Hi everyone.
I have a task to migrate Virtual machines from one Hyper-V cluster(A) to another Hyper-V cluster(B) in another domain forest.
I prefer to do it by sharing-nothing live migration with resource based Kerberos constrained delegation.
I have rise 2 AD forests with 2 Hyper-V Clusters in my lab. There are no any firewall enabled on hosts or ports blocked between networks A and B. Each infrastructure emulated on 1 physical host under Windows 2016 because it supports nested virtualization
and gives opportunities to rise Hyper-V cluster undo 1 physical PC. Thus i have that:
![]()
Both Clusters runs at Windows 2012R2. I have set transitive cross domain forests trusts between domains A and B and Kerberos constarined delegation between cluster hosts setup like described
here with little fixeds. Given example doesn't work because Get-ADComputer cant resolve computer object from trusted AD forest, thus command should contain - searchbase and -server key to refer to trusted DC.
Get-ADComputer -Filter 'Name -eq "destHost"' -SearchBase "DC=A,DC=domain" -Server "a.domain" | Set-ADComputer -PrincipalsAllowedToDelegateToAccount (Get-ADComputer -Filter 'Name -eq "srvHost"'
-SearchBase "DC=B,DC=domain" -Server "nt.lan")
After that the SIDs of delegated hosts appears in the PrincipalsAllowedToDelegateToAccount properties in host objects.
Also I set concrete IP addresses on Hyper-V manager / Live migration setting. I think better to do it, because once i have migrate virtual machines between two clusters in single domain and different networks - and moving fails somewhere over migration until
i set concrete IPs for LM traffic.
After that I tried to perform LM through Hyper-V manger GUI.
Process begins, in the destination folder was created Planned Virtual machines folder with future VM configuration files within.
After migration fails with error 0x80090303
![]()
In the Hyper-V branch logs got such events:
Source Host:
Event ID:20414
The Virtual Machine Management service initiated the offline migration of virtual machine 'vins0004-nt' to destination host 'VINS011' (VMID A70F0D0E-4183-4E5A-A34A-E74AFBE84BD8).
Event ID:20302
The Virtual Machine Management Service failed to authenticate the connection for a Virtual Machine migration at the source host: The specified target is unknown or unreachable (0x80090303).
Event ID:21024
Virtual machine migration operation for 'vins0004-nt' failed at migration source 'VINS0010'. (Virtual machine ID A70F0D0E-4183-4E5A-A34A-E74AFBE84BD8)
Dest Host:
Event ID: 20402
The Virtual Machine Management Service failed to authenticate the connection for a Virtual Machine migration at the destination host: %%2147778644 (0x80048054).
This tread tells that LM in that case may be successful only through PS
Move-VM comandlet.
I also tried such as shown here but get strange result.
[vins0010]: PS C:\Users\username\Documents> Get-VM | % { Move-VM -DestinationHost vins011.%dest.domain% -IncludeStorage -DestinationStoragePath "C:\ClusterStorage\Volume1\$($_.name)" -verbose }
cmdlet Move-VM at command pipeline position 1
Supply values for the following parameters:
Name: vins0004
VERBOSE: Move-VM will move the virtual machine "vins0004" to computer "Microsoft.Virtualization.Client.Management.Server".
Move-VM : Virtual machine migration operation failed at migration source.
Failed to create folder.
Virtual machine migration operation for 'vins0004' failed at migration source 'VINS0010'. (Virtual machine ID A70F0D0E-4183-4E5A-A34A-E74AFBE84BD8)
Migration did not succeed. Failed to create folder '\\VINS011\VINS0010.2159109741$\{f887c148-ea23-4ab4-b2a1-d9ed8813c5f5}\vins0004\Virtual Hard Disks': 'The network
path was not found.'('0x80070035').
I cant understand why got so strange result path: \\VINS011\VINS0010.2159109741$\{f887c148-ea23-4ab4-b2a1-d9ed8813c5f5}\vins0004\Virtual Hard Disks
What does it mean VINS0010.2159109741$ ?
Does anyone migrate machines between domains and clusters at all?