MSVM_ComputerSystem WMI类仅返回Hyper-V主机 [英] MSVM_ComputerSystem WMI class returns only Hyper-V host
问题描述
使用WMI远程查询从Hyper-V主机(Windows 2012 R2)列出虚拟机列表时出现问题. (从MSVM_Computersytem中选择*).
Having a problem in listing list of virtual machine from Hyper-V host (Windows 2012 R2) using WMI query remotely. (select * from MSVM_Computersytem).
查询仅列出主机系统，没有列出虚拟机.
The query lists only Host system and no virtual machines are listed.
WMI查询是从远程系统在域用户的上下文中运行的，并且具有对Hyper-V主机的WMI名称空间(\ root \ Virtualization \ V2)的所有必需权限. 连接到Virtulization \ V2命名空间时没有错误.我也没有在事件记录器中看到任何WMI事件.
WMI query is ran in the context of domain user from a remote system and has all required permission to Hyper-V host’s WMI name space (\root\Virtualization\V2). There is no error in connecting to Virtulization\V2 name space. I don’t see any WMI events in event logger as well.
具有类似的权限，我们能够在root \ cimv2命名空间中查询WMI类，但无法从root \ virtualization \ v2命名空间中的WMI类获取数据
With similar permission we are able to query WMI classes in root\cimv2 name space but unable to get data from WMI classes in root\virtualization\v2 name space
为域用户提供Hyper-V主机的本地管理员权限时，将列出虚拟机.
Virtual machines are listed when domain user provided with local admin rights of Hyper-V host.
系统处于高度安全的环境中，我们不想授予Hyper-V主机上的本地管理员权限.
The systems are in highly secured environment and we don't want to give local admin rights on Hyper-V hosts.
域用户也是性能监视器用户"，分布式COM用户"和"WinRMRemoteWMIUsers" Windows组的一部分
Domain user is also part of "Performance Monitor Users", "Distributed COM Users" and "WinRMRemoteWMIUsers" Windows groups
在不授予本地管理员权限的情况下，远程获得VM列表还需要什么附加权限.
What additional permission is required to get list of VM’s remotely without giving local admin rights.
推荐答案
尝试将用户移至Hyper-V服务器上的"Hyper-V Administrators"本地安全组.有关更多详细信息，请点击以下链接:
Try moving the user to "Hyper-V Administrators" local security group on the Hyper-V Server. For more details follow the below link:
