The procedure of connecting to remote Hyper-V server is straightforward. All we need is to open Hyper-V Manager and connect to remote virtualization server by clicking on Connect to Server… on the right side of the Hyper-V Manager console.
Some IT Admins are experiencing problems when connecting from Windows client to remote Hyper-V server. There are different reasons why this problem could happen, but in this article, we will talk about lacking trust between the source and the target machine. The error is known as: “An error occurred while attempting to connect to server “ServerName”. Check that the Virtual Machine Management service is running and that you are authorized to connect to the server. Connecting to remote server failed: The WinRM client cannot process the request. A computer policy does not allow the delegation of the user credentials to the target computer…” as shown on the screenshot below.
As the reason is quite obvious, in the next few steps we will walk you through the process of enabling trust between Windows client machine and remote Hyper-V Server.
Allow delegating fresh credentials with NTLM-only server authentification
Enabling trust on a Windows client machine can be done via GUI or a Powershell. In this article, we will do it by using the Local Group Policy Editor (GUI). The policy is called Allow delegating fresh credentials with NTLM-only server authentification. This policy setting applies to applications using the Cred SSP component (for example Remote Desktop Connection). Credential Security Support Provider protocol (CredSSP) is an authentication provider that processes authentication requests for other applications. If you enable this policy setting, you can specify the servers to which the user’s fresh credentials can be delegated (fresh credentials are those that you are prompted for when executing the application). If you do not configure (by default) this policy setting, after proper mutual authentication, a delegation of fresh credentials is permitted to Remote Desktop Session Host running on any machine (TERMSRV/*). If you disable this policy setting, a delegation of fresh credentials is not permitted to any machine. In our example, we will enable policy on a source Windows machine from which we are connecting to the remote Hyper-V server. So, let’s start. By default, computer Group Policy is updated in the background every 90 minutes, with a random offset of 0 to 30 minutes. As we don’t want to wait for it, we will enforce an update by using CMD or a Powershell. Please follow the procedure below. Also, we can change a refresh interval for Group policy starting from 0 minutes to 31 days.
Hyper-V 2019 Core Remote ManagementHyper-V 2019 Core Server – Initial ConfigurationHow to install Hyper-V 2019 Server Core?Install Hyper-V Role in Windows Server 2019
