Access denied error when configuring shared ISO feature on a VM using System Center Virtual Machine Manager 2008


When using the System Center Virtual Machine Manager (SCVMM) 2008 R2 console to share an ISO file, the following error may occur:

Error (12700)
VMM cannot complete the Hyper-V operation on the %ServerName; server because of the error: User Account does not have sufficient privilege to open attachment (path to ISO file)
Error: 'General access denied error' (0x80070005).
(Unknown error (0x8001)) 

Recommended Action
Resolve the issue in Hyper-V and then try the operation again.


This issue may occur if the Hyper-V host was unable to read the attributes associated with the SCVMM service account in Active Directory.  For additional information, please see the following KB article:

Some applications and APIs require access to authorization information on account objects


The resolution depends upon already following the steps to properly configure a shared ISO using SCVMM found on TechNet.  Those instructions should be followed first before implementing the below.

How to Enable Shared ISO Images for Hyper-V Virtual Machines in VMM

1.       Add the Hyper-V hosts to the "Windows Authorization Access group".
a. Open Actve Directory Users and Computers
b. Select the Built-in container
c. Select the Properties of the Windows Authorization Access group
d. Select the Members tab
e. Add the computer object for the Hyper-V host to this group

More Information

How to enable shared ISO images for Hyper-V virtual machines in VMM