Windows Server 2022 — Hyper-V PowerShell cmdlets fail over remoting with Access Denied — Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution — Primary Fix
7. Solution — Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Remote Hyper-V automation jobs fail, disrupting orchestration and CI tasks.

Environment & Reproduction

Occurs when WinRM delegation or JEA endpoint rights are incomplete.

Invoke-Command -ComputerName HV01 -ScriptBlock { Get-VM }

Root Cause Analysis

User token on remote host lacks Hyper-V admin rights or constrained endpoint capabilities.

Quick Triage

Confirm remoting transport and role membership.

Test-WSMan HV01
Get-LocalGroupMember -Group 'Hyper-V Administrators'

Step-by-Step Diagnosis

Validate endpoint configuration and auth mechanisms.

Get-PSSessionConfiguration
winrm get winrm/config/service

Solution — Primary Fix

Grant required role membership and align WinRM auth policy.

Add-LocalGroupMember -Group 'Hyper-V Administrators' -Member DOMAINops-automation
Restart-Service WinRM

Solution — Alternative Approaches

Use JEA endpoint exposing only approved Hyper-V cmdlets.

Register-PSSessionConfiguration -Name HyperV-JEA -Path .HyperVJEA.pssc

Verification & Acceptance Criteria

Remote `Get-VM` and `Start-VM` complete under automation identity.

Invoke-Command -ComputerName HV01 -ScriptBlock { Get-VM | Select -First 1 }

Rollback Plan

Remove temporary role assignment and disable custom endpoints.

Unregister-PSSessionConfiguration -Name HyperV-JEA

Prevention & Hardening

Use AD groups for delegated Hyper-V rights and audit membership drift.

Get-LocalGroupMember -Group 'Hyper-V Administrators'

Related Errors & Cross-Refs

Related: CredSSP double-hop issues and constrained delegation failures.

Related tutorial: View the step-by-step tutorial for Windows Server 2022.

View all Windows Server 2022 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

PowerShell remoting security and Hyper-V delegated administration docs.