Securing Hyper-V

Because a Hyper-V Server may host dozens of virtual machines, properly securing the Hyper-V Server itself is critical. In a Hyper-V Server there are two primary groups used for managing the system: the Administrators group and the Hyper-V Administrators group that is created when the Hyper-V feature is installed. These two groups provide full access to the Hyper-V Server, and potentially, access to all virtual machines operating on the server.

In addition to managing the Hyper-V Server itself, administrators can use the Virtual Machine Connection tool of Hyper-V to access the virtual machines. This tool provides the virtual equivalent of physically accessing the system. Administrators can access the keyboard, video, and mouse of the system, change the power state, modify the virtual hardware, and boot from CD/DVD.

In this recipe we will cover securing the administrative functions on the Hyper-V Server and individual virtual machines.

Getting ready

In this example we are securing...