D
dln
Guest
Hello all,
I'm running Hyper-V on Server 2008 Enterprise 64-bit edition. I've got a
VBScript that opens up a virtual disk (.vhd file) on the Server 2008 system,
modifies a file stored within the virtual disk, and then unmounts the .VHD
file. This script works providing I "Run as Administrator" - any other
account, regardless of whether it's a member of the local Administrators
group or not, cannot run the script without it erroring out on mounting the
..VHD.
Stepping through the script, I've noticed that Windows sees the .VHD and
attempts to add it to the system, and the Driver Software Installation
dialog reports that it was added successfully. However the Driver Software
Installation dialog reads it as an "Unidentified Device" and seems to stop
processing with the message "Searching preconfigured driver folders". The
script reports a "General access denied error (0x80070005)".
Given that the script works when I explicitly elevate my permissions, this
strikes me a permissions related issue. I'm wondering if there's some sort
of setting (Group Policy or otherwise) that would allow me to mount the .VHD
file? I've tried adding my user account to the "Load and unload device
drivers" policy but this hasn't made a difference. I should note that
running the script as an administrator is not a good option for us - it will
be called by a service running on the server and this service, for security
reasons, really shouldn't be running under an Administrative account.
Thanks.
I'm running Hyper-V on Server 2008 Enterprise 64-bit edition. I've got a
VBScript that opens up a virtual disk (.vhd file) on the Server 2008 system,
modifies a file stored within the virtual disk, and then unmounts the .VHD
file. This script works providing I "Run as Administrator" - any other
account, regardless of whether it's a member of the local Administrators
group or not, cannot run the script without it erroring out on mounting the
..VHD.
Stepping through the script, I've noticed that Windows sees the .VHD and
attempts to add it to the system, and the Driver Software Installation
dialog reports that it was added successfully. However the Driver Software
Installation dialog reads it as an "Unidentified Device" and seems to stop
processing with the message "Searching preconfigured driver folders". The
script reports a "General access denied error (0x80070005)".
Given that the script works when I explicitly elevate my permissions, this
strikes me a permissions related issue. I'm wondering if there's some sort
of setting (Group Policy or otherwise) that would allow me to mount the .VHD
file? I've tried adding my user account to the "Load and unload device
drivers" policy but this hasn't made a difference. I should note that
running the script as an administrator is not a good option for us - it will
be called by a service running on the server and this service, for security
reasons, really shouldn't be running under an Administrative account.
Thanks.