Enable Normal Users to Access VMs in Hyper-V Host using vmconnect.exe while Restricting Access to Hyper-V Manager

Enabling Normal Users' Access to VMs on a Hyper-V Host using vmconnect.exe while Restricting Access to Hyper-V Manager

In a Hyper-V environment with multiple virtual machines (VMs), there might be a need to allow normal users to access VMs using the vmconnect.exe tool without granting them access to the Hyper-V Manager. This article will cover the key concepts and steps required to achieve this.

Understanding the Hyper-V Manager and vmconnect.exe

The Hyper-V Manager is a graphical tool used to manage Hyper-V hosts and VMs. It allows administrators to create, modify, and delete VMs, as well as monitor their performance. On the other hand, vmconnect.exe is a command-line tool used to connect to a running VM.

Restricting Access to the Hyper-V Manager

By default, only administrators have access to the Hyper-V Manager. To restrict access for normal users, you can follow these steps:

1. Open the Group Policy Editor by typing gpedit.msc in the Run dialog box.
2. Navigate to Computer Configuration > Administrative Templates > Windows Components > Hyper-V Manager.
3. Double-click on Prevent access to Hyper-V Manager and set it to Enabled.

Enabling Access to VMs using vmconnect.exe

To allow normal users to connect to VMs using vmconnect.exe, you need to grant them the necessary permissions. This can be done by adding them to the local Hyper-V Administrators group on the Hyper-V host.

1. Open the Computer Management console by typing compmgmt.msc in the Run dialog box.
2. Navigate to Local Users and Groups > Groups.
3. Right-click on Hyper-V Administrators and select Add to Group.
4. Add the normal user accounts to the group.

Using vmconnect.exe

To connect to a VM using vmconnect.exe, open a command prompt and navigate to the following directory:

Then, run the following command:

In this article, we have discussed how to enable normal users' access to VMs on a Hyper-V host using the vmconnect.exe tool while restricting access to the Hyper-V Manager. This involves restricting access to the Hyper-V Manager through Group Policy and granting users permission to connect to VMs by adding them to the local Hyper-V Administrators group.

References

• Microsoft: Manage Hyper-V Users by Using Local Groups
• Microsoft: Connect to a virtual machine remotely by using Virtual Machine Connection