question

AnthonyTropiano-0634 avatar image
0 Votes"
AnthonyTropiano-0634 asked AlexBykovskyi commented

Hyper-V cannot create VMs on a NAS "Failed to create external configuration store General Access is Denied Error (0x80070005)"

Hello,
I am running into an issue which I cannot seem to solve and I'd need some help. I don't know if this question has been answered in the past but here is my scenario.
I have 2 servers (Server A and Server B)
Both servers have Hyper-V manager installed on them.
I have a QNAP that I want to use as my shared storage. I have shared the drive and am able to map the drive from the QNAP with no issues. My QNAP is joined to my domain so I am mapping it with my domain credentials.

When I try to create a virtual machine from either server to that mapped drive I keep getting General Access is Denied Error. I have no idea what I'm doing wrong, I am looking in the permissions of the QNAP and everything seems to be OK. If I look at the share permissions on the shared drive I can see my domain user with full access.

Can someone please help me shed some light on why this isn't working.

My goal is to have my QNAP acting as the main place to keep all my VMs and spread my VM use across my 2 servers. Also, if in the event one server dies I want to be able to just repoint my VMs to the other server.

This should be pretty straight forward but I can't understand this permission issue.

Thanks!

windows-server-hyper-v
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AnthonyTropiano-0634 avatar image
0 Votes"
AnthonyTropiano-0634 answered AlexBykovskyi commented

An edit: I scrapped using the option of using the share as a mapped drive via Microsoft File Service.
I just configured it as a trusty iSCSI and everything worked pretty much instantly.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hey,

You should not forget to configure Failover Cluster to have simultaneous access to shared iSCSI LUN from 2 Hyper-V hosts. iSCSI LUN must be configured as Cluster Shared Volume. The following guide should help:
https://www.starwindsoftware.com/resource-library/starwind-virtual-san-for-hyper-v-2-node-hyperconverged-scenario-with-windows-server-2016/

Cheers,

Alex Bykovskyi

StarWind Software

Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose

0 Votes 0 ·
AnthonyTropiano-0634 avatar image
0 Votes"
AnthonyTropiano-0634 answered

Hello,
Sorry it took so long to answer this.
I checked the permissions on the server for NT Virtual Machines and they are there in gpedit
I also checked the permissions settings on the share folder and both the user i am logged in with as well as the computers have full access to that share.
In Eric Fang's post I cannot find this group called Virtual Machines. Even if I click on the advanced tab and select Find Now when I want to search for this group it is no where to be found
I have no idea what this means

I for sure did not create constrained delegations (I've never done this)
i still have the issue.
for paul kratz post in not sure i follow what he did to fix it.
as far as i can tell he recreated the share rebooted the server and all was fixed but this does not work for me

im not sure where the permission error is

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ElevenYu-MSFT avatar image
0 Votes"
ElevenYu-MSFT answered

Hi,

Thank you for posting the question to Q&A forum.

Please kindly try below methods to see if there is any help.

  1. Use local administrator or domain administrator to log in the server and create the VM.

  2. On both servers, edit the policy to include NT Virtual Machine\Virtual Machines to "Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Log on as Service"

  3. Grant "Everyone“ with full access to the share permissions on the shared drive

  4. Refer to the workaround in this article to see if it works for you.

  5. Check this thread to see if there is any useful information, especially the answer from pkratz.



Thanks,


If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.