Foglight for Hyper-V 5.7.7 - User and Reference Guide


	NOTE: SCVMM 2012 and SCVMM 2012R2 are currently supported. NOTE: Follow the Microsoft documentation to add a user to the SCVMM administrator role https://technet.microsoft.com/en-us/library/hh341475(v=sc.12).aspx NOTE: Follow the Microsoft documentation to add a member to a local group https://technet.microsoft.com/en-us/library/cc772524(v=ws.11).aspx

•

Privileges of Hyper-V Optimizer (Hyper-V® environments):

•

Hyper-V Optimizer is using the Hyper-V agent credentials (which is the local administrator).

•

Privileges of Monitor Account for Scale-Out File Server (SOFS) Agent:

•

The user is a member of a local group administrators.

Configurations required for collecting data from VMs resided on SMB server

To collect the complete data of virtual machines that are resided on the SMB server, make sure to do the following:

Open krb5.config under the FGLAM_HOM\state\default\config directory, set "forwardable=true" in libdefaults.

Enable SMB delegation on Active Directory using either of the following approaches:

•

Run the following command on Active Directory. Visit Enable-SmbDelegation for details.

Enable-SmbDelegation [-SmbClient] <Hyper-V server name> [-SmbServer] <SMB server name>


	NOTE: The Active Directory forest must be at the Windows Server 2012 functional level. This cmdlet relies on Active Directory Windows PowerShell cmdlets to perform its actions. To install the Active Directory cmdlets, run the following command: Install-WindowsFeature RSAT-AD-PowerShell

•

Enable the SMB delegation through the Active Directory Users and Computers console.

Browse to select the default container named Computers.

Select the computer on which you want to configure constrained delegation (your Hyper-V host server), right click on it and select Properties.

Click Delegation, and then select the Trust this computer for delegation to specified services only option and ensure you select the Use Kerberos Only option.

In the Service box, click Add and select the Hyper-V target host computer, and then select cifs from the list of services that show up.

Foglight for Hyper-V WinRM GPO script

The GPO script is provided to allow for a streamlined deployment, including how to configure Windows Remote Management (WinRM). Users must run the script as the Administrator on the AD controller which is enabled on Windows Server 2008 R2, Windows Server 2012 or Windows Server 2012 R2. They must enable WinRM for all the Hyper-V® servers through one time setup at Domain Controller, login to just one Domain Controller, and change the group policy by running an automation script.

The script creates a group policy object and links it to the specific OU (specified by running the script). The policy has the following settings:

•

Create a firewall rule “Allow WinRM for FglAM Requests” which allows port 5985 on all network.

•

Allow WinRM basic authentication.

•

Allow WinRM unencrypted traffic.

•

Set WinRM IPv4 and IPv6 filter to “*”.

•

At the end of the script, users can chose to force the policy update. It runs an “Invoke-GPUpdate” method on all members in the specific OU.

These settings can be observed in the Group Policy Management console by selecting the policy object.

To undo the changes made by the script:

•

Delete the group policy object.

•

Remove the linked OU from the GPO scope.

Agent administration

The Administration tab of the Hyper-V Environment dashboard contains links to agent administration tasks that you can use to manage Hyper-V agent instances, set the alarm sensitivity, and review and remove Hyper-V objects.

•

Accessing the Administration tab

•

Configuring monitoring agents

•

Reviewing object instances and deleting expired data

제품을 선택하십시오.

더 나은 서비스 제공을 위해 채팅 목적을 작성해 주십시오.

문제에 대한 권장 솔루션

Foglight for Hyper-V 5.7.7 - User and Reference Guide

User privileges required for monitoring agents

Configurations required for collecting data from VMs resided on SMB server

Foglight for Hyper-V WinRM GPO script

Agent administration