Hyper-V Program Manager
By default Hyper-V is configured such that only members of the administrators group can create and control virtual machines. Today I am going to show you how to allow a non-administrative user to create and control virtual machines.
Hyper-V uses the new authorization management framework in Windows to allow you to configure what users can and cannot do with virtual machines. This is very powerful and allows for some useful and interesting configuration options - but I will explore those on another day. To set the stage I need to explain some terms from the authorization management framework world:
Hyper-V can be configured to store it's authorization configuration in Active Directory or in a local XML file. After initial installation it will always be configured to use a local XML file located at \programdata\Microsoft\Windows\Hyper-V\InitialStore.xml on the system partition. To edit this file you will need to:
And now you are done. The user that you added will be able to completely control Hyper-V even if they are not an administrator on the physical computer.
> malvism 16 Mar 2014 7:16 AM
>on win 8.1 just add user to "HyperV administrators" group (this pc -> manage -> local users -> groups), no need to open XML file :)
This worked for me, after I eventually figured out what malvism was talking about. For the folks like me that aren't very familiar with Win 8.1 here's the same instructions with more detail:
* open up "This PC", or what used to by file explorer
* Right click "This PC" and select "Manage", entering your admin password if necessary
* On the left, select "Local Users and Groups" then "Groups"
* On "Hyper-V Administrators" right click "Properties"
* "Add..." the account you want to give access
Can anyone confirm this works on w8.1? I dont want to add users to Hyper-V Administrators group, but creating and setting users hyper-V group doesnt seem to work.
I just want to give user on his local computer limited right to his hyper-V machines (for example: user is unable to create and change virtual switches).
Thank you in advance
i tried to find the file \programdata\Microsoft\Windows\Hyper-V\InitialStore.xml but i wasnt able to do so.. rather i found this @ C:\Windows\WinSxS\amd64_microsoft-hyper-v-v..uthorization-policy_31bf3856ad364e35_6.3.9600.16384_none_cacbef604c43f40b/InitialStore.xml but when i made a selection for authorization store type: an error was raised that the file is incorrect format.
Do you have any idea about my problem??/
Thanks in advance,
Just perfect..MS says AzMan is deprecated feature in w8 and there is two option..HyperV administrator or another virtualization.
Win 2008 R2 Std + Hyper-V role, joined to AD
I followed the instructions in "Allowing non-Administrators to control Hyper-V" , but than when tried to connect to Hyper-V server I received "You don't have permissins.."
Than followed the instructions here:
and the problem was solved
I was hoping to give users on windows 8.1 the right to start vms not allow the full control of Hyper-V. There is really no alternate for us either as we need them to run the emulators from visual studio.
Anyone find a solution to give non-admin limited control?
Thank you, I've been fighting with it for two weeks.