Want to learn how to build a cantenna?

Stop in at our meeting next Friday to find out!

So if your like most admin’s you and have a bunch of Support staff some times its just easier to give them access to hyper-v then to have them wait for the admin to complete a simple task (ex.make a snapshot). The only issue with this is the fact they can do things we don’t want… for instance turn a machine off reboot change settings like nics along w/ creating new machines. So i went looking and apparently there is a way to restrict this so this post goes to show how we can.

Assigning Rights to hyper-v
Open mmc.exe

Click file then add/remote snap-in

Select authorization manager and hit add and ok

Then right click on Open Authorization Store….

Select XML file then hit browse

Goto \\Server_name\c$\ProgramData\Microsoft\Windows\Hyper-V\ and select InitialStore.xml

Then hit ok

Role Assignments
Select the Role we want to assign in this case its Administrator

Right click and click assign User and Groups then select from Windows and Active Directory…

Enter username you want to assign rights to. And hit ok

That user will now have admin rights.

Creating New Role Definitions
(what rights does this group have?)
Expand intialstore.xml -> Hyper-v services ->Definitions ->Role Definitions

Right click Role definitions and click new role Definitions

Then enter a name and click add…

Select Operations tab

Then add what rights you want that role to have by checking the checkbox and hitting ok, ok.

Now that we have a new role definitions created now we need to create role assignments see role assignments Section.

Role Assignments
Right click create new role assignment

Select what role that’s been defined

And hit ok

Now we need to add user into this group see Role Assignments

Apparently Microsoft did not include WDS manager with there server 2012 RSAT (Remote Server Administration Tools) once again…
to enable remote wds control place the fallowing script in a batchfile and run batchfile.bat wdsservername

copy \\%1\c$\windows\system32\WdsMgmt.msc c:\windows\system32\WdsMgmt.msc
copy \\%1\c$\windows\system32\en-US\WdsMgmt.msc c:\windows\system32\en-US\WdsMgmt.msc
copy \\%1\c$\windows\system32\wdsmgmt.dll c:\windows\system32\wdsmgmt.dll
copy \\%1\c$\windows\system32\en-US\wdsmgmt.dll.mui c:\windows\system32\en-US\wdsmgmt.dll.mui
copy \\%1\c$\windows\system32\WdsImage.dll c:\windows\system32\WdsImage.dll
copy \\%1\c$\windows\system32\en-US\WdsImage.dll.mui c:\windows\system32\en-US\WdsImage.dll.mui
copy \\%1\c$\windows\system32\wdscsl.dll c:\windows\system32\wdscsl.dll
copy \\%1\c$\windows\system32\wdstptc.dll c:\windows\system32\wdstptc.dll
copy \\%1\c$\windows\system32\WdsTptMgmt.dll c:\windows\system32\WdsTptMgmt.dll
copy \\%1\c$\windows\system32\en-US\WdsTptMgmt.dll.mui c:\windows\system32\en-US\WdsTptMgmt.dll.mui
copy \\%1\c$\windows\system32\wdsmmc.dll c:\windows\system32\wdsmmc.dll
copy \\%1\c$\windows\system32\en-US\wdsmmc.dll.mui c:\windows\system32\en-US\wdsmmc.dll.mui
regsvr32 WdsMgmt.dll
regsvr32 WdsTptMgmt.dll
regsvr32 WdsMmc.dll

once you do its now possible to remotely manage wds servers in your network by typing WdsMgmt.msc in search.

Have a good one, We hope you got some cool tech to hack on 🙂

I was asked to post the files for the windows 7 explorer so i will do just that.

explorer7
dc414 pic