Would you like to try connecting again?
Method 1: Configure the registryTo have us fix this problem for you, go to the "Fix it for me" section. If you'd rather fix this problem yourself, go to the "Let me fix it myself" section.
Fix it for me
To fix this problem automatically, click the
Fix this problemlink. Then, click
File Downloaddialog box and follow the steps in this wizard.
Note this wizard may be in English only; however, the automatic fix also works for other language versions of Windows.
NoteIf you are not on the computer that has the problem, you can save the automatic fix to a flash drive or to a CD so that you can run it on the computer that has the problem.
Now go to the "Did this fix the problem?" section.
Let me fix it myselfImportant This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
If the CredSSP policy is not set up correctly, you can manually create the policy. To do this, create the following registry entry under several registry subkeys:
Value type: String Value
Value data: Microsoft Virtual Console Service/*
This registry entry must be created under the following registry subkeys:
How to create the registry entryFollow these steps, and then quit Registry Editor:
- Click Start, click Run, type regedit, and then click OK.
- Locate and then click the following key in the registry:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Credssp\PolicyDefaults\AllowDefaultCredentials
- On the Edit menu, point to New, and then click String Value.
- Type Hyper-V, and then press ENTER.
- On the Edit menu, click Modify.
- Type Microsoft Virtual Console Service/*, and then click OK.
Did this fix the problem?Check whether the problem is fixed. If the problem is fixed, you are finished with this article. If the problem is not fixed, you can contact support.
Method 2: Use Group Policy settingsTo enable authentication of remote credentials, you can use the Gpedit tool to configure Group Policy settings on the Windows Server 2008 Hyper-V-based computer. To do this, follow these steps:
- Start Gpedit.msc.
- Expand Computer Configuration, and then expand Administrative Templates.
- Expand System, and then click Credentials Delegation.
- In the Details pane, double-click Allow Delegating Default Credentials.
Note If you are using NTLM authentication, use the Allow Default Credentials with NTLM-only Server Authentication entry.
- Click Enabled, and then click to select the Concatenate OS defaults with inputs above check box.
- Click Show, and then verify that the computer of the remote user is included in the list. If it is necessary, click Add, and then include the computer of the remote user. You can also use wildcard characters. For example, to select all computers, add the following wildcard character: *
- Click OK two times.
- Close Group Policy.
Important This method differs from the method that is described in the "Configure the registry entry" section. The Group Policy configuration will use any Service Principal Name (SPN) from any computer to enable authentication of remote credentials. The method that is described in the "Configure the registry entry" section will enable only authentication of the Microsoft Virtual Console Service.
Article ID: 954357 - Last Review: Sep 11, 2011 - Revision: 1