Hello All

We have a server 2008 R2 HyperV server and during the last few months it started to reboot randomly.

Initially we thought its related to the issue fixed by the following hotfix so we applied it but even with the hotfix it still keeps rebooting.

http://support.microsoft.com/kb/2732595

Unlike what's mentioned in the hotfix , the faulting module is not "ntdll.dll" but "msvcrt.dll".Also came up with the following indication the reboots could be related to KB2871997 but that update is not installed on this system.                                                

Following are the events from system log.

Log Name:      System
Source:        LsaSrv
Date:          2/9/2015 11:58:12 PM
Event ID:      5000
Task Category: None
Level:         Error
Keywords:     
User:          SYSTEM
Computer:      HV2008-Host
Description:
The security package Kerberos generated an exception. The exception information is the data.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="LsaSrv" Guid="{199FE037-2B82-40A9-82AC-E1D46C792B99}" />
    <EventID>5000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-10T04:58:12.415529200Z" />
    <EventRecordID>8091130</EventRecordID>
    <Correlation />
    <Execution ProcessID="736" ThreadID="5888" />
    <Channel>System</Channel>
    <Computer>HV2008-Host</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="Package">Kerberos</Data>
    <Binary>050000C00000000000000000000000001111F6FEFE070000020000000000000000000000000000008EEB1802000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

Log Name:      System
Source:        USER32
Date:          2/9/2015 11:58:24 PM
Event ID:      1074
Task Category: None
Level:         Information
Keywords:      Classic
User:          SYSTEM
Computer:      HV2008-Host
Description:
The process wininit.exe has initiated the restart of computer HV2008-HOST on behalf of user  for the following reason: No title for this reason could be found
 Reason Code: 0x50006
 Shutdown Type: restart
 Comment: The system process 'C:\Windows\system32\lsass.exe' terminated unexpectedly with status code 255.  The system will now shut down and restart.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="USER32" />
    <EventID Qualifiers="32768">1074</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-10T04:58:24.000000000Z" />
    <EventRecordID>8091132</EventRecordID>
    <Channel>System</Channel>
    <Computer>HV2008-Host</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>wininit.exe</Data>
    <Data>HV2008-HOST</Data>
    <Data>No title for this reason could be found</Data>
    <Data>0x50006</Data>
    <Data>restart</Data>
    <Data>The system process 'C:\Windows\system32\lsass.exe' terminated unexpectedly with status code 255.  The system will now shut down and restart.</Data>
    <Data>
    </Data>
    <Binary>06000500000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

Following are the events from Application logs.

Log Name:      Application
Source:        Application Error
Date:          2/9/2015 11:58:14 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      HV2008-Host
Description:
Faulting application name: lsass.exe, version: 6.1.7601.22653, time stamp: 0x534893ed
Faulting module name: msvcrt.dll, version: 7.0.7601.17744, time stamp: 0x4eeb033f
Exception code: 0xc0000005
Fault offset: 0x0000000000001111
Faulting process id: 0x2e0
Faulting application start time: 0x01d03c91dbe5854f
Faulting application path: C:\Windows\system32\lsass.exe
Faulting module path: C:\Windows\system32\msvcrt.dll
Report Id: 6af0ff3d-b0e1-11e4-83ca-0026b9340d61
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-10T04:58:14.000000000Z" />
    <EventRecordID>267648</EventRecordID>
    <Channel>Application</Channel>
    <Computer>HV2008-Host</Computer>
    <Security />
  </System>
  <EventData>
    <Data>lsass.exe</Data>
    <Data>6.1.7601.22653</Data>
    <Data>534893ed</Data>
    <Data>msvcrt.dll</Data>
    <Data>7.0.7601.17744</Data>
    <Data>4eeb033f</Data>
    <Data>c0000005</Data>
    <Data>0000000000001111</Data>
    <Data>2e0</Data>
    <Data>01d03c91dbe5854f</Data>
    <Data>C:\Windows\system32\lsass.exe</Data>
    <Data>C:\Windows\system32\msvcrt.dll</Data>
    <Data>6af0ff3d-b0e1-11e4-83ca-0026b9340d61</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          2/9/2015 11:58:23 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      HV2008-Host
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: lsass.exe
P2: 6.1.7601.22653
P3: 534893ed
P4: msvcrt.dll
P5: 7.0.7601.17744
P6: 4eeb033f
P7: c0000005
P8: 0000000000001111
P9:
P10:

Attached files:
C:\Windows\Temp\WER5001.tmp.appcompat.txt
C:\Windows\Temp\WER535C.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER53DA.tmp.hdmp
C:\Windows\Temp\WER6690.tmp.mdmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_lsass.exe_3c1aa5eeba75bf26fcebc4f54e714efe7b5162a2_cab_20a56871

Analysis symbol:
Rechecking for solution: 0
Report Id: 6af0ff3d-b0e1-11e4-83ca-0026b9340d61
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-10T04:58:23.000000000Z" />
    <EventRecordID>267650</EventRecordID>
    <Channel>Application</Channel>
    <Computer>HV2008-Host</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>lsass.exe</Data>
    <Data>6.1.7601.22653</Data>
    <Data>534893ed</Data>
    <Data>msvcrt.dll</Data>
    <Data>7.0.7601.17744</Data>
    <Data>4eeb033f</Data>
    <Data>c0000005</Data>
    <Data>0000000000001111</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
C:\Windows\Temp\WER5001.tmp.appcompat.txt
C:\Windows\Temp\WER535C.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER53DA.tmp.hdmp
C:\Windows\Temp\WER6690.tmp.mdmp</Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_lsass.exe_3c1aa5eeba75bf26fcebc4f54e714efe7b5162a2_cab_20a56871</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>6af0ff3d-b0e1-11e4-83ca-0026b9340d61</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          2/9/2015 11:58:22 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      HV2008-Host
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: lsass.exe
P2: 6.1.7601.22653
P3: 534893ed
P4: msvcrt.dll
P5: 7.0.7601.17744
P6: 4eeb033f
P7: c0000005
P8: 0000000000001111
P9:
P10:

Attached files:
C:\Windows\Temp\WER5001.tmp.appcompat.txt
C:\Windows\Temp\WER535C.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER53DA.tmp.hdmp
C:\Windows\Temp\WER6690.tmp.mdmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_lsass.exe_3c1aa5eeba75bf26fcebc4f54e714efe7b5162a2_cab_20a56871

Analysis symbol:
Rechecking for solution: 0
Report Id: 6af0ff3d-b0e1-11e4-83ca-0026b9340d61
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-10T04:58:22.000000000Z" />
    <EventRecordID>267649</EventRecordID>
    <Channel>Application</Channel>
    <Computer>HV2008-Host</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>lsass.exe</Data>
    <Data>6.1.7601.22653</Data>
    <Data>534893ed</Data>
    <Data>msvcrt.dll</Data>
    <Data>7.0.7601.17744</Data>
    <Data>4eeb033f</Data>
    <Data>c0000005</Data>
    <Data>0000000000001111</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
C:\Windows\Temp\WER5001.tmp.appcompat.txt
C:\Windows\Temp\WER535C.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER53DA.tmp.hdmp
C:\Windows\Temp\WER6690.tmp.mdmp</Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_lsass.exe_3c1aa5eeba75bf26fcebc4f54e714efe7b5162a2_cab_20a56871</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>6af0ff3d-b0e1-11e4-83ca-0026b9340d61</Data>
    <Data>4</Data>
  </EventData>
</Event>

Would really appreciate if someone can point us to the correct direction on how to get this issue sorted.

Regards,

Dhanushka

I have a Windows 8.1 Pro with Media Center Computer - The computer works perfectly fine/normal until I install Hyper-V.

Once I install Hyper-V the Windows Store and any of the apps do not detect an internet connection; in desktop mode the internet is working normally and in the Network Connections I can see the virtual network adapters as connected to my wireless network and I can see a virtual switch that is connected to it. The Windows Phone adapter is stuck on identifying.

The internet works fine in the Windows Phone Emulator despite being stuck on identifying in Network Connections but it does not work inside a Windows 10 virtual machine even though I am using the same virtual adapter as my computer, in Windows 10 the adapter shows as identifying, If I try troubleshooting it cannot find any problems, I cannot ping to anything except 127.0.0.1.

I have tried every type of Windows Store troubleshooting you could possibly imagine, from wsreset.exe to running the AppsDiagnostic.diagcab file.

The only reason I am posting here is because of the VM for Windows 10 didn't work I thought I'd try removing and re-adding Hyper-V; I realised that once I had removed Hyper-V the Windows Store started working again. 

After reinstalling Hyper-V I fiddled around with the virtual adapters such as ticking every box but this did not make a difference.

I have also tried deleting the virtual adapters from Network Connections but the Windows Store still did not work. I have then tried re-adding the virtual adapters but still the Windows Store/apps and VM don't detect an internet connection.

I have tried searching online for a solution for this problem but I cannot seem to find a way to troubleshoot this I do not know what the connection between Hyper-V and the Windows Store/apps could be to cause this fault. I think this must be some kind of networking issue but I don't know where else I can look besides Network and Sharing Center.

I have also tried updating the networking adapter on my computer but it does not find any updates.

I would like to just not use Hyper-V and use a different program but Visual Studio 2013 Professional tells me that I need Hyper-V installed for the Windows Phone Emulator to work, so I need to find a way to fix this problem.

I hope that I have been descriptive enough for someone to know what the issue is, hopefully it is something really simple.

Pepsi-Josh

Hi,

I have a Hyper-V server with multiple VM's replicating over VPN to a replica Hyper-V server.  I have it setup to replicate every 5 minutes.  All is well.  One of the VM's on my Hyper-V server is a backup server.  I have backup software that I install on a client's server or workstation that backs up locally and then uploads the backup over the internet to my backup server [I can seed the software's initial backup manually much like the initial replication of the Hyper-V replica].

So when I sign up a new client and setup the backup, I could have upwards of 60GB or so of data that gets written to the backup server VM.  When I do this it can take a week for the replication to finish when there has been 60GB of data added to the VM.  Is there a way to pause replication, and manualy export a replication to an external HD, then import the replacation to the replication server, then resume replication?  like when we do the first replication manually to a remote server? 

Or am I going to have to remove replication [on both servers], delete the replica VM, then enable replication again and do a manual initial replication?

Thanks for any input!!

Rob

Noticed a lot of machines in SCVMM go into an irreversible "INCOMPLETE VM CONFIGURATION" status.  All options to manage the machine are then grayed out.  A couple options like "repair" and "refresh" are available, neither of which solves the problem.  These machines are up and running with no related errors in our Hyper-V cluster.  There is also one in a "failed" status with the same symptoms.  

When is this bug in SCVMM going be fixed?  This is supposed to be enterprise VM management software?  Right now, I can't even manage 10 virtual machines with SCVMM because of a BUG.  I have to go to the failover cluster manager or the Hyper-V manager.  

I really don't want to wipe out the entire cluster from SCVMM and readd it, because removing the cluster from management uninstalls the SCVMM agent on all servers.  Needless to say, adding the cluster back to SCVMM management would (ridiculously) require a reboot of all servers in the cluster to "reclaim storage."  Just confirmed that this will happen in my test environment.

If there is a supported way to fix this, please let me know. 

I am by far not the only person that has noticed this problem (try google), but there are no good supported solutions out there.   

Hello everyone ,

In our environment we have 3 physical machines running Windows 2008 R2, under the " domain.local ";

Server1 -> Primary Domain Controller

Server2 -> Node 1 of cluster Hyper V

Server 3 -> Node 2 Cluster Hyper V

Server 2 and Server 3 share CSV storage mode , and contain multiple virtual machines

We need to migrate all machines to a new domain , but I'm very lost on how to do and not lose the cluster. Can anyone help me and tell me please  the steps to migrate this environment from the old domain to the new domain ?

do i have mount a parallel cluster in the new domain and then, migrate one by one all the virtual machines?

Thank you very much , any help is welcome

VM1 - Secondary Domain Controller, DHCP, DNS & WINS
VM2 - File Server, SQL, ArgusTV, Cert Authority
VM3 - Plex

MB NIC1 - Pass through to VM2 and team under guest
MB NIC2 - iSCSI SAN (directly connected to my NAS)
PCIe NIC1 - Pass through to VM2 and team under guest
PCIe NIC2 - iSCSI SAN (directly connected to my NAS)
PCIe NIC3 - Virtual Switch for VM1 & 3
PCIe NIC4 - Hyper-V Host Management

All:

I have a Hyper V host with one, and only one VM.  That VM hosts SQL Server for the ERP system.  I want to move the SQL VM onto a physical box and I want it to be the same box in which it came.  In other words, I want to take the VM out of the host server, get rid of the Hyper V on that box, Install SQL server onto that box, then restore the database back onto that box.  What am I missing

I have a server 2008 r2 vm running on a hyperv server 2008 r2 server.

I can log into the local admin account on the hyperv server and have full powershell access etc on that server.

Someone reset the Domain Admin password and forgot it.  I am looking for a way to mount an ISO on the virtual server so I can reboot and try the password crack CD I have.  I have used this CD successfully before on physical machines.

I can only think that I should be able to mount the ISO on the VM from the hyperv server and reboot the VM.

Is there another way?

Hi Members,

We have IBM Blade S having three computes named as CS1 , CS2 , CS3 each computes installed with Windows Server 2012 R2 Hyper-V Cluster.

I Also have One HP Server installed Windows server 2012 Hyper-V at DR Site (DR)

Now I want to enable replication between one VM of CS3 on DR Site.

To Do This I do following steps

Allow HTTP Hyper-V Replica Traffic on Both Servers (DR and CS3)

Allow CIFS and Microsoft virtual machine services at AD object of DR and CS3

Configure Hyper-V Replica Broker Role on CS3 Provide it IP

Event id 1194

Cluster network name resource 'DR-Replication' failed to create its associated computer object in domain 'csaplho.pk' during: Resource online.

The text for the associated error code is: Access is denied.


Please work with your domain administrator to ensure that:
- The cluster identity 'CS-CLUSTER$' has Create Computer Objects permissions. By default all computer objects are created in the same container as the cluster identity 'CS-CLUSTER$'.
- The quota for computer objects has not been reached.
- If there is an existing computer object, verify the Cluster Identity 'CS-CLUSTER$' has 'Full Control' permission to that computer object using the Active Directory Users and Computers tool.
Event ID 1069
Cluster resource 'DR-Replication' of type 'Network Name' in clustered role 'DR-Replication' failed.

Based on the failure policies for the resource and role, the cluster service may try to bring the resource online on this node or move the group to another node of the cluster and then restart it.  Check the resource and group state using Failover Cluster Manager or the Get-ClusterResource Windows PowerShell cmdlet.

Event ID 1069

Cluster resource 'DR-Replication' of type 'Network Name' in clustered role 'DR-Replication' failed.

Based on the failure policies for the resource and role, the cluster service may try to bring the resource online on this node or move the group to another node of the cluster and then restart it.  Check the resource and group state using Failover Cluster Manager or the Get-ClusterResource Windows PowerShell cmdlet.

Issue :

1. As Per Above Screen Shot I am not able to start DR-Replication
2. What is the Correct method for enable replication between hyper-V Cluster one VM and Standalone Hyper-V Server

Pls Help

Hi,

I have a server with windows 2008R2 and that server is having a GPT parition (UEFI). i want to convert this server to virtual.

I am using DisktoVHD utility. But my Vm could able to boot from that converted vhd.

Is there any way to P2V for this scenario.

Thanks

Hi,

I would like to install Hyper-role with a Server Core installation. I saw in technet : "It is important to note that Server Core cannot be managed locally using traditional graphical user interfaces (GUIs) such as Server Manager" and in the Hyper-V security guide, it is noted that : "Remote administration consoles and specialized WMI command-line scripts are required to manage the server"

Does-it mean that it is not possible to manage locally via commmand line interface too ?

Thanks in advance.

Martin

So I have a 3 node cluster of Hyper V 2012 Servers.

They are connected to a stack of switches.  All physical network connections are run through this stack.

I need to take the switch stack down for a few minutes to update the firmware. The switches will be 100% down. 

Will the Virtual machines be ok, other then being inaccessible during the firmware update?

Or will I have to shut down the failover cluster, update the switches, then bring the cluster back up?  I'd like to avoid that if possible...

All,

I have the following setup prepared to migrate VM based on VMware ESX server to HyperV Cluster - Windows 2012R2

# HyperV clusters has three nodes based on Cisco Servers with 300 GB local storage used to install OS windows 2012 R2.

# Storage - CSV file system with 1 TB used to storage VM

We have created the HyperV cluster and it is working fine.

Now issue we are facing in VM migration by using MVMC 3.0 that while migration it is asking shared storage on HyperV host

and that we do not have it.  So my question is how Can I resolve this issue...

I checked and I cannot share the C:\ClusterStorage\Volume1 (Where CSV volume)

How Can I  use CSV file system for the same...

Other option available is to have new LUN to specific HyperV host from storage and then used it to convert ESX VM to HyperV VM and then migrate the VHDX file of that VM to CSV volume to have VM as Highly available.

Thanks

Vijay Dalimkar

Vijay Dalimkar VCP,MSTS,MCITP,SCSA

Hello everyone, is there a recommended way of implementing this? I'm not too certain what the advantages or disadvantages are for using one over the other. 

We are currently and ESX shop and are considering migrating to Hyper-V, before doing so however I would like to see what our options are and which is the best route to take.

Any thoughts on using Hyper-V Server 2012 over Server 2012 R2 w/ Hyper-V?

Thanks!

Hello;

I have a windows server 2008 R2 with 2 HPV servers, I have installed a new windows 2012 R2 std server, and would like to move the HPV from 2008 to the new 2012.

I have exported the HPV servers, but when I try to import, I get the error " Hyper-V did not find virtual machines to import from the location"

I am looking for a way to do this, there is a lot on the web, but non that have worked for me?

thx

Hello all,

I'm in the process of testing a new HyperV 2012 r2 build on a pair of servers, each with two 10GBe NICs. On each server I've LBFO teamed these NICs (Switch Independent, Dynamic Mode) and connected a HyperV switch. On each host I've created vNICs for Management, CSV, LM and two foriSCSI. Outside of this single team of two NICs, I have no other networking on these boxes, I'm fully converged. It's my understanding that since I'm fully converged and using dVMQ for each NIC, I won't have RSS as they can't co-exist?

If so, I understand and accept this. My next question is, and this may sound silly but, without RSS, does that mean I also can't have vRSS in my VMs? If I'm understanding the technology correctly, the host-level requirement for vRSS is only dVMQ and not RSS. 

I assume I'm wrong here because in my testing, with dVMQ configured correctly on the host (I believe) and vRSS enabled on the VMs - I still see all networking traffic on a single core of my VM. Or is it possibe and I'm misconfigured?

Lastly, is it worth it (or even possible) to not use dVMQ and therefore enable RSS on my pNICs?

Thanks a ton!

Hey All!

I am writing an HTA application (some of you may have seen some of my other questions), and I am now stuck on the thumbnail image of a VM. I am taking the VBScript example from here:

https://msdn.microsoft.com/en-us/library/cc160707(v=vs.85).aspx

with slight modifications for root\virtualization\v2, but when I run it, all I get is a WScript.Echo "Done" and a log file with "Done" in it. I see two subs in the example to write the image (SaveThumbnailImage and PrintThumbnailImage), but they are never actually called in the script. Any attempts to call those with OutParams.ImageData error with a type mismatch.

Particularly, if you copy and paste the example, the mismatch error is on line 80 with the "stream.WriteText text".

Are the [] brackets shown in the above link required when passing the data to the sub? As in: SaveThumbnailImage(objOutParams.ImageData[])

I have seen the PowerShell examples, and I can get the PowerShell example to work, but being an HTA, I need this to work with VBScript. Has anybody successfully gotten a VBScript to output a thumbnail image? Any tips on getting this to work?

Thank you in advace!

Eric

EDIT: Tried adding the brackets [], but it throws an error "Expected ')'". Doesn't seem to like the brackets.

What exactly is being created with the ADODB.stream? Is that the issue? This one is new to me. I have .NET 3.5 and .NET 4.5 installed.

Though the Hyper-V VM is in running state and if the VM is not completely brought up then the IP address of the VM is not obtained using GuestIntrinsicExchangeItems of  Msvm_KvpExchangeComponent class.

Is there any way to get IP address and FQDN of guest in such cases?

Can we get the appropriate state of the Hyper-V guest?