper-V Hosts we were no longer able to mount ISOs from a SMB share with the Hyper-V Manager in the VM settings. For Server 2012 R2 we did configure constrained delegation for all Hyper-V hosts which did do the trick back then. After some research we found out, that for Server 2016 we have to change the authentication method for the constrained delegation from Kerberos to "any protocol", as WINRM does use CredSSP for authentication. We did change that for the Server 2016 Hyper-V Hosts, but we are still not able to mount the ISOs from the SMB share.

    Error: User Account does not have permission to open attachment. (0x80070005)

    I did configure an audit which monitors the share on the SMB Server for authentication and file access, and I see absolutely no activity when I try to mount a ISO into a VM. Which tells me, that the Hyper-V Host does not forward any authentication info or file access request to the SMB server. So I did dig a little bit deeper into the whole problem using Powershell and "Invoke-Command ... Set-VMDvdDrive ...", and did find out that WINRM was not configured on our clients. After activating WINRM in client mode and did add a Hyper-V Host as trusted host I still was not able to mount an ISO with Invoke-Command, so I added also the parameter "-authentication credssp".... and finally it worked! (at least with the Powershell command)

    But still no luck with the Hyper-V manager. I also tried to connect to a Hyper-V Host in the Hyper-V Manager with different credentials (which should force Hyper-V Manager to use CredSSP), with the same result.

    So if anyone could maybe lead me in the direction what still could be missing to mount ISOs with the Hyper-V Manager I would be really happy ;)

    Friday, August 31, 2018 3:01 PM

All replies

  • Hi,

    Thanks for your question.

    According to your post, now you’re experiencing the error “User Account does not have permission to open attachment. (0x80070005)” when mounting a ISO from the SMB share on the Hyper-V manager remotely and either on local host hyper-v manager.  If I misunderstood your current situation, please don’t hesitate to let me know.

    We can refer to this article (https://www.altaro.com/hyper-v/use-isos-hyper-v/ ), and configure with your desired implementation. According to it, the Hyper-V host and the system running the SMB share must be members of the same domain or domains that trust each other. The SMB protocol does not have any way to authenticate computers without using a domain controller.

    Furthermore, you need to setup delegation for the Hyper-V manager on the remoting server to allow it to pass and make the tasks. Please also assure that the setting is correct by the above article.

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Hope this helps. If you have any question or concern, please feel free to let me know.

    Best regards,

    Michael


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Monday, September 3, 2018 3:46 AM
    Moderator
  • Hi,

    Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.

    Best Regards,

    Michael


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Tuesday, September 4, 2018 1:41 PM
    Moderator
  • Hi,

    Just want to confirm the current situations.

    Please feel free to let us know if you need further assistance.

    Best regards,

    Michael


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Thursday, September 6, 2018 3:03 PM
    Moderator
  • Hi,
    Could the above reply be of help? If yes, you may mark it as answer, if not, feel free to feed back.


    Best Regards,
    Michael


    Please remember to mark the replies as an answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com


    Sunday, September 9, 2018 7:10 AM
    Moderator