{"id":15555,"date":"2013-10-10T13:29:00","date_gmt":"2013-10-10T12:29:00","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=15555"},"modified":"2013-10-10T13:29:00","modified_gmt":"2013-10-10T12:29:00","slug":"configuring-smb-delegation-just-got-much-easier","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=15555","title":{"rendered":"Configuring SMB Delegation Just Got Much Easier"},"content":{"rendered":"<p>To me, there\u2019s no doubt that using SMB 3.0 storage makes a Hyper-V-powered data centre much more flexible.&#160; Getting away from the constraints of traditional block storage data protocols and using \u201csimple\u201d file shares and permissions means that workloads are even more mobile, able to Live Migrate between non-clustered hosts, just the same as with a cluster, and able to use Cross-Version Live Migration to move <strong><em>from<\/em><\/strong> WS2012 hosts\/clusters <strong><em>to<\/em><\/strong> WS2012 R2 hosts\/clusters.<\/p>\n<p>One of the pain points in WS2012 of SMB 3.0 storage is the need to configure Kerberos Constrained Delegation for Live Migration between hosts that are not in the same cluster (including non-clustered hosts).&#160; It\u2019s \u2026 messy and the process requires that you do one of the following to each host afterwards:<\/p>\n<ul>\n<li>Reboot the host \u2013 Live Migrate VMs to avoid service downtime.<\/li>\n<li>Restart the Virtual Machine Management Service (VMMS) \u2013 no downtime to VMs.<\/li>\n<\/ul>\n<p>Just more stuff to do!<\/p>\n<p>WS2012 R2 adds three cmdlets to the AD PowerShell module (which you can install on your PC via RSAT).&#160; Your AD forest must also be at the \u201cWindows Server 2012\u201d (not necessarily R2) functional level.&#160; The three cmdlets that use the new resource-based delegation functionality are:<\/p>\n<ul>\n<li>Get-SmbDelegation \u2013SmbServer X<\/li>\n<li>Enable-SmbDelegation \u2013SmbServer X \u2013SmbClient Y <\/li>\n<li>Disable-SmbDelegation \u2013SmbServer X [\u2013SmbClient Y] [-Force]<\/li>\n<\/ul>\n<p>I\u2019ve just tested the cmdlets and no reboots were required.&#160; My test scenario: Hyper-V Replica secondary site hosts require delegation to be configured to store replica VMs on SMB 3.0 shares.&#160; I configured delegation using Enable-SMBDelegation, did not reboot, and the problem was solved.<\/p>\n<div id=\"scid:0767317B-992E-4b12-91E0-4F059A8CECA8:f87988a7-0f30-4450-9a79-cba25fa11ea3\" class=\"wlWriterEditableSmartContent\" style=\"float: none; padding-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px\">Technorati Tags: <a href=\"http:\/\/technorati.com\/tags\/Windows+Server+2012+R2\" rel=\"tag\">Windows Server 2012 R2<\/a>,<a href=\"http:\/\/technorati.com\/tags\/Hyper-V\" rel=\"tag\">Hyper-V<\/a>,<a href=\"http:\/\/technorati.com\/tags\/Hyper-V+Server\" rel=\"tag\">Hyper-V Server<\/a>,<a href=\"http:\/\/technorati.com\/tags\/Storage\" rel=\"tag\">Storage<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>To me, there\u2019s no doubt that using SMB 3.0 storage makes a Hyper-V-powered data centre much more flexible.&#160; Getting away from the constraints of traditional block storage data protocols and using \u201csimple\u201d file shares and permissions means that workloads are even more mobile, able to Live Migrate between non-clustered hosts, just the same as with &hellip; <a href=\"https:\/\/aidanfinn.com\/?p=15555\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Configuring SMB Delegation Just Got Much Easier&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[20],"tags":[181,67,99,120],"class_list":["post-15555","post","type-post","status-publish","format-standard","hentry","category-hyper-v","tag-hyper-v","tag-hyper-v-server","tag-storage","tag-windows-server-2012-r2"],"aioseo_notices":[],"jetpack_featured_media_url":"","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/15555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=15555"}],"version-history":[{"count":0,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/15555\/revisions"}],"wp:attachment":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=15555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=15555"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=15555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}