🟠 High   ⏱ 5–30 min  Last verified: 29 May 2026
Affected versions: Windows Server 2022

📖 ~1 min read

Table of contents
  1. Symptom & Impact
  2. Environment & Reproduction
  3. Root Cause Analysis
  4. Quick Triage
  5. Step-by-Step Diagnosis
  6. Solution — Primary Fix
  7. Solution — Alternative Approaches
  8. Verification & Acceptance Criteria
  9. Rollback Plan
  10. Prevention & Hardening
  11. Related Errors & Cross-Refs
  12. References & Further Reading

Symptom & Impact

Live migration jobs fail and planned maintenance windows cannot move VMs between hosts.

Environment & Reproduction

Failure occurs in domain-joined clusters when constrained delegation for CIFS and Microsoft Virtual System Migration Service is not configured.

Move-VM -Name App01 -DestinationHost HV02

Root Cause Analysis

Kerberos cannot delegate required service tickets between source and destination hosts.

Quick Triage

Inspect migration settings and authentication protocol.

Get-VMHost | Select VirtualMachineMigrationEnabled,VirtualMachineMigrationAuthenticationType
Get-ADComputer HV01 -Properties msDS-AllowedToDelegateTo

Step-by-Step Diagnosis

Validate SPNs, constrained delegation targets, and cluster network usage.

setspn -L HV01
setspn -L HV02
Illustrative mockup for windows-server-2022 — terminal_or_powershell
Diagnostic output for live migration failure — Illustrative mockup — Progressive Robot

Solution — Primary Fix

Configure constrained delegation and set migration authentication to Kerberos.

Still having issues? Our IT Solutions & Services team can diagnose and resolve this for you. Get in touch for a free consultation.

Set-VMHost -VirtualMachineMigrationAuthenticationType Kerberos
# Configure delegation in AD for both hosts
Illustrative mockup for windows-server-2022 — event_or_log_viewer
Resolution for delegation and migration authentication — Illustrative mockup — Progressive Robot

Solution — Alternative Approaches

Use CredSSP for short-term maintenance while AD delegation changes propagate.

Set-VMHost -VirtualMachineMigrationAuthenticationType CredSSP

Verification & Acceptance Criteria

Live migration completes without authentication errors and VM uptime is preserved.

Move-VM -Name App01 -DestinationHost HV02 -IncludeStorage

Rollback Plan

Revert authentication mode and remove delegation entries if side effects occur.

Set-VMHost -VirtualMachineMigrationAuthenticationType CredSSP

Prevention & Hardening

Baseline delegation settings in AD and audit them after domain policy updates.

Get-ADComputer HV01 -Properties msDS-AllowedToDelegateTo

Related: Cluster validation warnings, SMB authentication errors, and failover placement failures.

Related tutorial: View the step-by-step tutorial for Windows Server 2022.

View all Windows Server 2022 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Microsoft Learn guidance on Hyper-V live migration authentication and constrained delegation.

Need Expert Help?

If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today — we respond within one business day.