我在Hyper-V主机SERVER2上发出这个命令:
Clear; Get-VM | ForEach { Write-Host "Migrating: "$_.Name; Move-VMStorage ` -VM $_ ` -DestinationStoragePath "\\SERVER1\D$"; }
两台服务器都是域join的,非群集的。
这是我得到的结果:
Move-VMStorage:虚拟机“ADMIN”(4F452569-7DB9-4606-9371-A905267A7B0F)的存储迁移失败,错误为“常规访问被拒绝错误”(0x80070005)。 迁移没有成功。 无法将VHD文件“D:\ Virtual Hard Disks \ ADMIN.vhdx”的镜像操作启动为“\ SERVER1 \ D $ \ Virtual Hard Disks \ ADMIN.vhdx”:“常规访问被拒绝错误”('0x80070005')。 您无权执行该操作。 如果您确信自己有权执行此操作,请与您的pipe理员联系。
ACL正确configuration:
PS C:\Users\domain.admin> Get-Acl 'D:\Virtual Hard Disks' | FL Path : Microsoft.PowerShell.Core\FileSystem::D:\Virtual Hard Disks Owner : BUILTIN\Administrators Group : DOMAIN\Domain Users Access : CREATOR OWNER Allow 268435456 NT AUTHORITY\SYSTEM Allow FullControl BUILTIN\Administrators Allow FullControl BUILTIN\Users Allow CreateFiles, AppendData BUILTIN\Users Allow ReadAndExecute, Synchronize NT VIRTUAL MACHINE\Virtual Machines Allow CreateFiles, AppendData, Read, Synchronize DOMAIN\SERVER2$ Allow -2147483642 DOMAIN\SERVER2$ Allow CreateFiles, AppendData, Read, Synchronize Audit : Sddl : O:BAG:DUD:AI(A;OICIIO;GA;;;CO)(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;CI;DCLC;;;BU)(A;OICI;0x1200a9;;;BU)(A;OICI;0x 12008f;;;S-1-5-83-0)(A;CIIO;DCLCGR;;;S-1-5-21-369066176-630964511-2072824237-1119)(A;;0x12008f;;;S-1-5-21-3690 66176-630964511-2072824237-1119)
和:
C:\Users\domain.admin>net localgroup Administrators Alias name Administrators Comment Administrators have complete and unrestricted access to the compu ter/domain Members ------------------------------------------------------------------------------- Administrator DOMAIN\Domain Admins The command completed successfully. C:\Users\domain.admin>net group "Domain Admins" <==(on the PDC) Group name Domain Admins Comment Designated administrators of the domain Members ------------------------------------------------------------------------------- Administrator domain.admin The command completed successfully. C:\Users\domain.admin>whoami DOMAIN\domain.admin
我已经在这里讨论了委托Kerberos。 在两台机器上启用传入和传出迁移,在任何可用networking中的Kerberos上启用。 两个防火墙都closures了。
我已经联系了我的pipe理员,我也不知道什么是错的。
在哪里看下一个?
问题是我没有将源和目标机器添加到目标共享的权限:
# Create folder MD X:\VMS # Create file share New-SmbShare -Name VMS1 -Path X:\VMS -FullAccess Domain\HVAdmin, Domain\HV1$, Domain\HV2$, Domain\HVC$ # Set NTFS permissions from the file share permissions Set-SmbPathAcl VMS1
这是在这里logging:
https://technet.microsoft.com/en-us/library/jj134187(v=ws.11).aspx#BKMK_Step3
一旦我join他们,迁移通过。