{"id":313,"date":"2019-03-22T14:27:09","date_gmt":"2019-03-22T19:27:09","guid":{"rendered":"http:\/\/itblog.ldlnet.net\/?p=313"},"modified":"2019-03-22T14:30:05","modified_gmt":"2019-03-22T19:30:05","slug":"hyper-v-2019-will-not-mount-iso-from-a-network-share","status":"publish","type":"post","link":"https:\/\/itblog.ldlnet.net\/index.php\/2019\/03\/22\/hyper-v-2019-will-not-mount-iso-from-a-network-share\/","title":{"rendered":"Hyper-V 2019 will NOT mount ISO from a network share."},"content":{"rendered":"\n<p>Like most IT guys. They have a repository of their ISO images saved on a network share so that they can mount the ISO if needed on multiple machines. I recently switched to Hyper-V and have been having an issue with creating VMs and using my ISO from my network share to do so.  <br>Hyper-V Manager available through RSAT doesn\u2019t have an option to mount an ISO or capture a drive from a machine on which is running. Instead it gives you drives of the Hyper-V host, and that would of course require you to have an ISO or the disc itself present on the host. I didn&#8217;t want to do that. I would rather have my repository share available for that purpose to allow for all the drive space to be available on the Hyper-V host.<\/p>\n\n\n\n<p>So, I would map a network drive with my ISOs. The mapping would succeed, but mapped drive (letter) will not be visible in Hyper-V manager when trying to mount an ISO. Okay, so next I tried mounting from UNC share directly, but that would also fail, with the message:<br><strong>\u201c\u2018VM\u2019 failed to add device \u2018Virtual CD\/DVD Disk&#8217;\u201d <\/strong><em>&amp;&nbsp;<strong>\u201cUser account does not have permission required to open attachment\u201d.<\/strong><\/em> <\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><img decoding=\"async\" src=\"http:\/\/anotheritblog.net\/wp-content\/uploads\/2013\/06\/hyperv1.png\" alt=\"hyperv1\"\/><figcaption>Access Denied Error when trying to mount the ISO<\/figcaption><\/figure><\/div>\n\n\n\n<p>It goes back to the <a rel=\"noreferrer noopener\" aria-label=\"constrained delegation (opens in a new tab)\" href=\"https:\/\/blogs.technet.microsoft.com\/askcore\/2017\/05\/17\/hyper-v-authentication-in-windows-server-2016-for-managing-remote-hyper-v-servers-through-rsat\/\" target=\"_blank\"><em>constrained delegation<\/em><\/a> requirement for the Hyper-V host accounts to be used to perform functions such as this. This has been a pain to say in the least, as I have also had issues with live migration with my machines not being clustered due to different hardware.<\/p>\n\n\n\n<p>So, in researching, I found this <a rel=\"noreferrer noopener\" aria-label=\"blog post (opens in a new tab)\" href=\"https:\/\/anotheritblog.net\/2013\/07\/10\/hyper-v-server-2012-wont-mount-iso-from-a-network-share\/\" target=\"_blank\"><em>blog post<\/em><\/a>. It has helped me through this issue with mapping the shared folder with the ISOs.<br><\/p>\n\n\n\n<p>The cause of the problem is that the Hyper-V is intended to run with VMM Library Server and to mount files from it, not any random share. To re-mediate this:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>You need to assign full NTFS and share permissions to computer account of Hyper-V on a shared folder with ISO\u2019s you want to mount.<\/li><li>In AD on the computer account of Hyper-V machine delegate specific service \u2018cifs\u2019 to the machine you want your ISO\u2019s mounted from. Microsoft calls this <a rel=\"noreferrer noopener\" href=\"http:\/\/technet.microsoft.com\/en-us\/library\/cc738491%28v=ws.10%29.aspx\" target=\"_blank\"><em>constrained delegation<\/em><\/a>.<\/li><\/ul>\n\n\n\n<p>Here is step by step procedure for the constrained delegation:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Go to&nbsp;<em>Active Directory Users and Computers<\/em><\/li><li>Find the Hyper-V server computer account and open up its properties.<\/li><li>Go to&nbsp;<em>Delegation<\/em>&nbsp;tab.<\/li><li>Select&nbsp;<em>Trust this computer for delegation to the specified services only<\/em>&nbsp;radio button.<\/li><li>Click the&nbsp;<em>Add<\/em>&nbsp;button.<\/li><li>Click the&nbsp;<em>Users or Computers<\/em>\u2026 button.<\/li><li>In the Add Services window, click&nbsp;<em>Users or Computers<\/em>&nbsp;and enter the computer account that will&nbsp; act as a library server and click OK.<\/li><li>Select the<em>&nbsp;cifs<\/em>&nbsp;Service Type and click OK.<\/li><\/ol>\n\n\n\n<p>The resulting setup should look something like this:<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter\"><a href=\"http:\/\/anotheritblog.net\/wp-content\/uploads\/2013\/07\/delegation.png\"><img decoding=\"async\" src=\"http:\/\/anotheritblog.net\/wp-content\/uploads\/2013\/07\/delegation.png\" alt=\"Constrained delegation\" class=\"wp-image-468\"\/><\/a><figcaption>What the configuration should look like for constrained delegation<\/figcaption><\/figure><\/div>\n\n\n\n<p>I added both the server that contained the ISO images and the server that I run my RSAT tools from just to be safe.<strong> I next rebooted the Hyper-V host (<\/strong><em><strong>that is a requirement<\/strong><\/em><strong>)<\/strong>.<br>When the host rebooted, I was able to successfully create the VM.<\/p>\n\n\n\n<p>Hopefully, this will also solve my issue with live migration between my hosts. I will have to test that again and will inform everyone here if that succeeds as well!<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"text-align:center\">PLEASE COMMENT!<br>THANKS FOR READING!<\/h2>\n\n\n\n<p class=\"has-small-font-size\"><em><strong>References:<\/strong><\/em><strong><br><\/strong><a rel=\"noreferrer noopener\" aria-label=\"Hyper-V Server 2012 won\u2019t mount ISO from a network share (opens in a new tab)\" href=\"https:\/\/anotheritblog.net\/2013\/07\/10\/hyper-v-server-2012-wont-mount-iso-from-a-network-share\/\" target=\"_blank\">Hyper-V Server 2012 won\u2019t mount ISO from a network share<\/a><br><a rel=\"noreferrer noopener\" aria-label=\"Hyper-V authentication in Windows Server 2016 for managing remote Hyper-V servers through RSAT (opens in a new tab)\" href=\"https:\/\/blogs.technet.microsoft.com\/askcore\/2017\/05\/17\/hyper-v-authentication-in-windows-server-2016-for-managing-remote-hyper-v-servers-through-rsat\/\" target=\"_blank\">Hyper-V authentication in Windows Server 2016 for managing remote Hyper-V servers through RSAT<\/a><br><a href=\"https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2003\/cc738491(v=ws.10)\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"Constrained Delegation (opens in a new tab)\">Constrained Delegation<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Like most IT guys. They have a repository of their ISO images saved on a network share so that they can mount<\/p>\n<p class=\"link-more\"><a class=\"myButt \" href=\"https:\/\/itblog.ldlnet.net\/index.php\/2019\/03\/22\/hyper-v-2019-will-not-mount-iso-from-a-network-share\/\">Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":316,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[48,2,140,16],"tags":[152,34,33,155,153,154,156,100],"class_list":["post-313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-active-directory","category-general","category-hyper-v","category-windows","tag-constrained-delegation","tag-hyper-v","tag-hypervisor","tag-iso","tag-permissions","tag-rsat","tag-share","tag-vm","odd"],"_links":{"self":[{"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/posts\/313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/comments?post=313"}],"version-history":[{"count":2,"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/posts\/313\/revisions"}],"predecessor-version":[{"id":317,"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/posts\/313\/revisions\/317"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/media\/316"}],"wp:attachment":[{"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/media?parent=313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/categories?post=313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itblog.ldlnet.net\/index.php\/wp-json\/wp\/v2\/tags?post=313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}