Home
Categories: Hyper-V, Windows Server Posted by Tore Lervik on 8/1/2008 7:48 PM | Comments (4)

Your system administrator does no allow the use of saved credentials to log on to the remote computer <computername> because its identity is not fully verified. Please enter new credentials.

If you are using Hyper-V and your client is in a domain you might have seen this dialog a couple of times.
Or if your testing out VMM 2008 Beta in a domain environment you must have gone nuts by now.

The workaround for it is pretty simple.
On your domain server, open up Group Policy Management Editor and go to Computer Configuration -> Administrative Templates -> System -> Credentials Deligation.
Double click on Allow saved credentials with NTLM-only Server Authentication, click Show and add "*servername.domain" to the list.

My server is named Exia and my domain is home.mindre.net, so I added *EXIA.home.mindre.net to the list.
Now go on your client and open a Comand Prompt with admin rights and run gpupdate.

Cached Credentials in a domain environment should now work :)

Comments

Zac B on 9/11/2008 2:41 AM Thank you for this info. I was browsing the internet for what policy would fix this and the search pointed to your site. You have helped me a few times now over the past few months.

Thanks,
Zac
Jon A on 10/22/2008 9:41 PM Tried it both as a local/GPO and not working for me. Running VMM2008 Trial version. My hyper-v machines running server 2008 Ent with hyper-v and are also domain controllers.
Ketil Pedersen on 11/18/2008 2:24 PM Hi

If you add TERMSRV/*.domain.com you will get it to work with all tools.
Chris D on 11/19/2008 7:16 AM Hi

I enabled "Allow saved credentials with NTLM-only Server Authentication" on my Hyper-v Core Server and that was the last time I could connect to it via ipc$ from my Windows 2008 Standard Server. I did remember to put the 2008 sever in as the one able to connect to the Hyper-V Server. But now I am looking for away to access Local policy on my Hyper-V so I can disable this. Sounds like a reinstall is coming my way.

Regards

Chris

Add comment




biuquote
Loading