Hello, I've got a four node hyper-v 2012r2 cluster using a CIFS share to store all of the virtual machines. It's working all right but I do see thousands of similar log entries in the Microsoft-Windows-FailoverClustering/Diagnostic log:

Event ID: 2049 -

Hi,

guess the security is not set right,

1. In Active Directory Users and Computers, click to open Properties for the computer account, and then click to open the Delegation tab.

2. Select both Trust this computer for delegation to the specified services only and Use Kerberos only.

3. Click Add, and provide the name of the SMB file server (or the Cluster Access Point for a Scale-Out File Server).

4. Select the CIFS service. Note that Common Internet File System (CIFS) is the previous name for SMB.

5. On the SMB file share created for virtual machines, add Full Control permissions for the Hyper-V Administrators.

In this blog there is the right way to configure the CIFS/SMB share.

https://technet.microsoft.com/en-us/library/jj134187.aspx

So lets say I have a cluster with 2 Hosts: SS-MAIN1 and SS-MAIN2 hosting SS-MAINFS1(Scale-out Fileserver)

and I also have 2 VM servers in a cluster: VM-MAIN1 and VM-MAIN2 with the cluster VM-MAIN

Would I setup the delegation on VM-MAin1 and 2 to point to SS-MAINFS1 or to SS-MAIN1 and SS-MAIN2?

I currently did SS-MAINFS1 and I get the Security-Kerberos EVent ID 4 and when I rebooted SS-MAIN2 after moving all the resources to SS-MAIN1 my VM cluster crashed after the Event 4..

Any insight would be greatly appreciated.

Thanks,

John

hi,

If VM1 & 2 need to access the share on the FS1 then they need access on the FS1.

And the share access need to be set in the Cluster failover manager on the FS1 resource properties.

as in the blog below

https://technet.microsoft.com/en-us/library/hh831718.aspx

New-Item -Name "folder" -ItemType Directory
New-SmbShare -Name \\fs1\somename -Path Path -FullAccess Domain\VM1$ Domain\VM2$
Set-SmbPathAcl ShareName \\fs1\somename