Quantcast
Channel: System Center: Virtual Machine Manager Engineering Blog
Viewing all 45 articles
Browse latest View live

Two articles on troubleshooting Virtual Machine Manager

$
0
0

Toolbox3Here’s a quick FYI on a couple new System Center 2012 Virtual Machine Manager (VMM) articles I found over in our community-driven TechNet Wiki. If you are planning on rolling out VMM, or if you already have, you’ll probably want to add these to your Favorites:

Troubleshoot VMM: DebugView for Windows (en-US) : http://social.technet.microsoft.com/wiki/contents/articles/9004.troubleshoot-vmm-debugview-for-windows-en-us.aspx

System Center 2012 Virtual Machine Manager (VMM) General Troubleshooting Guide (en-US) : http://social.technet.microsoft.com/wiki/contents/articles/8826.system-center-2012-virtual-machine-manager-vmm-general-troubleshooting-guide-en-us.aspx

J.C. Hornbeck| System Center & Security Knowledge Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/


VMM Technical Documentation and PowerShell Cheat Sheet

$
0
0

KnowledgeMicrosoft’s own Jonathan Jordan recently posted a couple good articles over on his VMM blog, one regarding Technical Docs for VMM and the other his own personal PowerShell Cheat Sheet.  If you haven’t seen these yet then you’ll definitely want to check them out:

Technical Documentation for SC 2012-VMM : http://blogs.technet.com/b/jonjor/archive/2012/04/10/technical-documentation-for-sc-2012-vmm.aspx

SC VMM 2012: PowerShell Cheat Sheet : http://blogs.technet.com/b/jonjor/archive/2012/04/04/sc-vmm-2012-powershell-cheat-sheet.aspx

J.C. Hornbeck| System Center & Security Knowledge Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

Troubleshooting service templates in System Center 2012 Virtual Machine Manager

$
0
0

imageHi there, this is Alvin Morales and today I want to talk about how to troubleshoot a service template deployment in System Center 2012 Virtual Machine Manager (VMM).  In VMM, we have a new feature for deploying virtual machines (VMs) as a service. There are several blog posts already on this and you can read more about it at the links below:

http://technet.microsoft.com/en-us/library/gg675105.aspx

http://technet.microsoft.com/en-us/library/gg650474.aspx

http://social.technet.microsoft.com/wiki/contents/articles/using-services-templates-in-system-center-virtual-machine-manager-2012.aspx

I won't focus this blog on how to create a service template but more on how you can track the changes that happen behind the scenes to troubleshoot any issues.

Let's first create a scenario.  For simplicity sake, we will use a single VM as this will help us understand the process and use it to track any other deployment. The service template will create a VM with Windows Server 2008 R2 SP1, install the Server App-V agent and then import a Server App-V package to the server.

Once you go through the deployment process and the job starts in the background, this is what occurs:

1) The VHD is transferred from the library to the host via BITS. This process is similar to creating a VM from a template.

2) Once the VM is created on the host, the process will add a virtual floppy to apply all the customization provided in the OS configuration of the template. This will include the addition of roles and features. You can view steps 1 and 2 by connecting to the VM using Hyper-V.

clip_image002

clip_image004

Once SysPrep is complete, the VM is domain joined and running the process that will install a guest VMM agent. You can confirm that this process occurred by connecting to the VM and navigating to %programdata%\vmmlogs. The guest agent will serve as the listener to the SCVMM service to perform actions on the guest VM.

3) Once the agent is installed it will proceed to run scripts in the VM, but before it runs these scripts it needs to transfer them to the guest VM. This step allows you to restart the job if an error occurs. This is done by transferring the custom resource folder from the library to the VM and these files are stored under c:\windows\temp under a folder called scvmmxxx\xxx.cr folder.

clip_image006

clip_image008

4) Once the script files are copied, the Server App-V agent install script will launch the script using c:\windows\temp\ as its working directory. Here it will create two files named GCE_stderrorXXX and GCE_stdoutXXX. These are text files that capture the output of the running script. The GCE_stdoutxxx contains the information of the current actions being performed by the process and the GCE_stderrorxxx file will have any error encountered by the script. If the script encounters an error and stops the process, it will leave this last log in the directory for review. If the process completes successfully it deletes all the contents inside windows\temp

clip_image010

5) Assuming that the process succeeds, we then proceed to transfer the application files specified in the application section of the template. In this case, this is a Server App-V package so it will transfer the package files from the library and store them in the local drive. These files will be stored in c:\windows\MSSCVMMApplications.

Inside this folder you will have two additional folders. One is for Server App-V and it’s here that we store our App-V files. The other is a Webdeploy folder that will store any web apps you have specified in the template.

clip_image012

Since we are using Server App-V, it will launch all PowerShell command to import the application into the Server App-V cache.

NOTE If we were installing a SQL dacpack, the files will be deployed to c:\windows\ MSSCVMMSQLInstance

If the process was successful, you will see the Server App-V application running a service or an icon on the Server App-V agent application list.

The service template process will store logs in c:\programdata\Microsoft\Virtual Machine Manager to track the process of an application installation.

clip_image014

Sample entry of a VMMapplicationmanager.log:

clip_image016

If you are configuring a SQL instance in the service template as part of your deployment, you can gather SQL logs by going to c:\program files\Microsoft SQL Server\100\Setup Bootstrap\log and look in Summary.txt for errors or failures.

clip_image018

Alvin Morales | Senior Support Escalation Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

KB: System Center 2012 Virtual Machine Manager Setup fails to create child objects for DKM

$
0
0

imageHere’s a new Knowledge Base article we published. This one talks about an issue where installing VMM 2012 fails with “Unable to create or access the Active Directory container CN=VMMDKM,DC=Domain,DC=local. Access is denied. Specify the distinguished name for the container and verify that you have genericRead|CreateChild|WriteProperty rights on the container

=====

Symptoms

System Center 2012 Virtual Machine Manager installation fails with the following error message:

Unable to create or access the Active Directory container CN=VMMDKM,DC=Domain,DC=local. Access is denied. Specify the distinguished name for the container and verify that you have genericRead|CreateChild|WriteProperty rights on the container.

Cause

This can occur if the VMMDKM container was not pre-created in the Active Directory with the required permissions.

Resolution

To resolve this issue, pre-create the VMMDKM container in the Active Directory and assign the following permissions:

-The account with which you are installing VMM must be given Full Control permissions to the container in AD DS.
-The permissions must apply to This object and all descendant objects of the container.

Additional information:

- You must create a container in AD DS before installing VMM. You can create the container by using ADSI Edit.
- You must create the container in the same domain as the user account with which you are installing VMM.
- If you specify a domain account to be used by the System Center Virtual Machine Manager service, that account must also be in the same domain.

For example, if the installation account and the service account are both in the corp.contoso.com domain, you must create the container in that domain. So, if you want to create a container named VMMDKM, you would specify the container location as CN=VMMDKM,DC=corp,DC=contoso,DC=com.

For additional information on Configuring Distributed Key Management in VMM review the following: http://technet.microsoft.com/en-us/library/gg697604.aspx

More Information

http://blogs.technet.com/b/scvmm/archive/2011/03/28/scvmm-2012-creating-a-highly-available-vmm-server.aspx

=====

For the most current version of this article please see the following:

2721457 - System Center 2012 Virtual Machine Manager Setup fails to create child objects for DKM

J.C. Hornbeck| System Center & Security Knowledge Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

KB: Recommended hotfixes for Microsoft System Center 2012 Virtual Machine Manager

$
0
0

imageHere’s a new Knowledge Base article we published. This one lists all of the recommended hotfixes for Microsoft System Center 2012 Virtual Machine Manager. Please note that the Virtual Machine Manager Configuration Analyzer (VMMCA) is currently being update to include this new, updated list.

=====

Summary

This article describes recommended updates that you can install to address issues when managing your environment using Microsoft System Center 2012 Virtual Machine Manager.
Use the information in the "More information" section to help you determine whether a particular hotfix or update applies to your environment.

More Information

Virtual Machine Manager (VMM) Server, Console and Self-Service Portal
2686249 Description of Update Rollup 1 for System Center 2012
Windows Server 2008 R2: Hyper-V Server, Library Server and VMM Server
The following updates apply to Windows Server 2008 R2 systems that do not have Service Pack 1 installed:

981314 The "Win32_Service" WMI class leaks memory in Windows Server 2008 R2 and in Windows 7
982293 The Svchost.exe process that has the WMI service crashes in Windows Server 2008 R2 or in Windows 7

The following updates apply to Windows Server 2008 R2 and Windows Server 2008 R2 Service Pack 1 systems:

2512889 Windows Remote Management service leaks memory when it handles certificate authentication requests in Windows 7 or in Windows Server 2008 R2
2608408 The BITS Compact Server service randomly stops responding under high stress in Windows Server 2008 R2 or in Windows Server 2008 SP2
2613988 Changes to performance counters are not updated for at least 15 minutes when you use WMI to query performance counter values in Windows 7 or in Windows Server 2008 R2

To see a list of recommended Hyper-V updates for Windows Server 2008 R2 and for Microsoft Hyper-V Server 2008 R2, visit the following Microsoft TechNet website: Hyper-V Update List for Windows Server 2008 R2

Windows Server 2008 R2: Hyper-V Failover Cluster nodes
980054 Recommended hotfixes and updates for Windows Server 2008 R2-based server clusters
2545685 Recommended hotfixes and updates for Windows Server 2008 R2 SP1 Failover Clusters
Windows Server 2008 Service Pack 2: Hyper-V Server and Library Server
968936 A rollup hotfix package for Windows Server 2008 Failover Clustering WMI provider
970520 The Wmiprvse.exe process creates a memory leak on a computer that is running Windows Server 2008 if you remotely monitor this process by using the WMI interface on a computer that is running Windows Server 2003 or Windows XP
971244 Windows Remote Management (WinRM) does not accept HTTP authorization requests that are larger than 16 KB on a computer that is running Windows Server 2008 or Windows Vista
971403 The "Win32_share" WMI class cannot enumerate file shares or create file shares on a node in a Windows Server 2008 failover cluster
2608408 The BITS Compact Server service randomly stops responding under high stress in Windows Server 2008 R2 or in Windows Server 2008 SP2
To see a list of recommended Hyper-V updates for Windows Server 2008 and for Microsoft Hyper-V Server 2008, visit the following Microsoft TechNet website: Hyper-V Update List for Windows Server 2008
Windows Server 2008 Service Pack 2: Hyper-V Failover Cluster nodes
957311 Recommended hotfixes for Windows Server 2008-based server clusters

=====

For the most current version of this article please see the following:

2724596 - Recommended hotfixes for Microsoft System Center 2012 Virtual Machine Manager

J.C. Hornbeck| System Center & Security Knowledge Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

KB: Assigning NetApp Storage to a Hyper-V Cluster fails with Error 26184 in System Center 2012 Virtual Machine Manager

$
0
0

imageHere’s a new Knowledge Base article we published. This one talks about an issue where an Operations Manager AD Replication Monitor generates an "Invalid Script Parameter Configuration" error message.

=====

Symptoms

You are able to successfully add NetApp storage to System Center 2012 Virtual Machine Manager (VMM) and create the LUN’s but when trying to assign the available storage to a Hyper-V cluster, the job fails with the error below:

Error (20400)
1 parallel subtasks failed during execution.

Error (26184)
The Storage Group existing for <Cluster Name> doesn’t match storage group setting at array <Storage>.
Recommended Action - Make sure storage group setting set at storage array matches storage groups created for cluster.

Trace Details:

1131,02:32:21.151 05-16-2012,0x0638,0x08A4,19,ParallelSubtaskContainer.cs,135,0x00000000,Microsoft.VirtualManager.Utils.CarmineException: The Storage Group existing for <Cluster Name>doesn't match storage group setting at array <SAN01>.

Make sure storage group setting set at storage array matches storage groups created for cluster.

Server stack trace:
at Microsoft.VirtualManager.Engine.ImageLibrary.StrgLun.Unmask(List`1 strgLuns; String groupName; List`1 initiators; List`1 targets)
at Microsoft.VirtualManager.Engine.Adhc.MaskingHelper.Unmask(List`1 strgLuns)
at Microsoft.VirtualManager.Engine.Adhc.RegisterStorageLunToClusterSubtask.RunSubtask()
at Microsoft.VirtualManager.Engine.TaskRepository.SubtaskBase.Run() 01166 at Microsoft.VirtualManager.Engine.TaskRepository.ParallelSubtaskContainerBase.OnAsyncChildStart(ISubtask childToRun)
at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md; Object[] args; Object server; Int32 methodPtr; Boolean fExecuteInContext; Object[]& outArgs)
at System.Runtime.Remoting.Messaging.StackBuilderSink.AsyncProcessMessage(IMessage msg; IMessageSink replySink)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.EndInvokeHelper(Message reqMsg; Boolean bProxyCase)
at System.Runtime.Remoting.Proxies.RemotingProxy.Invoke(Object NotUsed; MessageData& msgData)
at Microsoft.VirtualManager.Engine.TaskRepository.ParallelSubtaskContainerBase.RunSubtaskDelegate.EndInvoke(IAsyncResult result)
at Microsoft.VirtualManager.Engine.TaskRepository.ParallelSubtaskContainerBase.ProcessCompletedSubtaskNoLock(AsyncSubtaskHandle subtaskHandle) at Microsoft.VirtualManager.Engine.TaskRepository.ParallelSubtaskContainerBase.ProcessCompletedSubtask(Guid subtaskId)
at Microsoft.VirtualManager.Engine.TaskRepository.ParallelSubtaskContainerBase.WaitForSubtaskCompletion(Guid asyncSubtaskId)
at Microsoft.VirtualManager.Engine.TaskRepository.ParallelSubtaskContainer.RunSubtaskScheduler()

*** Carmine error was: StorageGroupSettingNotValidForHostOrCluster (26184)
*** CLUSTER NAME** <SAN01> **,{00000000-0000-0000-0000-000000000000},1,
1132,02:32:21.151 05-16-2012,0x0638,0x08A4,9,HostClusterTask.cs,503,0x00000000,error when setting cluster,{00000000-0000-0000-0000-000000000000},1,
1133,02:32:21.151 05-16-2012,0x0638,0x08A4,9,HostClusterTask.cs,503,0x00000000,Microsoft.VirtualManager.Engine.TaskRepository.ParallelSubtaskException: 1 parallel subtasks failed during execution.
at Microsoft.VirtualManager.Engine.TaskRepository.ParallelSubtaskContainerBase.ThrowParallelSubtaskExceptionIfRequired()
at Microsoft.VirtualManager.Engine.TaskRepository.ParallelSubtaskContainerBase.RunSubtask()
at Microsoft.VirtualManager.Engine.TaskRepository.SubtaskBase.Run()
at Microsoft.VirtualManager.Engine.Adhc.SetHostClusterTask.ExecuteStorageSubtasks()
at Microsoft.VirtualManager.Engine.Adhc.SetHostClusterTask.RunSubtask()
** Carmine error was: ParallelSubtaskContainerChildrenFailed (20400)
*** 1 **,{00000000-0000-0000-0000-000000000000},1,

1134,02:32:21.151 05-16-2012,0x0638,0x08A4,19,Task.cs,270,0x00000000,Task failed error ParallelSubtaskContainerChildrenFailed (20400) with exception Microsoft.VirtualManager.Utils.CarmineException: 1 parallel subtasks failed during execution.
at Microsoft.VirtualManager.Engine.Adhc.SetHostClusterTask.RunSubtask()
at Microsoft.VirtualManager.Engine.TaskRepository.SubtaskBase.Run()
at Microsoft.VirtualManager.Engine.TaskRepository.Task`1.SubtaskRun(Object state)
*** Carmine error was: ParallelSubtaskContainerChildrenFailed (20400)
*** 1 **,{37b08eb1-13d7-4be4-aa5e-d26cefb35b73},1,

Cause

This can occur if there is more than one Storage initiator group assigned per Cluster node.

Resolution

To resolve this issue follow the steps below:

1. Reduce the Storage initiator groups to one per cluster node in NetApp storage.
2. To get the changes reflected in the VMM server, we need to Remove and re-add the storage device in the VMM console.
3. In the VMM console, from the Fabric pane, remove the storage device.
4. Verify the Storage removal job completed successfully.
5. On the Home tab, in the Add group, click Add Resources and then click Storage Devices. The Add Storage Devices Wizard starts.
6. Provided the required details and add the storage device.

Now you need to configure the storage classification and storage pools again. After that you should be able to assign the available to storage to a Hyper-V cluster in the VMM console.

More Information

Configuring Storage Overview: http://technet.microsoft.com/en-us/library/gg610600.aspx

=====

For the most current version of this article please see the following:

2725377 - Assigning NetApp Storage to a Hyper-V Cluster fails with Error 26184 in System Center 2012 Virtual Machine Manager

J.C. Hornbeck| System Center & Security Knowledge Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity- support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

KB: Deploying a service template using System Center 2012 Virtual Machine Manager fails with error 421

$
0
0

imageHere’s a new Knowledge Base article we published. This one talks about an issue where deploying a service template using System Center 2012 Virtual Machine Manager fails with error 421.

=====

Symptoms

When deploying a service template using System Center 2012 Virtual Machine Manager (VMM), the job fails with error 421 - "Agent Installation failed due to WS-Management Configuration." After restarting the job in VMM it completes successfully. The job fails at a step where the Virtual Machine is deployed to a VMware ESX 4.1 host and the VMM agent installation is attempted on the newly created virtual machine. The VMM agent installation fails because the WinRM listener cannot be configured by the installation wizard. The following errors are recorded in the VMM agent installation log which can be found in %programdata%\vmmlogs on the newly created virtual machine:

Action start 8:54:08: CreateWsmanListener.
MSI (s) (F8!68) [08:54:08:739]: PROPERTY CHANGE: Adding CAERROR property. Its value is '1'.
1: !VMM_Error! 2: 1
1: Error occured in enumerating existing listeners
MSI (s) (F8:04) [08:54:08:755]: Note: 1: 1720 2: CreateWsmanListener 3: -2147221503 4: 5: 6: 35 7: 8
1: Cannot determine if GPO enabled listeners are present
Info 1720.There is a problem with this Windows Installer package. A script required for this install to complete could not be run. Contact your support personnel or package vendor. Custom action CreateWsmanListener script error -2147221503, : Line 35, Column 8,

and

Action start 8:54:08: DeleteWsmanListenerWithWsmanConfigFailure.
1: !VMM_Error! 2: 1
1: Error occured in enumerating existing listeners
MSI (s) (F8:18) [08:54:08:833]: Note: 1: 1720 2: DeleteWsmanListenerWithWsmanConfigFailure 3: -2147221503 4: 5: 6: 35 7: 8

A VMM trace from the VMM server shows the following:

62704 62212,08:54:16.323 06-05-2012,0x0DCC,0x0CFC,9,GuestAgentInstaller.cs,142,0x00000000,Guest agent on server servername.contoso.com returned exit code 2148925446 (0x80160006),{00000000-0000-0000-0000-000000000000},4,
62705 62213,08:54:16.323 06-05-2012,0x0DCC,0x0CFC,16,ApplicationSubtaskHelper.cs,427,0x00000000,Guest agent install failed for VM servername.contoso.com,{00000000-0000-0000-0000-000000000000},1,
62706 62214,08:54:16.323 06-05-2012,0x0DCC,0x0CFC,16,ApplicationSubtaskHelper.cs,427,0x00000000,Microsoft.VirtualManager.Utils.CarmineException: Agent installation failed on servername.contoso.com because of a WS-Management configuration error.

Cause

This can occur if the system time on the VMware ESX 4.1 host to which the service template is deployed is not synced with the Domain Controller. This causes the newly deployed VM to have an incorrect time which causes Kerberos authentication to fail, in turn causing the VMM agent installation wizard to fail to create the WinRM listener.

The VMM agent installation wizard starts 10-30 seconds before the system time is synced on the virtual machine and the system event log on the newly created virtual machine will show the following events:

Event ID 7024: The VMMInstallDetector service terminated with the following service-specific error: %%-2146041853

Event ID 5: The Kerberos client received a KRB_AP_ERR_TKT_NYV error from the server SERVERNAME$. This indicates that the ticket presented to that server is not yet valid (due to a discrepancy between ticket and server time. Contact your system administrator to make sure the client and server times are synchronized, and that the time for the Key Distribution Center Service (KDC) in realm CONTOSO.COM is synchronized with the KDC in the client realm.

Event ID 7024: The VMMAgentInstaller service terminated with the following service-specific error: %%-2146041850

Resolution

To resolve this issue, the system time on the VMware ESX 4.1 host needs to be synced with the Domain Controller. One option is to open the VMware vSphere client on the VMware vCenter server and change the ESX host's time under the Time Configuration tab so that it matches the time on the Domain Controller. For other options please check the following VMware Knowledge Base article:

http://kb.vmware.com/kb/1003736

More Information

Event ID 5 — Kerberos Client Configuration: http://technet.microsoft.com/en-us/library/dd363871(v=WS.10).aspx

=====

For the most current version of this article please see the following:

2726468 - Deploying a service template using System Center 2012 Virtual Machine Manager fails with error 421

J.C. Hornbeck| System Center & Security Knowledge Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

KB: Attempting to remove VMware vCenter from System Center 2012 Virtual Machine Manager fails with error 0x8007274D

$
0
0

imageHere’s a new Knowledge Base article we published. This one talks about an issue where attempting to remove VMware vCenter from VMM 2012 fails with error 0x8007274D.

=====

Symptoms

When trying to remove the VMware vCenter 4.1 from System Center 2012 Virtual Machine Manager (VMM), the action fails with the error:
VMM cannot complete the VMware operation on the SERVERNAME$ server because of the error: Unable to connect to the remote server
Resolve the issue in VMware and then try the operation again.

ID: 12701
Details: No connection could be made because the target machine actively refused it (0x8007274D)
Also, every few minutes the following error is displayed under the Jobs tab:

Error (12701)
VMM cannot complete the VMware operation on the SERVERNAME$ server because of the error: Unable to connect to the remote server
No connection could be made because the target machine actively refused it (0x8007274D)

Recommended action
Resolve the issue in VMware and then try the operation again.

Cause

System Center 2012 Virtual Machine Manager needs to communicate with the VMware vCenter in order to remove it from the VMM server. In situations when VMM is not able to communicate with the VMware vCenter (i.e. vCenter server was lost or network issues), it is not possible to directly remove the VMware vCenter.

Resolution

One option is re-install VMM with the new database.

The second option requires a few steps. In summary, a new virtual machine needs to be created and then joined to the domain under the same name as the previous vCenter server. VMware vCenter server will need to be also installed on this virtual machine. By doing this, VMM will think that the old vCenter server is back. However, since by default the communication between the VMM and vCenter servers is encrypted, VMM will give an error stating that it cannot communicate with vCenter server because of the invalid certificates. Thus, we will also have to generate a new vCenter certificate on the VMM server. More detailed steps are shown below:

1. Create a new Virtual Machine.

2. Install Windows Server 2008 R2 (or older Windows version supported by VMware vCenter) with the required updates.

3. Join the Virtual Machine to the domain under the same computer name as the original computer with which the contact was lost. For example, if the original vCenter server's computer name was vcenter.contoso.com then the newly created Virtual Machine should be joined to the domain as vcenter.contoso.com.

4. Install VMware vCenter and VMware vSphere client on the newly created VM.

5. On the VMM server, open the Certificates Snap-in (Computer Account) (http://msdn.microsoft.com/en-us/library/ms788967.aspx) and delete the VMware default certificate located under Trusted People/Certificates.

6. Launch the VMM PowerShell on the VMM server, type and run the following command:

$Virtman = Get-virtualizationmanager –computername “VirtMgrServer01.Contoso.com”
$Cert = Get-certificate –computername “VirtMgrServer01.Contoso.com”
Set-VirtualizationManager –VirtualizationManager $VirtMan –Certificate $Cert

Where VirtMgrServer01.Contoso.com is the FQDN of your newly created VMware vCenter server.

7. In the VMM console, right click on the VMware vCenter server and select Refresh. vCenter server should be successfully refreshed.

8. Right click on the VMware vCenter and select Remove. The vCenter should be successfully removed from the VMM server.

More Information

How to: View Certificates with the MMC Snap-in: http://msdn.microsoft.com/en-us/library/ms788967.aspx
How to Replace the Certificate for a VMware VirtualCenter Server: http://technet.microsoft.com/en-us/library/cc974213

=====

For the most current version of this article please see the following:

2730029 - Attempting to remove VMware vCenter from System Center 2012 Virtual Machine Manager fails with error 0x8007274D

J.C. Hornbeck| System Center & Security Knowledge Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/


KB: Adding a Citrix XenServer host on System Center 2012 Virtual Machine Manager fails with error 2916 (0x8033810f)

$
0
0

KBHere’s a new System Center 2012 Virtual Machine Manager Knowledge Base article we recently published. This one tells you how to fix an issue where adding a Citrix XenServer host on VMM fails with error 2916 (0x8033810f).

=====

SYMPTOMS

Adding a Citrix XenServer host on System Center 2012 Virtual Machine Manager may fail with the following error:

Error (2916)
VMM is unable to complete the request. The connection to the agent <Xen server> was lost.
Unknown error (0x8033810f)
Recommended Action
Ensure that the WS-Management service and the agent are installed and running and that a firewall is not blocking HTTPS traffic.
This problem can also be caused by WMI service crash. Ensure that KB 982293 (http://support.microsoft.com/kb/982293) is installed on the machine if it is running Windows Server 2008 R2.
If the error persists, reboot <Citrix host> and then try the operation again.

CAUSE

This issue occurs if security update MS12-006 (KB2585542) is installed on the VMM Management Server. This security update blocks a WMI call that is used by the Citrix XenServer host.

RESOLUTION

To work around this issue, perform the following steps on the VMM Management Sever:

  1. Set the SendExtraRecord registry value to 2 by performing the steps documented in the following Microsoft knowledge base article: http://support.microsoft.com/kb/264358

    (http://support.microsoft.com/kb/264358)

  2. Once the SendExtraRecord registry value is set to 2, add the Citrix XenServer host.

MORE INFORMATION

Managing Citrix XenServer with System Center Virtual Machine Manager (SCVMM) 2012:
http://blogs.citrix.com/2011/06/16/managing-xenserver-with-system-center-virtual-machine-manager-scvmm-2012/

How to add XenServer hosts to VMM: http://technet.microsoft.com/en-us/library/gg610684.aspx

=====

For the most current version of this article please see the following:

KB2728902 - Adding a Citrix XenServer host on System Center 2012 Virtual Machine Manager fails with error 2916 (0x8033810f)

J.C. Hornbeck| System Center & Security Knowledge Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

Update Rollup 2 for System Center 2012 is now available for download

$
0
0

KBThis rollup includes updates for App Controller, Data Protection Manager (DPM), Operations Manager (OpsMgr), Orchestrator, Service Manager (SCSM) and Virtual Machine Manager (VMM). Download links, installation instructions and the list of issues fixed for each component are documented in the following KB:

KB2706783 - Description of Update Rollup 2 for System Center 2012 (http://support.microsoft.com/kb/2706783)

J.C. Hornbeck| System Center & Security Knowledge Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

An in-depth look at Virtual Machine Manager Services – Part 1

$
0
0

GrayAndYellowGearsVirtual Machine Manager 2008 R2 had support for Virtual Machine templates (VM templates). At their core, VM templates consist of three main artifacts: one or more virtual disks, a hardware profile (define hardware characteristics of the virtual machine) and a guest OS profile (define Windows Operating System specialization values for the virtual machine). VM templates are great for repeatedly and reliably deploying standalone (read: single) virtual machines, but they suffer from at least three notable limitations:

1. Single Machine: VM templates, by definition, define a single virtual machine. While there are certainly use cases for single virtual machine deployments, when we think about typical business service deployment, it is likely that said deployment spans multiple machines. For example, consider a two tier application with a load balanced Web front end and a SQL Server backend. Even a small deployment of a service of this type would consist of three machines: two load balanced web servers and a SQL server.

2. Limited In-Guest Configuration: While the Guest OS Profile component of a VM template allows users to define basic Windows OS specialization options such as the computer name, initial administrator password and domain join characteristics of the virtual machine, they cannot easily be used to define richer in-guest configuration options such as Windows Server Role/Feature install, application installation or post-install configuration scripts.

3. Fire and Forget: When a virtual machine is deployed from a VM template, the deployed instance maintains no relationship back to the template from which it was provisioned. Over time, this means that it is difficult, if not impossible, to determine if a deployed instance is still compliant with (i.e. matches) the initial configuration specified in the template. What’s more, consider the situation where you defined a standard infrastructure server via a VM template, specified 1GB of memory in the template and then deployed 80 virtual machine instances from said template. What if it turned out that 1GB was not sufficient and that each of those machines really needed 2GB of memory? With a VM template, you’re stuck manually modifying each of the deployed instances, assuming you can even figure out which instances were deployed from that template.

In VMM 2012, we set out to solve each of these problems (and more). Our solution is called a Service template. We’re going to make available a series of Blog posts to walk through Service templates and Service instances. In this post, Part 1, we’ll begin by discussing Service templates and the features they enable and end by creating a template to deploy a two server environment consisting of an IIS Server and a SQL Server.

Service Templates

Virtual Machine Manager 2012 includes a new template type – a Service template – and several new profile types (e.g. Application Profile, SQL Server Profile) which together solve each of the VM template limitations described above. Specifically, Service templates enable:

1. Multi-Machine Modeling: While Service templates can be used to model and deploy a single machine, they can also be used to model a deployment which consists of multiple machines. Consider the example discussed above, a two tier application with a load balanced Web front end and a SQL Server backend. Using a Service template (which is created in our new Service Designer UI), you can model your Web front end as a “tier” of the service and your SQL Server as a second “tier” of the service. Each tier has its own definition such as hardware characteristics, Windows OS specialization values and application deployments (more on that later). Here is our typical two tier application seen in the Service Designer:

clip_image002

2. Rich In-Guest Configuration: Service templates enable a rich set of in-guest configuration options such as Windows Server 2008 R2 (or higher) Role/Feature installation, application deployment (including first class support for MS Deploy, Server App-V and SQL Data-tier applications) and arbitrary payload delivery and script execution (e.g. a custom .cmd file which can install a custom MSI file). You can even complete the installation of a prepared instance of SQL server, meaning that when your Service instance virtual machine is done provisioning it’s a fully configured SQL Server!

3. Template References: When a Service instance is deployed from a Service template, the deployed instance maintains a relationship back to the template (and template version) from which it was provisioned. Over time, this means that it is easy to determine if a deployed instance is still compliant with (i.e. matches) the initial configuration specified in the template. What’s more, recall the situation described above where you defined a standard infrastructure server via a VM template, specified 1GB of memory in the template and then deployed 80 virtual machine instances from said template. By leveraging a Service template for this instead of a VM template, you could easily copy the template, make your hardware modifications and then apply the updated template to the 80 running instances and VMM will take care of shutting the machines down, reconfiguring the memory and starting them back up!

Service Authoring – Standard IIS Server

Just as VM templates have building blocks (Hardware profiles, OS profiles, physical artifacts such as VHDs), so too do Service templates. In addition to the standard building blocks, Service templates can leverage application packages, custom resource packages (more on those in a later blog post) and even VM templates as building blocks. For example, let’s say I need to define what a standard IIS server configuration looks like in my environment. What’s more, I want Service authors to be able to leverage this standard configuration so that all deployed Services use a consistent IIS configuration. I’ll start by creating a VM template which defines the standard IIS server in my environment. After launching the Create VM Template Wizard, I provide the following values:

1. Source: I choose a base Windows Server 2008 R2 SP1 sysprepped VHD from my VMM library

2. VM Template Name: Standard IIS Server

3. Hardware: I specify the standard hardware configuration for IIS servers in my environment

4. Operating System: I provide some sensible defaults, domain join information and also configure the Windows Server Roles and Features which define the standard IIS server in my environment:

clip_image004

5. Applications: Because I want this template to be used as a standard building block, I don’t configure any applications (though if I had a standard IIS configuration script which should run, I could add that here).

6. SQL Server: Because this is an IIS server, I’m not going to have SQL configured so I can skip this page.

7. Summary: Go ahead and create the template:

clip_image006

Service Authoring – Standard SQL Server

Just as I did with my Standard IIS server above, I want my Service authors to be able to leverage a standard SQL server template so that all deployed Services use a consistent SQL configuration. Again, I’ll start by creating a VM template which defines the standard SQL server in my environment. After launching the Create VM Template Wizard, I provide the following values:

1. Source: I choose a base Windows Server 2008 R2 SP1 sysprepped VHD which contains a sysprepped instance of SQL server from my VMM library. For more information on preparing a sysprepped instance of SQL, see Qingbo Cai’s excellent blog post.

2. VM Template Name: Standard SQL 2008 R2 Server

3. Hardware: I specify the standard hardware configuration for SQL servers in my environment

4. Operating System: I provide some sensible defaults, domain join information and also configure any Windows Server Roles and Features which define the standard SQL server in my environment:

5. Applications: Because I want this template to be used as a standard building block, I don’t configure any applications (though if I had a standard SQL configuration script which should run, I could add that here).

6. SQL Server: Because this is a SQL server, I’m going to go ahead and configure a SQL deployment for this template. Again, Qingbo’s blog post referenced above has all the details about deploying SQL servers with the new SQL Profile object available in VMM.

7. Summary: Go ahead and create the template.

Of course, we’ve also introduced monitoring and diagram views for our other new VMM features such as private clouds, IP address pools and Storage pools.

Putting it all Together

So now I have a couple of Service template building blocks. I want to provide my developers with a standard Web-SQL development environment, which should consist of a single IIS server and a single SQL server. With that in mind, I’m going to create a new Service template which allows them to deploy such an environment quickly and reliably. I’ll go ahead and choose to create a new Service template from the VMM library section of the Admin Console and I’ll start with a blank template, providing a name and release:

clip_image008

Now that I’m in the Service Designer UI, I see that my existing VM templates are available as building blocks of my Service template. If I needed to create a new type of VM definition for this service, I could simply use the “Add Machine Tier” option in the ribbon to create a new type of VM for use in my Service. Because I have my Web and SQL VM templates available, all I need to do is drag and drop each on to the Designer canvas:

clip_image010

clip_image012

Once that’s done, I can click the save and validate ribbon action and my template is now ready for use. I can delegate access to the template to the appropriate self-service users and they have one click deployment of a Web Server / SQL Server environment available to them!

clip_image014

Wrapping Up

I hope this brief overview gave you not only a great overview of Services but also sparked your imagination as to the myriad options for leveraging Services in your environment. In the next part of this series, we’ll walk through modifying the template to make it more customizable by the end user at deployment time and also add a couple of applications to the deployment.

Stephen Baron | VMM Program Manager

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

KB: System Center 2012 Virtual Machine Manager Error: The selected user is not a member of any user roles that has this object in its scope

$
0
0

imageHere’s a new Knowledge Base article we published. This one talks about an issue where attempting to change the ownership of a VM in VMM 2012 to a user who is a member of the Self-Service User role created by the VMM Administrator fails.

=====

Symptoms

When the VMM delegated administrator tries to change the ownership of a VM in System Center 2012 Virtual Machine Manager (VMM) to a user who is a member of the Self-Service User role created by the VMM Administrator, the following error is displayed:

The selected user is not a member of any user roles that has this object in its scope. Please select another user.

This happens even when the VMM delegated administrator has the cloud in its scope to which the VM is assigned and to which the Self-Service User role has access.

Cause

This is by design as the VMM Delegated Administrators cannot view, modify, or remove user roles created by members of the Administrator user role or by other VMM Delegated Administrator user roles. Due to this fact, a Self-Service User role created by the VMM Administrator is not accessible to the VMM Delegated Administrator.

Resolution

To allow a delegated administrator in VMM to change the membership of a self-Service user role, that role must be created by the delegated administrator. Below are two methods of creating a self-service user role that can be managed by a delegated administrator.

Method 1:

1. Login to VMM as a Delegated Administrator.
2. Create a new Self-Service User Role (for example SSU_HelpDesk) and assign a user (for example contoso\Vladimir) as the member of this Self-Service User role.

Now the VMM delegated administrator should be able to change the ownership of the virtual machine to contoso\Vladimir as contoso\Vladimir is a member of the Self-Service User role (SSU_HelpDesk) created by the currently logged in VMM Delegated Administrator (assuming that the virtual machine is in the cloud which both the newly created Self-Service User role and the VMM delegated administrator role have in their scope).

NOTE If you log in as a member of a different VMM Delegated Administrator role and try to change the ownership of the virtual machine to contoso\Vladimir, you will get the error "The selected user is not a member of any user roles that has this object in its scope. Please select another user" since the Self-Service User role SSU_HelpDesk was created by a different VMM Delegated Administrator role.

Method 2:

The second option is to use the VMM PowerShell. In this example we are going to create a new Self-Service User role called 'ContosoSSU' and assign 'DelAdmin' VMM delegated administrator user role as an owner of the ContosoSSU which will enable members of the 'DelAdmin' role to change the ownership of a VM to a user who is a member of the 'ContosoSSU'.

1. Login as a VMM Administrator
2. Launch the VMM PowerShell
3. Type: $UserRole=Get-SCUserRole -name "DelAdmin"
4. Press enter
5. Type: New-SCUserRole -Name "ContosoSSU" -UserRoleProfile "SelfServiceUser" -ParentUserRole $UserRole
6. Press Enter
7. Now the new Self-Service User role "ContosoSSU" is created, and a member of the DelAdmin user group should be able to change ownership of a VM to user who is a member of the "ContosoSSU". Note that both DelAdmin and ContosoSSU need to have the same cloud in their scopes.

=====

For the most current version of this article please see the following:

2736792 - System Center 2012 Virtual Machine Manager Error: The selected user is not a member of any user roles that has this object in its scope

J.C. Hornbeck| System Center & Security Knowledge Engineer

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

KB: How to troubleshoot the “Needs Attention” and “Not Responding” host status in System Center 2012 Virtual Machine Manager

$
0
0

imageHere’s a new Knowledge Base article we published that talks about how to troubleshoot the “Needs Attention” and “Not Responding” host status in System Center 2012 Virtual Machine Manager. This is one you’ll probably want to add to your Favorites.

=====

Summary

This article discusses how to troubleshoot the “Needs Attention” and “Not Responding” host status in System Center 2012 Virtual Machine Manager. The “Needs Attention” and “Not Responding” host status in the VMM console occurs because the VMM Server is unable to communicate with the host machine or components (WMI, WinRM, etc.) on the host machine that are used to communicate with the VMM Server are not functioning correctly.

Common errors that are logged in the Jobs views in the VMM Console when the host status is “Needs Attention” or “Not Responding:”

Warning (2915)
The Windows Remote Management (WS-Management) service cannot process the request. The object was not found on the server (servername.domain.com).
Unknown error (0x80041002) or Unknown error (0x80338000)

Error (2916)
VMM is unable to complete the request. The connection to the agent servername.domain.com was lost.
Unknown error (0x80338126) or Unknown error (0x80338012)

Warning (12710)
VMM does not have appropriate permissions to access the Windows Remote Management resources on the server (servername.domain.com).
Unknown error (0x80338104)

Warning (13926)
Host cluster servername.domain.com was not fully refreshed because not all of the nodes could be contacted. Highly available storage and virtual network information reported for this cluster might be inaccurate.

Error (20506)
Virtual Machine Manager cannot complete the Windows Remote Management (WinRM) request on the computer servername.domain.com.

Perform the steps documented in the More Information section to identify the cause of the “Needs Attention” or “Not Responding” host status.

More Information
Step 1: Check the Health status of the Host
To check the Health status of a host, perform the following steps:

1. Open the VMM Console.
2. Select the Fabric view, right-click the host that’s experiencing issues and chose properties.
3. Within the host properties, select Status.
4. Select the category that has the Red exclamation to view the error details.

For more information on the host health check feature, please reference the following blog: http://blogs.technet.com/b/scvmm/archive/2011/12/19/host-properties-new-in-vmm-2012-expanded-health-checks.aspx

Step 2: Use the Virtual Machine Manager Configuration Analyzer (VMMCA)
VMMCA is a diagnostic tool you can use to evaluate important configuration settings for computers that are either running VMM server roles or are acting as virtual machine hosts. The VMMCA scans the hardware and software configurations of the computers you specify, evaluates them against a set of predefined rules, and then provides you with error messages and warnings for any configurations that are not optimal.
To download the Virtual Machine Manager Configuration Analyzer, visit the following Microsoft website:
http://www.microsoft.com/en-us/download/details.aspx?id=29309
Step 3: Verify the VMM service account is a member of the local administrators group on the host
• If the VMM service is running under a domain account, verify the domain account is a member of the local administrators group on the host.
• If the VMM is running under the local system account, verify the computer account is a member of the local administrators group on the host.
If the VMM service account is removed from the local administrators group on the host, this issue could be caused by a “Restricted Groups” group policy.
To resolve this issue, perform one of the following steps:

• Add the VMM service account to the Administrators "restricted groups" group policy setting.
• Create a new organizational unit in the domain, move the host computer object to the new OU and then configure the new organizational unit to block policy inheritance.

Step 4: Check for corrupted performance counters
Check the Application event log on the host to see if the following event is logged:

Log Name: Application
Source: Microsoft-Windows-LoadPerf
Event ID: 3012
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

If the Event ID 3012 is logged on the host machine, perform the steps documented in the following knowledge base article to rebuild the performance counters:

2554336 How to manually rebuild Performance Counters for Windows Server 2008 64bit or Windows Server 2008 R2 systems

Step 5: Check the Svchost.exe process of the Windows Remote Management service
VMM depends on the Windows Remote Management service for host communication. Therefore, the "Not Responding" status is very likely to occur because of an error in the underlying Windows Remote Management communication between the VMM server and the host computer. In this scenario, the host status is "OK" shortly after you restart the host computer. However, the status changes to "Not Responding" after three to four hours, and jobs on the VMM server fail and return an error that resembles the following:

Error (2927)
A Hardware Management error has occurred trying to contact server servername.domain.com.
Unknown error (0x803381a6)

Additionally, if you stop the Windows Remote Management service at a command prompt, this process takes much longer than usual to be completed. Sometimes, it can take up to five minutes to stop.
This problem can occur if the shared Svchost.exe process that hosts the Windows Remote Management service is experiencing issues.
To resolve this problem, configure the Windows Remote Management service to run in a separate Svchost.exe process. To do this, open an elevated command prompt, type the following command and then press ENTER.

sc config winrm type= own

Note Make sure that you type the command exactly as it appears here. Notice the space after the equal sign (=) symbol.
If the command is completed successfully, you should see the following output:
[SC] ChangeServiceConfig SUCCESS

Step 6: Increase the default values for WinRM
On each server, open an elevated command prompt, type the following commands and then press Enter after each command:
winrm set winrm/config @{MaxTimeoutms = "1800000"}
winrm set winrm/config/Service @{MaxConcurrentOperationsPerUser="400"}
net stop winrm
net start winrm
net start scvmmagent

=====

For the most current version of this article please see the following:

2742246 - How to troubleshoot the “Needs Attention” and “Not Responding” host status in System Center 2012 Virtual Machine Manager

J.C. Hornbeck| Knowledge Engineer | Management and Security Division

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity- support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

KB: How to troubleshoot issues when adding a Hyper-V host in System Center 2012 Virtual Machine Manager

$
0
0

imageHere’s a new Knowledge Base article we published. This one covers how to troubleshoot issues when adding a Hyper-V host in System Center 2012 Virtual Machine Manager.

=====

Summary

This article covers how to troubleshoot issues when adding a Hyper-V host in System Center 2012 Virtual Machine Manager.
Common errors that are logged in the VMM Console when an “Add virtual machine host” job fails:

Error (421)
Agent installation failed on servername.domain.com because of a WS-Management configuration error.

Error (2912)
An internal error has occurred trying to contact an agent on the servername.domain.com server.

Error (2916)
VMM is unable to complete the request. The connection to the agent servername.domain.com was lost.

Error (2927)
A Hardware Management error has occurred trying to contact server servername.domain.com.

Perform the steps documented in the More Information section to identify the cause of the issue.

More Information
Step 1: Review the VMM Agent installation log file

On the Hyper-V host, review the “vmmAgent.msi_date_time.log” file that’s located in the %systemdrive%\ProgramData\VMMLogs directory.

Note: This log file may not exist if the failure occurs early in the installation process.

Step 2: Use the Virtual Machine Manager Configuration Analyzer (VMMCA)

VMMCA is a diagnostic tool you can use to evaluate important configuration settings for computers that are either running VMM server roles or are acting as virtual machine hosts. The VMMCA scans the hardware and software configurations of the computers you specify, evaluates them against a set of predefined rules, and then provides you with error messages and warnings for any configurations that are not optimal.

To download the Virtual Machine Manager Configuration Analyzer, visit the following Microsoft website:

http://www.microsoft.com/en-us/download/details.aspx?id=29309

Step 3: Verify the ports used by VMM are not blocked by a firewall

Verify the ports used by VMM to communicate with the Hyper-V host are not blocked by a firewall. By default, VMM uses the following ports to communicate with the Hyper-V host:

TCP port 443
TCP port 5985
TCP port 5986

For more information on the ports used by VMM, please reference the following TechNet article: http://technet.microsoft.com/en-US/library/gg710871.aspx

Step 4: Check for duplicate SPNs

Perform the steps documented in the following article to check for duplicate SPNs:

970923 Unable to add a managed host in SCVMM 2008 and SCVMM 2012, Error 2927 (0x8033809d)

Step 5: Check for corrupted performance counters on the Hyper-V host
Check the Application event log on the host to see if the following event is logged:

Log Name: Application
Source: Microsoft-Windows-LoadPerf
Event ID: 3012
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

If the Event ID 3012 is logged on the host machine, perform the steps documented in the following knowledge base article to rebuild the performance counters:

2554336 How to manually rebuild Performance Counters for Windows Server 2008 64bit or Windows Server 2008 R2 systems

Step 6: Manually install the VMM Agent on the Hyper-V host
If the Add-SCVMHost job continues to fail, manually install the agent on the Hyper-V host by performing the steps documented in the following TechNet article: http://technet.microsoft.com/en-us/library/bb740757.aspx

=====

For the most current version of this article please see the following:

2742275 - How to troubleshoot issues when adding a Hyper-V host in System Center 2012 Virtual Machine Manager

J.C. Hornbeck| Knowledge Engineer | Management and Security Division

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity- support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

KB: Adding a SAN storage provider in System Center 2012 Virtual Machine Manager fails with SMI-S Error 26100

$
0
0

imageHere’s a new Knowledge Base article we published. This one talks about troubleshooting an issue where adding a SAN storage provider in VMM 2012 fails with SMI-S Error 26100.

=====

Symptoms

When attempting to discover a SAN storage provider in System Center 2012 Virtual Machine Manager (VMM) using the Add Storage Devices Wizard, the action fails with Error 26100:

Unable to contact storage service on %ComputerName;.
Ensure that the storage service is properly installed and running.

Cause

The Microsoft Storage Management Service is not installed properly on the VMM server or is corrupted. The result is that the service is not running and it is not possible to manually start it.

Resolution

To resolve this issue, uninstall the Microsoft Storage Management service on the VMM server and then reinstall it again. To do this, follow the steps below:

1. Close all VMM consoles.

2. On the Virtual Machine Manager server, stop the System Center Virtual Machine Manager service and the System Center Virtual Machine Manager Agent service.

3. Uninstall the Microsoft Storage Management service by running the StorageService.msi from the System Center 2012 Virtual Machine Manager installation media (\amd64\setup\msi\SCXStorage) and choosing the Remove option.

4. Open an elevated command prompt (Run as administrator).

5. In the opened command prompt, change the directory to the VMM installation media. For example: cd D:\amd64\setup\msi\SCXStorage.

6. In the opened command prompt, type and run the following command:

msiexec /i StorageService.msi /L*V c:\temp\install.txt

This will install the Microsoft Storage Management service and put the installation log in the c:\temp folder.

7. On the Virtual Machine Manager server, start the System Center Virtual Machine Manager service and the System Center Virtual Machine Manager Agent service.

8. Verify that the Microsoft Storage Management service is running.

At this point you should be able to discover the supported SAN storage.

More Information

VMM trace shows the following:

WSMAN: URL: [http://SERVERNAME:5985] Verb: [ENUMERATE]; resource[http://schemas.microsoft.com/wbem/wsman/1/wmi/root/microsoft/scx/storage/sm/MSFT_SMStorageDiscovery];
WsmanAPIWrapper.cs,2894,0x00000000,Retrieving underlying WMI error to throw. Got string "<f:WSManFault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" Code="2150858752" Machine="SERVERNAME"><f:Message><f:ProviderFault provider="WMI Provider" path="%systemroot%\system32\WsmWmiPl.dll"><f:WSManFault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" Code="2150858752" Machine="SERVERNAME"><f:Message>The WS-Management service cannot process the request. The service cannot find the resource identified by the resource URI and selectors. </f:Message></f:WSManFault></f:ProviderFault></f:Message></f:WSManFault>

=====

For the most current version of this article please see the following:

2744216 - Adding a SAN storage provider in System Center 2012 Virtual Machine Manager fails with SMI-S Error 26100

J.C. Hornbeck| Knowledge Engineer | Management and Security Division

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/


Support Tip: Connecting to a VM running on a VMware cluster from VMM 2012 fails with error 20700

$
0
0

toolsignHi folks, this is Vladimir from the VMM team and today I want to discuss an issue with System Center 2012 Virtual Machine Manager (VMM 2012) and VMware vCenter 4.1 that I saw few weeks ago. The summary of the issue is this: A VMM 2012 Self-Service user receives the following error when trying to connect via console to a VM running on a VMware cluster of two ESX 4.1 hosts either from the VMM Self-Service Portal, the VMM console, or System Center 2012 AppController:

VMConsoleParamsFetchFailure (20700)
Could not retrieve console parameters for virtual machine
%VMName;.
Ensure that the virtual machine exists and that the host %VMHostName; can be contacted, and then try the operation again.

The VMM 2012 Administrator is able to connect via the console to the same VM without any issues. My initial thought was that this is related to the permissions issue somewhere between VMM and vCenter, and my guess ended up being correct. A VMM trace showed the following:

GetVmConsoleParameters.cs,126,0x00000000,Trying to get run as account with username SCVMM.vm-41 and associated with vm 247ac427-fa90-4522-9a28-77903973aea7

ClientConnection.cs,267,0x00000000,Exception during context of an indigo call; carmine error code returned 20700
ClientConnection.cs,267,0x00000000,Microsoft.VirtualManager.Utils.CarmineException: Could not retrieve console parameters for virtual machine <VM_NAME>.

    at Microsoft.VirtualManager.Engine.VmOperations.VMConsoleOperations.GetConsoleParameters(Guid vmObjectId; ConnectionProperties connProperties)
at Microsoft.VirtualManager.Engine.Remoting.ClientConnection.GetVMConsoleParameters(Guid vmObjectId)
    at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance; Object[] inputs; Object[]& outputs)
    at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
    at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
    at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage4(MessageRpc& rpc)
    at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)
*** Carmine error was: VMConsoleParamsFetchFailure (20700)

I have two environments. One where the issue is occurring and one where the Self-Service users are able to connect via console to VMs, so I started comparing them.

After some troubleshooting I was able to understand what is causing this. In short, when we add vCenter to VMM 2012, we have to use an account that is a local administrator on the Windows server where vCenter server is running. That account needs to be a vCenter Administrator as well. The reason why we experienced error 20700 is because VMM 2012 was not able to create and configure the required users, user roles, and permission on the vCenter server. The account used to add vCenter to VMM2012 possibly did not have all the rights that VMM needs. When the account has enough permissions, this is what VMM 2012 does on vCenter to enable VMM Self-Service users to connect via the console to VMs on the ESX hosts:

1. VMM creates a run-as account (SCVMM.vm-xx) that it uses to enable Self-Service users to connect to vCenter. It also specifies for which VMs this run-as account should be used.

clip_image003

2. Then on the Windows machine where vCenter server is running, VMM creates a local user account with the same name as the run-as account created above.

clip_image004

3. In vCenter, VMM creates two user roles (SCVMMSelfServiceUser and SCVMMConsoleUser), gives those user roles Console Interaction permission, adds local account SCVMM.vm-xx to the SCVMMConsoleUser role and then assigns SCVMM.vm-xx permission to the VM to which the VMM Self-Service user has access to.

clip_image005

clip_image006

clip_image008

NOTE Most of these users, user roles, and permissions are created/configured when the VMM Self-Service user tries to connect to a VM via console from the Self-Service Portal, VMM console, or System Center 2012 AppController.

In my case, we resolved this issue by removing vCenter server from VMM and then adding it back using a domain account that was a local Administrator on Windows machine where vCenter running and also a vCenter Administrator. In theory, you can use a local account too, but for some reason using the local account in one of the environments caused this issue. The steps to add a vCenter server to VMM are described here: http://technet.microsoft.com/en-us/library/gg610681

I hope you found this post interesting and helpful. See you soon!

Vladimir Petrosyan | Support Engineer | Management and Security Division

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity- support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

Free tool to convert VMware-based virtual machines and disks to Hyper-V based virtual machines and disks

$
0
0

wrenchThe Microsoft Virtual Machine Converter (MVMC) Solution Accelerator is a Microsoft-supported, stand-alone solution for the IT pro or solution provider who wants to convert VMware-based virtual machines and disks to Hyper-V®-based virtual machines and disks.

MVMC provides the following features:

  • Converts and deploys virtual machines from VMware hosts to Hyper-V hosts including Hyper-V on Windows Server® 2012. As part of the machine conversion MVMC converts the virtual disks attached to the source virtual machine. It also migrates configuration such as memory, virtual processor and so on from the source virtual machine to the converted virtual machine deployed on Hyper-V. It adds virtual network interface cards (NICs) to the converted virtual machine on Hyper-V.
  • Converts VMware virtual disks to Hyper-V based virtual hard disks (VHDs).
  • Supports conversion of virtual machines from VMware vSphere 4.1 and 5.0 hosts to Hyper-V.
    • Note MVMC also supports conversion of virtual machines from VMware vSphere 4.0 if the host is managed by vCenter 4.1 or vCenter 5.0. You have to connect to vCenter 4.1 or 5.0 through MVMC to convert virtual machines on vSphere 4.0.
  • Offers fully scriptable command-line interfaces for performing virtual machine and disk conversions that integrates well with data center automation workflows and Windows PowerShell scripts.
  • Has a wizard-driven GUI, making it simple to perform virtual machine conversion.
  • Uninstalls VMware tools prior to conversion to provide a clean way to migrate VMware-based virtual machines to Hyper-V.
  • Supports Windows Server guest operating system conversion, including Windows Server 2008 R2, Windows Server 2008 and Windows Server 2003 SP2.
  • Enables conversion of Windows® client versions including Windows 7.
  • Installs integration services on the converted virtual machine if the guest operating system is Windows Server 2003 SP2.

For all the details and a download link please see the following:

http://www.microsoft.com/en-us/download/details.aspx?id=34591

J.C. Hornbeck| Knowledge Engineer | Management and Security Division

Get the latest System Center news onFacebookandTwitter:

clip_image001clip_image002

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

Help us get better - Join the VMM customer panel

$
0
0

The System Center engineering team is looking for Virtualization Management customers who can provide feedback on pain points, preferences, and usage behavior.

We are starting a customer panel for VMM and Hyper-V customers to help influence the future of the product.

What are my commitments as a panel member?

  • 1 hour meeting once a week for 4 weeks

  • Actively share your views constructively on the conference calls

  • Completing questionnaires or taking part in surveys

 What do I get out of it?

  • Ability to influence the future of VMM and System Center

  • Direct access to the System Center engineering team

  • Improve a product you love

The goal is to hear customer feedback frequently as development of features progress.

If you are interested, please fill out the information here: https://www.surveymonkey.com/s/8WPG56N

Thank you,

Satya Vel

 

Have a say on the future of System Center

$
0
0

The System Center leadership team is looking to hear from you on the challenges you face with your Management tools and where you would like to see us invest going forward.

We put together a short survey to gather your feedback and an option to join a discussion panel around this topic.

We are counting on your input, so please take a moment to provide your feedback in the survey.  We appreciate all the feedback you have given us in the past, and we hope you continue to do so.

https://www.surveymonkey.com/s/CM6H2XP

Thank you,

Satya Vel

Configuring Guarded Hosts with Microsoft Virtual Machine Manager 2016

$
0
0

~ John Patterson | PM for System Center & Services

Hi everyone, John Patterson here with some information on setting up guarded hosts using System Center Virtual Machine Manager (VMM). A guarded host is just a host that can run shielded VMs, and once your Host Guardian Service has been set up and configured, configuring hosts to run shielded VMs is pretty easy. All you need to do in VMM to set up a guarded host is configure the host you want to be guarded with two (sometimes three) properties:

  • Attestation Service URL – The URL of the attestation service (part of the HGS). The attestation service basically confirms that the host is authorized to run shielded VMs.
  • Key Protection Service URL – The URL of the key protection service (also part of the HGS). Once a host passes attestation, it retrieves the key required to decrypt VMs from this service.
  • Code Integrity Policy File Share Path (only required for TPM Attestation Mode) – When using TPM attestation mode (bare minimum requirement is that your host must have a TPM 2.0 chip in it), a code integrity policy is used to restrict the software that can run in kernel mode to ONLY what is specified in the code integrity file (a .p7b file). In order to get this file on the host, you must set the path to it.

So, while there is a LOT behind shielded VMs, guarded hosts and encrypted workloads, actually configuring a guarded host is easy (remember, at most you only need to set those three properties).

Now let’s do this in VMM 2016:

Step 1 – Configuring the Global HGS Settings

In the VMM console, navigate to Settings -> Host Guardian Service Settings:

clip_image002

Here you need to do two things:

  1. Tell VMM what attestation and key protection URLs that hosts in VMM will use. Note that all hosts in VMM must use the same ATT and KPS URLs.
  2. Add any CI policies to VMM. Really you don’t add the CI policy itself, but rather you add a friendly name and the location where the host themselves can fetch the CI policy from. Note that in the screen shot above, I’m pointing to a file share the hosts can access via their host account to get the CI policy from.

Now here is a potential gotcha: The Code Integrity Policy File Share Path entered in VMM is the EXACT same path set on the hosts. This means that ALL hosts using a particular CI policy need to have access to the file share path that is set in VMM.

clip_image004

Step 2 – Configure Your Guarded Host

Right-click Host -> Host Guardian Service and then check these three checkboxes:

clip_image006

  1. The first checkbox essentially sets the attestation and key protection URLs on the host. If you are not using TPM based attestation then this is the only box you need to check.
  2. The second check box sets the file path of the CI policy on the host, it doesn’t ACTUALLY put the CI policy on the host. The host fetches its CI policy on its own from the given location. In this example I’m using TPM based attestation so I specify the CI policy designated for my Dell hosts (if you didn’t guess, this happens to be a Dell server).
  3. Most of the time, applying a CI policy requires a restart. If you don’t want to restart the machine right away then don’t check the “Apply or update the policy immediately” checkbox. You can apply it later by right clicking the host and selecting “Update CI Policy“.

That’s It

That’s all it takes to configure hosts to run shielded VMs in VMM 2016. At this point, shielded VMs will be automatically placed on any guarded hosts under VMM’s management.

John Patterson, Program Manager
System Center & Services

Viewing all 45 articles
Browse latest View live




Latest Images