Home
  •  

Virtual Server: User has insufficient permissions

Microsoft.Virtualization.VirtualServer.2005R2.VirtualServer_User_has_insufficient_permissions.rule (Rule)

Knowledge Base article:

Summary

Virtual Server was unable to perform the operation because the user has insufficient permissions on a resource file. A Virtual Server administrator needs to review the permissions on the resource file and grant the necessary permissions to the user, as appropriate.

Causes

Discretionary Access Control Lists (DACLs) configured on the configuration and resource files used by Virtual Server control which users are allowed to create, configure, control, and access virtual machines and virtual networks. A user has attempted to perform an operation, but does not have the required permissions on the necessary file or files.

Resolutions

A Virtual Server administrator--in other words, a person with full access rights to Virtual Server--needs to review the DACLs on the configuration or resource files that are involved in this operation. If appropriate, the administrator should grant the user the permissions needed to perform the operation. For more information about configuring the DACLs required to perform specific operations, see the topic on securing Virtual Server in the Virtual Server 2005 Administrator’s Guide.

External

Virtual Server 2005 Administrator's Guide, available at http://go.microsoft.com/fwlink/?LinkID=27540

Additional

Sample Events

Access denied. Virtual Server was unable to open the file or device "%1" because you do not have sufficient privileges.

Element properties:

TargetMicrosoft.Virtualization.VirtualServer.2005R2.VMHost
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
Virtual Server: User has insufficient permissions
{0}
Event LogVirtual Server

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Virtualization.VirtualServer.2005R2.VirtualServer_User_has_insufficient_permissions.rule" Enabled="true" Target="Microsoft.Virtualization.VirtualServer.2005R2.VMHost">

  <Category>AvailabilityHealth</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Virtual Server</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Virtual Server</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventCategory</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>1</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>1049</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.Virtualization.VirtualServer.2005R2.VirtualServer_User_has_insufficient_permissions_Rule.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>