Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Loss of access and possible Stop error when you put the VHD of a domain controller VM on a scale-out file server in Windows Server 2012 R2


View products that this article applies to.

Symptoms

Consider the following scenario:

  • You configure a Hyper-V virtual machine (VM) as an Active Directory domain controller.
  • You join the Hyper-V host as a domain member of the domain controller. That is, the virtual machine is the Kerberos authentication target of the Hyper-V host.
  • You put the VHD file of the virtual machine on a scale-out file server, and then you connect the VHD from the Hyper-V host to the scale-out file server.

In this scenario, you cannot access the VHD from the Hyper-V host, and a Stop error may occur on the virtual machine.

↑ Back to the top


Cause

This issue is caused by a series of situations or conditions that occur in the following order:

  • If you use the Hyper-V host to access the VHD of the domain controller on the scale-out file server as a Server Message Block (SMB) client, the Hyper-V host uses the Kerberos authentication ticket that is acquired from the domain controller.
  • After the expiration time for the Kerberos authentication ticket is reached (by default, this is 10 hours), the scale-out file server returns a "STATUS_NETWORK_SESSION_EXPIRED" message to the Hyper-V host.
  • After it receives the STATUS_NETWORK_SESSION_EXPIRED message, the Hyper-V host requests a Kerberos authentication ticket from the virtual machine (domain controller) as the authentication destination.
  • Because the Hyper-V host cannot access the VHD of the virtual machine (domain controller), the domain controller cannot access the disk and, therefore, cannot respond to the Kerberos authentication ticket request.
  • Because the domain controller cannot access the system disk, it generates a Stop error until it switches the Kerberos authentication destination of the Hyper-V host.

↑ Back to the top


Workaround

To work around this issue, do not configure the VHD of the domain controller that is a virtual machine on the Hyper-V host to be located on the scale-out file server.

↑ Back to the top


Keywords: Stop error when opening VHD of a domain controller

↑ Back to the top

Article Info
Article ID : 4075002
Revision : 13
Created on : 1/31/2018
Published on : 1/31/2018
Exists online : False
Views : 237