I am trying to do my first live migration with Windows server 2012 hyper-v 3.0. I have two servers joined into a domain.local domain and both are hypervisors with constrained delegation setup. Each server has the CIFS and Microsoft virtual service delegated with Kerberos. Both hypervisors have Kerberos only setup for the live migration.
Replica works great, but when I try to do a live migration (not a VM that is being replicated either) I get this when trying to select a destination computer, even though I have all firewalls turned off (the servers and the domain are private no internet access only):
An error occurred while attempting to contact the Virtual Machine Management service
on destination computer "blah". Verify that the service is running and that you are
authorized to connect to the destination computer.
You do not have the required permission to complete this task. Contact the
administrator of the authorization policy for the computer "blah".
Anyone have an idea? I'm fairly new to AD-DS but the domain controller I believe was seutp with the correct constrained delegation.
Could it be some sort of super user I need to setup or login as a particular user into the hypervisor? I feel like I am just missing something rather simple here but have spent a good deal of time looking online and haven't quite found anything that relevant to my problem.
Best Answer
You didn't mention which services are delegated to. You should have the following on each Hyper-V host:
Have you tried (as a test) allowing all services to be delegated?