HYPER-V Connectivity Issues

Hi Experts,

Scenario -

Host: HYPER-V R2 installed in a WORGROUP .
Guest1: Windows Server 2008 R2 x64 STD Edition (auto restart 30 seconds after host boots)
Guest2: Windows Server 2003 (auto restart 60 seconds after host boots)

This machine has been working fine for ages, but all of a sudden, over the weekend GUEST2 collapsed and I could no longer access it from HYPER-V Manager (Installed on my Windows 7 machine); it just dissapeared. I decided to reboot the HOST.

After the REBOOT, I can no longer even PING the HOST Machine, I can however Remote Desktop to it without a problem. I can also no longer REMOTE DESKTOP to Guest 1 or PING Guest 1. My HYPER-V Manager on my Windows 7 machine now says  - "The Virtual Machine Management Service is not available"

The only change I think I did, which was a couple of days ago, after which everything had been working was - Allowing Firewall to be remotely managed via another machine. For this I followed this article here - http://www.petri.co.il/remotely-managing-windows-2008-server-core-firewall.htm.
Now I can no longer access the firewall from my Windows 7 machine which is a bit wierd.

I still think it is a firewall issue, so would someone please help me diagnose the problem and help me through the resolution. I want everything returned to normal asap.
LVL 11
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

manav08Author Commented:
And yes I did use HYPERVREMOTE to configure firewall etc. initially.
Now when I type thhe same command on server I get the following error -


C:\HVREMOTE>cscript hvremote.wsf /add:Administrator
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.

Hyper-V Remote Management Configuration & Checkup Utility
John Howard, Hyper-V Team, Microsoft Corporation.
Version 0.7 7th August 2009

INFO: Computername is HYPERV
INFO: Computer is in workgroup WORKGROUP
INFO: Current user is HYPERV\Administrator
INFO: Assuming /mode:server as the role is installed
INFO: Build 7600.16385.amd64fre.win7_rtm.090713-1255
INFO: Detected Windows 7/Windows Server 2008 R2 OS
***** Failed to open authorization store
***** -2147024894
***** Giving up as could not open the authorization store

manav08Author Commented:

I have already tried hvremote tool and it was all working beofre but all of a sudden everything seems to be screwed. Any other suggestions??
Powerful Yet Easy-to-Use Network Monitoring

Identify excessive bandwidth utilization or unexpected application traffic with SolarWinds Bandwidth Analyzer Pack.

Did you follow the step in the article.. It actually details the steps that HVRemote does for you. maybe you can track which step is it that you are failing.

manav08Author Commented:
Shahid the article details the steps HVRemote already does for you.
The problem I am having is that I have already had the server running fine up until the weekend and all of a sudden the ports will be blocked, doesnt make sense.

Are you able to give some tips on how to check the logs on the firewall etc.. of the HYPER-V Server. Also the event logs..
Have you tried to remotely connecting to the event logs? the same for firewall?
manav08Author Commented:
Hi msmamji,

Thats what the problem is. None of that works now. When I open up mmc for firewall or eventvwr and try to cnnect from another server/machine it gives me an error.
Also I can no longer RDP or PING to the GUEST1 which obviously means that it is not running whereas it should automaticaally start when the server starts. I am very surprised as to what has happened over the weekend...
can you run the following command on the server and see if these rule exist.

netsh advfirewall firewall show rule name="Remote Event Log Management"
netsh advfirewall firewall show rule name="Windows Firewall Remote Management"

The command you have run to check if remote event log and firewall management are enabled on are

netsh advfirewall firewall show rule name="Remote Event Log Management (NP-In)"
netsh advfirewall firewall show rule name="Remote Event Log Management (RPC)"
netsh advfirewall firewall show rule name="Remote Event Log Management (RPC-EPMAP)"

Firewall Management
netsh advfirewall firewall show rule name="Windows Firewall Remote Management (RPC)"
netsh advfirewall firewall show rule name="Windows Firewall Remote Management (RPC-EPMAP)"

If the above rule are not enable then you have to enable them to manage eventlog and firewall remotely
Netsh advfirewall firewall set rule group="Remote Event Log Management" new enable=yes

Netsh advfirewall firewall set rule group="Windows Firewall Remote Management" new enable=yes

Also make sure WMI is enabled
Netsh advfirewall firewall set rule group="Windows Management Instrumentation (WMI)" new enable=yes

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
manav08Author Commented:
Thanks mate,

Looks like we have made some progress.
1. Firewall was already enabled but I was not doing the runas currently and hence couldn't see it.
2. WMI was already enabled
3. Event Viewer was disabled but having enabled it here is the error I am getting -

Here are the main SYSTEM Event Log Errors -

Event ID: 7023 - The Hyper-V Virtual Machine Management service terminated with the following error:
The system cannot find the file specified.

Event ID: 36870 - The description for Event ID ( 36870 ) in Source ( Schannel ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: server, 0x8009030d, 10001.

Event ID: 1004 - The IPMI device driver attempted to communicate with the IPMI BMC device during normal operation. However the communication failed due to a timeout. You can increase the timeouts associated with the IPMI device driver.

Event ID: 51 - An error was detected on device \Device\Harddisk3\DR4 during a paging operation.

Event ID: 58 - Changing the disk signature of disk 5 because it is equal to the disk signature of disk 3.


Here are the main Application Event Log Errors -

Event ID: 1000, Faulting application svchost.exe_nvspwmi, version 6.1.7600.16385, faulting module 4a5bc3c1, version nvspwmi.dll, fault address 0x6.1.7600.16385.

Event ID: 1000, Faulting application vmwp.exe, version 6.1.7600.16385, faulting module 4a5bc70e, version KERNELBASE.dll, fault address 0x6.1.7600.16385.


So what do you think the problem is. To me it looks like that the whole HYPER-V install has got corrupt. If I rebuild, I must know why it all happened in the first place as it is just a worry whether HYPER-V is stable or not. Your comments/suggestions please...
manav08Author Commented:
Doing some further research they say SYSTEM LOCALE should be set to English(US), this seems to be a bug with HYPER-V. I did as suggested and rebooted the server. but made no difference. Same error IDs as above.
I can reformat the server, but I do not want it to happen again, so if some1 could suggest why this happened that will be goo denough for me.
manav08Author Commented:
Update: I have reinstalled HYPER-V now but would like to know why this whole problem above happened. Anyone got any clues??
Some of the errors above are related to physical disks.

After reinstalling, do you have the any errors of the same type in the event logs?
Do you have any removable disks (USB etc) attached to the server?
manav08Author Commented:
Hi msmamji,

No event log error after reloading but I do have another issue.
I am just using a LOCAL ADMINISTRATOR account for HYPER-V R2 server which is just in a workgroup.
On my windows 7 client PC, I typed the following command to add credentials of my HYPER-V to my Windows-7 machine, but when I open up FIREALL MMC I get an error.

cmdkey /add:HYPER-V /user:HYPER-V\Administrator /pass

manav08Author Commented:
Also my Windows 7 machine has LOCAL ADMIN account enabled with the same password..
manav08Author Commented:
Just for your info, I have also tried another LOCAL ADMIN account as well..
No problem connecting to HYPER-V Manager though....
manav08Author Commented:
ohh god!! This is driving me nuts. Now, I have lost access to HYPER-V Manager as well. Please help!!
manav08Author Commented:
ok. Got the HYPER-V Manager back. What about the Firewall snap-in now.
manav08Author Commented:
what a day I am having. Firewall Snap-in decided to work now.
Had to use a RUNAS command to open it with Administrator credentials. What a pain!!!

Anyways - The only question that is pending now is http://www.experts-exchange.com/Microsoft/Applications/Virtual_Server/Hyper-V/Q_25720501.html#a29974887
Syed Mutahir AliTechnology ConsultantCommented:
When you reinstalled, did you had the locale as "EN US" ?
DId you changed it ?

Can you re-install again and leave it like that for a while to see if you face these issues.

Now, can you atleast try to make your windows 7 and hyper-v r2 server member of the same workgroup to eliminate any other issues ?

What version of Hyper-V Server is this ?

I haven't used Hyper-V Server as much as I have with the Hyper-V Role, just because it is almost the same performance with GUI and much easier to manage.



Try to re-download the RSAT for Windows 7 :

Syed Mutahir AliTechnology ConsultantCommented:
Event ID 7023 indicates the issue of Locale, but that was resolved in the final releases (as per the forum post), I haven't faced that issue as I always update the server etc and install with recently downloaded ISOs.

Event ID 1004 : http://social.technet.microsoft.com/Forums/en/winservergen/thread/54c0c10c-6984-4401-a693-ee2014b36656

Syed Mutahir AliTechnology ConsultantCommented:
You may already have read through the following :


But it might be helpful in re-tracing your steps and to make sure.
Syed Mutahir AliTechnology ConsultantCommented:
I have read through almost the whole of the above link, I would suggest is to pay close attention during the comments of that page as most of the people have seen this errors for a number of reasons :

Password issues
Client joined to domain and server into Workgroup (both should be in a workgroup ideally)
Dcom problems
hvremote /mmc:enable and hvremote /anondcom:grant on the client machine?

I will look into this further  - but can't promise as not feeling very well, I am sure the thread above will guide us towards the cause.

manav08Author Commented:

This is HYPER V R2 which is the core version. As I said before, I have already set System Locale to en US now. Don't know if this was the issue though but everything collapsed. Please read post above for more details.

I did have a look at http://social.technet.microsoft.com/Forums/en/winservergen/thread/54c0c10c-6984-4401-a693-ee2014b36656 earlier but the fix didn't work for me.

At this point in time, no connection problem b/w HYPER-V Server and HYPER-V Manager on Windows 7 client. Windows 7 client is joined to a domain and HYPER-V Server on a workgroup.

It is 1AM here and I am too tired will have a look at http://blogs.technet.com/jhoward/archive/2008/11/14/configure-hyper-v-remote-management-in-seconds.aspx again as you suggest. Everything was working perfectly OK for me, for a couple of days and then it all collapsed with these errors in EVENT VIEWER.
Syed Mutahir AliTechnology ConsultantCommented:
Hi Manav08,

I will be able to reproduce the scenario probably next week, as I would have a test hyper-v r2 core box and a win7 machine.

Now, it is not recommended that the Windows7 machine be on a domain, as per the thread of John Howard.

I will look into it as well, have a good rest and good night :-)

Glad that you have it back.
manav08Author Commented:
Hi Mutahir,

The pending issue now is not related to problems between HYPER-V Manager and Windows 7 machine. I have already resolved that part.
The problem that I had earlier was that the VIRTUAL NETWORK adapter literally collapsed bringing all the Virtual machines down and a heaps of errors in the event logs as stated in my above post. I couldn't ping the machines from the HOST Machine itself, they were just completely down, At this stage I am looking for answers as to why this happened in the first place when the server was running without issues for 2 days and yes it was fully updated..
Syed Mutahir AliTechnology ConsultantCommented:
Monitor your server again, if this happens again, the re-seat your cards as well, I recently had a box which will loose all connections for a specific amount of time and will hang, i had to re-seat the raid card (brand new dell box).

"The interface became degraded between the blade and the  enclosure.  Simply shutting down, reseating the blade and restarting  reestablished the proper connection.  Everything is good."

manav08Author Commented:
Hmm. Since none of the errors indicated anything wrong with the hardware on HOST server it is a bit hard to believe it will be the RAID CARD.
I also checked DELL OPEN MANAGER hardware logs and there was no error whatsoerver...
manav08Author Commented:
I should really get to bed now :)
Syed Mutahir AliTechnology ConsultantCommented:
I didn't mentioned the raid card for your server, rather to look for any cards and re-seat them ; as the person in the technet post have mentioned, that IPMI event is generated because of that.
manav08Author Commented:
To whooever is reading the post,

The issue never happened again. I am assuming that it was related to HYPER-V being installed in a language other than US english as some people say, however there is no way to be a 100% sure. Remember to do your backups regularly.

Experts -

I am awarding points for you sincere efforts. Thanks.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.