Get the Flash Player to see the slideshow.

Jan 19 2009

Intel releases patch for IPMI driver causing conflicts in Microsoft Hyper-V (General Access Denied error)

Published by at 5:47 pm under IT

Users of S3000 & S5000V/X/S chipsets running on Microsoft Windows Server 2008 will experience “General Access Denied” error when Hyper-V host machine is restarted after Intel IPMI driver installation.

IPMI or “Intelligent Platform Management Interface” is a piece of software that sends status messages from vital system parts also allowing management applications to interact at low level hardware layers for real-time system health checks (yes, also temperatures, fan speeds, voltages, etc.) / configuration changes.

Intel IPMI driver is installed by one of the following products: Intel Active System Console 3.0; Intel Server Management Pack 3.0; Intel One Boot Flash Update Utility 9.7; Intel System Configuration Utility for Windows 5.0.1 & Intel System Event Log Viewer (SEL) 2.0.1.

If you we’re unlucky, like I was, after installing the IPMI driver which is a must for the above Intel applications to function correctly, Hyper-V will be unable to start any of your virtual machines with a “General Access Denied” error.

Adding other virtual machines will also fail with the same error. What is actually happening is that somehow the Intel IPMI driver is messing with the NTFS ACLs of all the virtual HDD (*.VHD) files. Instead of the actual built-in Hyper-V account there are orphan SID entries. Trying to restore the NTFS ACLs to the original state will do no good. Some suggested to grant access to everyone group with full control to the VHD file or even adding the system account under local admin group (trust me, it will not work). Trying to uninstall the Intel IPMI driver and revert back to the IPMI driver provided by default from Microsoft, leads to same Hyper-V error.

From what I’ve seen until now, reinstall of the system is the only viable solution, or, if you have a back-up handy, you’re in luck as the system restore process in Windows 2008 is working like a charm (another reason to keep your boot partition as clean as possible: less to re-install / less to backup).

As far as I know this issue dates back to the introduction of Hyper-V in February 2008. In November 2008, Intel releases a fix for the issue. The problem is briefly described in Intel Technical Advisory 922 (TA-0922-1). A small program “ResetAccess.exe” build by Intel can be executed which resets the NTFS ACLs entry on VHD files. After the program is executed, the server must be restarted. The tool itself can be downloaded directly here.

Intel announced that future release of IPMI driver, scheduled for Q1 2009 will fix interference with Windows 2008 Hyper-V enabled systems / then again, Microsoft is planning for both Windows Server 2008 SP2 & Windows Server 2008 R2 (which will also bundle Hyper-V 2.0 and SCVMMC). I hope Intel & Microsoft will not “patch” each other out.

Share

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

7 responses so far

7 Responses to “Intel releases patch for IPMI driver causing conflicts in Microsoft Hyper-V (General Access Denied error)”

  1. Jameson 28 Apr 2010 at 7:55 am

    stfu intel. you have downed my network and I can’t get my system back up again. Thanks a lot for kicking off my first day back at work like this, really appreciate it. a little warning next time would be nice!!!!

  2. Andrewon 14 Feb 2014 at 6:27 pm

    Intel no longer offers this download, apparently (DL link above is broken). Only place I could find the “ResetAccess” utility is here:

    http://www.helpdrivers.com/servers/Intel/Intel_Server_Management_and_Maintenance/System_Management_Software/

    Yes, it looks if’y, but the site is legitimate.

  3. test.comon 13 May 2014 at 3:22 pm

    Hi! I could have sworn I’ve been to this blog before but after going through a few of
    the posts I realized it’s new to me. Anyways, I’m certainly delighted
    I stumbled upon it and I’ll be book-marking it and checking back regularly!

  4. adamhenry688.webs.comon 02 Jul 2014 at 1:11 am

    This is my first time pay a quick visit at here and i am actually
    happy to read everthing at alone place.

    my web site; moved here (adamhenry688.webs.com)

  5. Addicting Gameson 02 Jul 2014 at 6:22 pm

    ‘Temple Run 2′ has a likelihood to be more productive due to the fact than the unique for the reason that not only sticks to the similar system as ‘Temple
    Run’, but there are some significant improvements that retains avid gamers entertained for hours.
    If you want to get or perform absolutely free on the internet
    activity for this pay a visit to here. Globe of Warcraft (BLIZZARD)
    This activity will get hrs out of your lifespan just by the sheer information by yourself.

    Look at my web page – Addicting Games

  6. Tabithaon 03 Jul 2014 at 9:55 pm

    Hurrah, that’s what I was looking for, what a material! present here at
    this website, thanks admin of this website.

    Feel free to surf to my blog post – visit your url (Tabitha)

  7. home remedies for acneon 16 Jul 2014 at 5:42 pm

    home remedies for acne…

Trackback URI | Comments RSS

Leave a Reply