question

FrederikWhliche-9893 avatar image
0 Votes"
FrederikWhliche-9893 asked LeonLaude commented

Hyper-V user access permissions



so i got a bit of a simple yet frustrating question i cannot seem to find the correct answer to.

Lets say i have a server and domain with users on it, and i would like the non admin users to gain access to and use hyper-v on various computers, since normally only admin accounts can use hyper-v.

Problem is, i would like to have a GPO or some other setting that allows me to add this feature directly to the domain or server, such that i do not have to go to each individual computer and tell it that each individual non admin user on the domain is allowed to use hyper-v.

but from all the info i have found it seems i can only reach info telling me how to add users on each pc, or to add hyper-v to a server system and how to remove access that singular system from each pc.

Is it at all possible to add policies or anything like that to allow these non admin accounts to use hyper-v on different machines without adding it on each new pc everytime ?

windows-group-policymsc-virtual-machine-manager
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LeonLaude avatar image
0 Votes"
LeonLaude answered

Hi @FrederikWhliche-9893,

Unfortunately to manage Hyper-V you will require to be an administrator of that computer running Hyper-V.
There is no Role-based access control (RBAC) for Hyper-V, unless you install System Center Virtual Machine Manager (SCVMM) or similar tools.


If the reply was helpful please don't forget to upvote and/or accept as answer, thank you!


Best regards,
Leon

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered LeonLaude commented

Hello Frederik,

Yes, this is possible and the steps are documented in this article: https://docs.microsoft.com/en-gb/archive/blogs/virtual_pc_guy/allowing-non-administrators-to-control-hyper-v

Other option is surely by GPO but never tried before:

In theory from Computer Configuration –> Preferences –> Control Panel Settings –> Local Users and Groups; Add a new rule (New -> Local Group); You can use the Hyper-V Administrators Group to add members there.

Hope this resolves your query,
Best regards,

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

This blog post is from 2008 and the Authorization Manager does no longer exist since many years.

1 Vote 1 ·