Accounts for managing hosts in SCVMM 2012

I just learnt (the hard way) the correct way to add Hyper-V hosts to SCVMM.

You…

  1. should not use the service account used to run SCVMM admin service.
  2. should not use your own domain admin or admin level credentials.

Instead you should…

  1. Create a VMM host management account in AD.
  2. Add that AD account to the local admin group on all your Hyper-V hosts.
  3. Add that AD account to your VMM as a “Run As Account”.
  4. Then while adding a new host to VMM, specify that run as account as the account to be used to add that hyper- host.

Until I did it this way, I was having trouble in VMM. The VMM would lose connectivity to some of the Hyper-V hosts. I was getting this error in VMM:

Error (20552)
VMM does not have appropriate permissions to access the resource  on the hyperv4p.xxx.xxx server.
Recommended Action
Ensure that Virtual Machine Manager has the appropriate rights to perform this action.

Also, verify that CredSSP authentication is currently enabled on the service configuration of the target computer inp2420hyperv4p.nps.doi.net. To enable the CredSSP on the service configuration of the target computer, run the following command from an elevated command line: winrm set winrm/config/service/auth @{CredSSP=”true”}

Good luck!

PS: You may want to read my other post related to this error:

Error 20552 in VMM after restoring database

Be Sociable, Share!

5 thoughts on “Accounts for managing hosts in SCVMM 2012

  1. I found it helpful to add the computer account of the VMM server to the administrator group of the Hyper-V host when getting the error 20552.

    • You are right…and I have also configured that. It is quite a painful process if one does not have domain admin rights…like me here. Lot of approvals needed 🙁

      However, another Hyper-V team told me that you do not need delegation IF you are using SCVMM’s library feature. You can put ISOs in the library and mount them to your VMs from there. I tested it, that works too.

  2. Thanks @Andy regarding adding the computer account. That worked like a charm.
    I find the DEVS for SCVMM create unintuitive practices when it comes to updating, deploying, functionality.

Leave a Reply

Your email address will not be published. Required fields are marked *