Share image file instead of copying it issue

When you want to use ISO file , you will notice there is an option "Share Image file instead of copying it". This option allow you to share the iso files and save space instead of copying the whole iso to the Hyper V host.

However this setting will not work if You did not perform additional configuration .
Follow the below step by step instruction on how to enable this feature:-

1. Make sure the VMM library shares folder has set to following share and NTFS permission.

HyperV1 - Read (Hyper V host)
HyperV2 - Read (Hyper V host)
HyperV3 - Read (Hyper V host)
scvmm service account - Read (VMM service account)

2. Go to Active Directory User and Computer snap in, locate the computer name for HyperV1 and go to Properties.

3. Click on delegation tab and select the option "Trust this computer for delegation to specified services only"
and "Use any authentication protocol"

Click Add to add the service type.

4. Click on User or computer button, key in your VMM library server computer name and select the "cifs" services.

5. The result will display the cifs-library server.

Repeat step 2-5 for the rest of the Hyper V hosts.

Once you have enabled the above setting, you can proceed to tick and use "Share Image file instead of copying it".

Warning 10690 - Hyper V does not support boot and system volume on a disk attached to SCSI adapter

I'm receiving this error message when performing V2V from virtual server to Hyper V. As you may know, Hyper V does not support booting from SCSI adapter. To solve this issue, just open the VM setting and  change VHD to boot to IDE adapter.

Backup Hyper V VM using DPM 2010 Beta

Let look into how to backup virtual image using DPM 2010 Beta.

1. You need to start by creating a protection group. Click on Protection and then select Create Protection Group in the Action pane.

2.A Welcome to the New protection group wizard appear.

3. We are going to backup Hyper V in the server host.Select "Server" option as your protection group type.

4. On the Group Member, Expnd Hyper V host and select Hyper V. Tick all the VM which listed as "Backup using child partition snapshot "

5.On the Data Protection Method, select Disk. We are going to store the backup using storage pool which you have defined earlier in previous article.

6. Specify the number of days for the retention range and select Modify button to change the backup schedule.

7. Review the disk allocation for the DPM storage Pool

8. On the Replica Creation method, select Automatically over the network and select Now. You must create a replica of the VM to store in the DPM before start the backup.

9.On the consistencey check option, select Automatically perform consistency check if the replica is inconsistent.

10. Review the summary before create a protection group.

11. Once you click Create Group, DPM will start to create a replica of the VM and backup entire VMwill start according to the schedule.

In next article, i'm going to look into restore a VM using DPM 2010 beta. Stay tuned.

Configure preliminary configuration on DPM 2010 Beta

Let look into how to configure preliminary configuration before start protecting your data on DPM 2010.

1. Add Disk to Storage Pool. DPM is a disk based backup solution. Make sure, you have additional disk storage allocate for DPM.

Open the DPM 2010 Administrator Console, Click on Management, click Disks tab and Select Add on the Action Pane.

-Select available disk to storage pool

2. Then Install protection agents on the computers you want to protect.

Go to Agent tab and select install on action pane.

You will notice that on DPM 2010, you need to select agent deployment method such as

a) Install agent

-applicable when the windows firewall is turn off/ has put exception

b) Attach agent

-applicable when the windows firewall is turn on and you need to install the agent manually.

For agent manual installation, please run this command:-

a) net use z: file://dpm01/c$
-map c drive of server:- dpm01 to Z drive

b) Go to this command

Format: -

DPMAgentInstaller.x64.exe -DPM server FQDN-

If you forget to specify the DPM name, pls run this command

:\Program Files\Microsoft Data Protection Manager\bin\ SetDpmServer.exe – dpmServerName .

After perform the installation, refresh the console and you agent will reported the status OK.

3. Once complete, you can start to configure protection group.

Stay tuned  for next upcoming article on configure protection group for Hyper V.

Enable Reporting for VMM

Let proceed to enable the reporting features for VMM. I'm assumed you've successfully integrate SCOM with VMM.

In VMM 2008 R2, you do not need to import Virtual Machine Manager 2008 R2 MP, as the system will automatically install the MP after the installation.

Proceed to follow the below step by step instruction:-

1. On the Operation Manager console, go to Administration pane, under security , click User roles
2. Double Click Operation Manager Report Operator, click Add on the user role member and enter VMM administrator. This allow administrator to view and open report in VMM.

3. Go to VMM Console, In the Administration pane, click System Center
4. In the detail pane, double click Operation Manager Reporting URL
5. Select Enable reporting and enter http://scom01/reportserver

6. Once you have click OK, In the left pane, you will see an Additional pane called "Reporting" is visible.

7. Here is a sample result when you open Host Utilization Report

Report can export to the following formats:-

Sample report:- i have uploaded to http://rapidshare.com/files/295913416/SCVMM2008R2-Host_Utilization.pdf

Look cool right !

Enable Performance and Resource Optimization (PRO)

PRO is a features that support workload and application aware resource optimization within a virtualized environment. Based on performance and health data provided by Management Pack in SCOM, PRO can automatically or manually implement PRO tips, provide recommendation for minimizing downtime and accelerating time to resolution.

I'm assumed you have integrate operation manager with vmm. If not, pls refer to http://www.ms4u.info/2009/10/integrate-operation-manager-with-vmm.html

Once integrating complete, you can enable PRO feature either from

a) System Wide monitor
Go to Administration view, enter PRO settings in the general. Tick enable PRO tips and select Warning and Critical.
If you would like the PRO to perform automatic action, tick "Automatic implement PRO tips"

b) Individual host cluster
By default, system wide monitor will take effect if you did not enable this option. The setting is inherit from parent Host Group.
In the host cluster, enter option on the PRO tab

c) Individual host group
By default, system wide monitor will take effect if you did not enable this option. The setting is inherit from parent Host Group.

In the host group, enter option on the PRO tab.

Besides that, you may exclude PRO action from VM level. For example, if VMM is located in the VM, you may want to exclude it. Just select the VM, right click to select Properties and select Setting tab. Tick Exclude ..."

To view the PRO tips, click on PRO tips button on the VMM toolbar. If you see the PRO tips,you can select Implement / Dismiss the PRO tips.

Installing DPM 2010 Beta

Last month, Microsoft has released DPM 2010 Beta as the Microsoft backup and recovery solution for Windows customers. For those who're interested, please download from http://go.microsoft.com/?linkid=9686964 .

For more detail about DPM 2010, please go to http://www.microsoft.com/systemcenter/dataprotectionmanager/en/us/2010beta-overview.aspx
 
I'm going to use DPM 2010 for Hyper V disaster recovery solution in my next upcoming article.
For existing DPM 2007 customer, in order to support backup and recovery for Hyper V, make sure that you've upgraded to SP1.

Let start by looking into DPM 2010 installation.

Pre-requisite DPM 2010
a) 64x platform Windows Server 2008 /2008 R2
b) cannot install in Management server for SCOM
c) SQL Server 2008 Std/Ent Edition
d) PowerShell 2.0 Community Technology Preview 3 (CTP3)- (http://go.microsoft.com/fwlink/?LinkId=150631)
e) .Net Framework 3.5 SP1
f) Windows Single Instance Store (SIS)
g) Join to domain

Installation:-
1. Run setup.exe and on the DPM screen, click Install Data Protection Manager

2. Accept the EULA license

3. Welcome screen appear.Click next to start the wizard.

4. The Wizard will run the pre-requisite check. Make sure you've install all the pre-requisite software as listed above.

5. Enter the product registration.

6. On the Installation setting, specify the DPM installation path and Use an existing instance of SQL Server 2008 ( as i have installed SQL Server 2008)

7. Enter the SQL Server instance name

8. On the Security Settings page, specify and confirm a strong password for the restricted MICROSOFT$DPM$Acct and DPMR$ local user accounts, and then click Next.

For security purposes, DPM runs SQL Server and the SQL Server Agent service under the MICROSOFT$DPM$Acct account, which DPM Setup creates during the DPM installation. To securely generate reports, DPM creates the DPMR$ account.

9. On Microsoft Update Opt in, specify Use Windows Update to get the update.

10. Click next on Customer Experience Improvement program. You can't change this option as the option is dimmed.

11. Review the summary of the settings.

12. The installation of DPM 2010 will start. Wait until the screen below appear.

The installation is complete. Please restart the DPM server before configure additional setting.

Stay Tuned for DPM 2010 configuration before start to protect Hyper V server.

Integrate Operation Manager with VMM 2008 R2

Well, i can say that this is the toughest configuration that i have encountered while R & D on SCVMM which took me several days. Here is the result of my findings:-

My lab environment is using:-
a) SCVMM 2008 R2 with SQL Server 2008 SP1 (computer name: scvmm01)
b) SCOM 2007 R2 with SQL Server 2008 SP1 (computer name:scom01) . The SQL server is running SQL_Latin1_General_CP1_CS_AS collation.

To integrate Operation Manager with VMM 2008 R2, follow the step by step instruction:-

a) Install Operation Manager 2007 R2 or 2007 with SP1
b) Register SPNs for the root management server manually. Go to domain controller command prompt and enter the following command

SetSPN.exe –A MSOMSdkSvc/RootManagementServerFQDN domain\SDKServiceAccount


SetSPN.exe –A MSOMSdkSvc/RootManagementServerNetBIOS domain\SDKServiceAccount

example for my setup:-

setspn.exe -A MSOMSdkSvc/scom01.ms4u.info ms4u\OM-SDK
setspn.exe -A MSOMSdkSvc/scom01 ms4u\OM-SDK

c) View the registered SPN

setspn.exe -L scom01

d) Grant SDK service account permission to read and write the SPNs

1. On the domain controller, open adsiedit.msc. Navigate to the service account for the SDK service.
2. Right-click the service account (System Center Data Access service), and click Properties.
3. On the Security tab, click Advanced, click Add, type SELF, and then click OK.
4.On the Properties tab, in the Apply Onto list, select This object only.
5.In the properties list, scroll to Read servicePrincipleName and Write servicePrincipleName, and select Allow for each of them.

e) Restart the domain controller and Operation Manager server.

f) Install Virtual Machine Manager server with using domain user account as services. (i have created a user account named "scvmmservices". Make sure you assign scvmmservices account as the local administrator group in the VMM server.

g) On the Operation Manager server, import the following Management Pack

Microsoft SQL Server Management Pack:
-Microsoft.SQLServer.Library version 6.0.5000.0 or later (Required)
-Microsoft.SQLServer.2005.Monitoring (Recommended)
-Microsoft.SQLServer.2005.Discovery (Recommended)
-Microsoft.SQLServer.2008.Monitoring (Recommended)
-Microsoft.SQLServer.2008.Discovery (Recommended)

Microsoft Windows Server Internet Information Services (IIS) 2000/2003/2008 Management Pack:
-Microsoft.Windows.InternetInformationServices.CommonLibrary version 6.0.5000.0 or later
-Microsoft.Windows.InternetInformationServices.2003 - 6.0.5000.0 or later
-Microsoft.Windows.InternetInformationServices.2008 version 6.0.6539.0 or later

h) Execute Configure Operation Manager option from VMM installation media. The Operations Manager configuration involves the following tasks:

-Import the VMM 2008 R2 Management Pack into Operations Manager.
-Add the VMM service account to the Administrator role in Operations Manager.
-Restart the Operations Manager SDK service on the root management server. (The service name in Operations Manager 2007 SP1 is OpsMgr SDK service; in Operations Manager 2007 R2, the service name is System Center Data Access service.)
-Install a VMM Administrator Console and Windows PowerShell – Virtual Machine Manager command shell on the root management server.

For the account assignment:-
1. On the Operation manager server
- Local administrator group consists of

• Default Action Account
• SDK Account
• VMM Service Account

2. On the domain level
- Operation Manager Admin Group (OM-Admin) consists of

• VMM Service Account

- Domain Admin Group consists of

• Default Action Account
• SDK Account
• VMM Service Account

i) Enable the running of PRO scripts on VMM server and Operation manager server

Follow the following steps:-
1.To open Windows PowerShell – VMM, on the Start menu, click All Programs, click Microsoft System Center, click Virtual Machine Manager 2008 R2, and then click Windows PowerShell – Virtual Machine Manager.

2.At the prompt, type A to select [A]lways to always trust remote signed scripts from this snap-in. If you don’t see a prompt, the policy already allows PRO to run scripts.

j) On the VMM server, Install Operation Manager console

k) Add the default action accounts on Operations Manager management servers. In the Administration View of the VMM console, Click User roles, right click Administrator, select Properties and add Default Action Account on the Members tab.

l) Specify the Operations Manager server in VMM.
Follow the following steps:-

1. On the Administration View, select System Center, right click Operation Manager Server and select Modify.
2. Enter the Operation Manager server name. eg: scom01.ms4u.info (enter Netbios or FQDN)

m) Finally, you must install operation manager agent on VMM managed hosts and virtual machine.

n) To verify a successful Operation manager integration, click on Diagram button in the VMM console.

The diagram view should begin populating immediately.

On next article, I will look into how to enable PRO in VMM and configure reporting in VMM.

Error CredSSP is not enabled on Windows XP SP3

When i'm running a several test on accessing VM Remote Desktop in the Self Service Portal, i 've encountered this error message

This error only appear on workstation running Windows XP with SP3. (Earlier version of SP did not cause this problem). You just need to turn on CredSSP at the registry.

Follow this step by step instruction:-
1. Click Start, click Run, type regedit, and then press ENTER.
2. In the navigation pane, locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

3. In the details pane, right-click Security Packages, and then click Modify.
4. In the Value data box, type tspkg. Leave any data that is specific to other SSPs, and then click OK.
5. In the navigation pane, locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders

6. In the details pane, right-click SecurityProviders, and then click Modify.
7. In the Value data box, type credssp.dll. Leave any data that is specific to other SSPs, and then click OK.
8. Exit Registry Editor.
9. Restart the computer.
 
Lastly, if you encounter some error message "cannot resolve -VM computer name-", make sure that DNS and WINS is properly register. That should do the trick and solve your problem.

Configure SCVMM Self Service Portal

Hi, i'm assumed you have read my previous article on installing SCVMM Self Service Portal:-
http://www.ms4u.info/2009/10/configure-nlb-for-vmm-self-service.html and have install SCVMM Self Service Portal.

Let continue on additional configuration before you can start to use the VMM Self Service Portal.
In next configuration, You need to:-
a) Create Group host that you want to dedicated to Self Service Portal
b) Create a self service roles
c) Assign an owner of the VM

Follow these step by step instruction:-

a) Create Group host that you want to dedicated to Self Service Portal
Please refer to http://www.ms4u.info/2009/10/host-group-in-scvmm.html

b) Create a self service roles

SCVMM Self-Service Portal is designed for users to access virtual machine. To access the Self-Service Portal a self-service user role must be created and users added as members of that role. By default, only administrator roles is created.

To create the Self-Service User Role, follow these step-by-step instructions

1.Go to Administration View button and select User roles. On the Action Pane, click on new user role.

2. On the General page, enter the user role name "Self Service Users Role" and select a user role profile 'self Service User".

3. On the add members, you can click Add button and add either user name or group. If you would like to assign more user to the VM, you should use group account.

4. On the select scope, select the host group that you would like the Self Service user to access.

5. On the Grant permission, assign the right that you would like to give to the users.

6. On the Virtual Machine creation setting, tick  "Allow user to create new virtual machine" and click Add to select the template the user can use to create a VM. You can specify the quota that limit the user on VM creation.

7. On the Library Share, tick "Allow users to store virtual machine in a library" and select the Library server available. This option allow the user to use VMM Library Server.

8. Review the summary before click Create button.

c) Assign an owner of the VM

After complete the above steps, you need to assign an owner to the VM. Self Service User can access their own VM. You can only assign 1 owner per VM.So if you've multiple user access to the VM, i recommend that you use group account.

Go to the Properties of the VM and enter the owner account.

d) Test Self Service Portal

1. Open browser and type http://scvmm01.ms4u.info:8081/. Enter a valid user name and password.

2. You will see your own VM in the Self Service Portal

That's concluded SCVMM Self Service Portal configuration.