ASP Developer Network - Brought to you by Steve Radich and BitShop, Inc. - http://www.bitshop.com

ASPDeveloper

ASPDeveloper.Net / VirtualServerFAQ.COM

Make sure you go to our home page for:

* Virtual Server 2005 FAQ
* ASP.Net 2.0 Information
* ASP.Net 2.0 Streaming Tutorials
* ASP.Net 2.0 HTML based Tutorials

Made possible by Business Internet Technology Shop (BitShop)

Virtual Server 2005

Recent Virtual Server 2005 posts

* Guest OS not seeing second NIC card
* Linux X11 Addition not Recognized as an RMP File?
* "Installation interrupted" when installing R2 on WinXP SP2
* Stopping and starting virtual servers from command line
* Cant install nic card
* Sound Emulation
* URGENT : Dynamic VS Static MAC hell
* Virtual server event log is empty
* VS 2k5 R2 - Admin Site Security
* Sound Cards?
* Dual CPU"s and single VM
* can"t get the Linux add-ins
* Virtual Server will not restart
* Debian won"t install!
* R2 install on XP Pro SP2
* Maintenance of dynamic VHDs
* Migration from VMWare
* System requirements say in can be installed on WinXP SP2, but the install isn"t so sure...
* Is it possible to upgrade images from VPC 2004 to Server R2?
* virtual server R2 platform support

Add Solution

The parameter is incorrect error when trying to access Admin-site

Source: microsoft.public.virtualserver
Sent: 04/05/2006
From: "Niklas Engfelt" <(email address - cut out)>
Message:

Why do I get "The parameter is incorrect" error when trying to access
Admin-site in Virtual Server R2 (64-bit)?

After some search I found that it could be fixed by logging in with
127.0.0.1 as address, which actually works, but gives me an annoying
extra logon box.

I also have these two messages in the VS-log when I log into the admin
site:
----------
The service principal names for Virtual Server could not be registered.
Constrained delegation cannot be used until the SPNs have been
registered manually. Error 0x80072098 - Insufficient access rights to
perform the operation.
----------
The service principal name for the VMRC server could not be registered.
Automatic authentication will always use NTLM authentication. Error
0x80072098 - Insufficient access rights to perform the operation.
-----------

What can I do to fix these 3 problems?

I first had problems accessing the admin-site after upgrading the
server to a domain-controller, but after having found a KB about that
it seemed to work fine, but after a while these errors occured. I
haven't done or installed anything so it seems strange to me that it
suddenly stopped working.

Best regards
Niklas

Post Reply | This is Spam! | Mark as Spam

Related Messages

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 04/05/2006
From: "Niklas Engfelt" <(email address - cut out)>
Message:

I found errors in the KB:
http://support.microsoft.com/default.aspx?scid=kb;en-us;890893

The KB is wrong. Step 8 and 9 is missing where you should add
vmrc/server and vmrc/server.domain.name

This is only part of the SETSPN.exe method which is an alternative
method.

The KB says that it only refers to Virtual Server 2005 Standard edition
as well. You should update that and add Enterprise and R2std and R2ent
as well.

Could anyone at MS update this KB?

I still get the permissions errors errors after the vmrc additions as
well. What permissions are required. I am running VS under
LocalSystem-account. Do I need to change this to something or can I add
permissions to this account somewhere or do I have to change something
else to make it work again?

Best regards
Niklas Engfelt

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 04/05/2006
From: "Ben Armstrong [MSFT]" <(email address - cut out)>
Message:

For the first issue - what happens if you use http://localhost?

For the second two issues - these should go away if the host is part of
a domain - but they are both not serious errors.
--
Cheers,
Benjamin Armstrong
===============================
Virtual machine Program Manager

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

Niklas Engfelt wrote:

Show quoted text

> Why do I get "The parameter is incorrect" error when trying to access
> Admin-site in Virtual Server R2 (64-bit)?
>
> After some search I found that it could be fixed by logging in with
> 127.0.0.1 as address, which actually works, but gives me an annoying
> extra logon box.
>
> I also have these two messages in the VS-log when I log into the admin
> site:
> ----------
> The service principal names for Virtual Server could not be registered.
> Constrained delegation cannot be used until the SPNs have been
> registered manually. Error 0x80072098 - Insufficient access rights to
> perform the operation.
> ----------
> The service principal name for the VMRC server could not be registered.
> Automatic authentication will always use NTLM authentication. Error
> 0x80072098 - Insufficient access rights to perform the operation.
> -----------
>
> What can I do to fix these 3 problems?
>
> I first had problems accessing the admin-site after upgrading the
> server to a domain-controller, but after having found a KB about that
> it seemed to work fine, but after a while these errors occured. I
> haven't done or installed anything so it seems strange to me that it
> suddenly stopped working.
>
> Best regards
> Niklas
>

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 04/10/2006
From: "Niklas Engfelt" <(email address - cut out)>
Message:

http://localhost:port/... or machinename or others does not work, only
http://127.0.0.1:port/.... 127.0.0.1 requires me to give a login
although I have already logged in as domain admin.

I get these errors in the event box when I login with 127.0.0.1:
The service principal name for the VMRC server could not be registered.
Automatic authentication will always use NTLM authentication. Error
0x80072098 - Insufficient access rights to perform the operation.
------------
The service principal names for Virtual Server could not be registered.
Constrained delegation cannot be used until the SPNs have been
registered manually. Error 0x80072098 - Insufficient access rights to
perform the operation.
-----------

How can I fix this so I can logon normally like before. The server is
the domain controller. It used to be a workgroup before when it worked.
I then installed Virtual Server and then the errors occured. What more
do I need to do to make Virtual Server work normally?

Best regards
Niklas Engfelt

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 04/11/2006
From: "Ben Armstrong [MSFT]" <(email address - cut out)>
Message:

Ah - the fact that this is a DC is critical to know. Checkout:
http://support.microsoft.com/default.aspx?scid=kb;en-us;890893
--
Cheers,
Benjamin Armstrong
===============================
Virtual machine Program Manager

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

Niklas Engfelt wrote:

Show quoted text

> http://localhost:port/... or machinename or others does not work, only
> http://127.0.0.1:port/.... 127.0.0.1 requires me to give a login
> although I have already logged in as domain admin.
>
> I get these errors in the event box when I login with 127.0.0.1:
> The service principal name for the VMRC server could not be registered.
> Automatic authentication will always use NTLM authentication. Error
> 0x80072098 - Insufficient access rights to perform the operation.
> ------------
> The service principal names for Virtual Server could not be registered.
> Constrained delegation cannot be used until the SPNs have been
> registered manually. Error 0x80072098 - Insufficient access rights to
> perform the operation.
> -----------
>
> How can I fix this so I can logon normally like before. The server is
> the domain controller. It used to be a workgroup before when it worked.
> I then installed Virtual Server and then the errors occured. What more
> do I need to do to make Virtual Server work normally?
>
> Best regards
> Niklas Engfelt
>

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 04/12/2006
From: "Niklas Engfelt" <(email address - cut out)>
Message:

Yes. I have seen that KB. That's the one I mention above which is
incorrect or have missing parts. I have tried to follow it without
success. I have now tried with another thing, adding Network Service
account with Read & Write Permissions on this ServicePrincipalName
Object. That actually fixed the two errors, BUT I still cannot log on
the website with the real name. I have to use 127.0.0.1, else I get
"The Parameter is incorrect.". Often you need to logon to the server
from another computer and then you cannot use 127.0.0.1.

I have restarted the Virtual Machine helper service, the Virtual
Server Service and done IISReset many times when I try these changes.
Are there any other services that needs to be restarted when you make
changes?

The missing Step 8 and 9 in the KB (if you look at the alternative
command-line method there should be a step 8 and 9 for the vmrc as
well), which port is that? I have tried to add both my ports, but I
guess one is enough. What syntax is that?

Are there other fixes like this that I need to do? Would it help to
re-install Virtual Server or would these parameters be missing on
Domain Controllers anyway?

Best regards
Niklas Engfelt

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 04/12/2006
From: "Niklas Engfelt" <(email address - cut out)>
Message:

I managed to fix this error finally :)

What I did later, which I think is what fixed the problem was to add
the vmrc/-entry in servicePrincipalName with the ports after the
server. (adsiedit.msc) To be sure I added 4 entries, 2 netbios and 2
FQDN with the 2 ports that Virtual Server is using. I guess only one
port is relevant, so probably one of them has no effect, but I don't
see any real security issue by adding an extra entry. After restarting
services, the error messages dissappeared from the Virtual Server event
log, but the problem remained when trying to access the Admin Web site.

After changing the Security Permissions on the servicePrincipalName,
adding Network Service account (Read&Write), and rebooting the server,
all problems were fixed. :)

Best regards
Niklas Engfelt

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 04/13/2006
From: "Niklas Engfelt" <(email address - cut out)>
Message:

I actually got the "Parameter is incorrect!"-error again, but in
another case. This time I am using another persons logon (due to lots
of open documents) and then I logon to Remote desktop to Localhost with
my user. In there I cannot access the admin site. If I try outside the
Remote Desktop on the other persons logon, I can access the site with
the same copied URL. Is there some restriction that you cannot handle
Virtual Server from Remote Desktop? Or do I need to fix some other
missing system setting?

Best regards
Niklas Engfelt

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 04/13/2006
From: "Ben Armstrong [MSFT]" <(email address - cut out)>
Message:

This is a known issue with IIS. You can only access our website over
RDP if you use the /console switch when making the RDP connection.
--
Cheers,
Benjamin Armstrong
===============================
Virtual machine Program Manager

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

Niklas Engfelt wrote:

Show quoted text

> I actually got the "Parameter is incorrect!"-error again, but in
> another case. This time I am using another persons logon (due to lots
> of open documents) and then I logon to Remote desktop to Localhost with
> my user. In there I cannot access the admin site. If I try outside the
> Remote Desktop on the other persons logon, I can access the site with
> the same copied URL. Is there some restriction that you cannot handle
> Virtual Server from Remote Desktop? Or do I need to fix some other
> missing system setting?
>
> Best regards
> Niklas Engfelt
>

Re: The parameter is incorrect error when trying to access Admin-s

Sent: 04/18/2006
From: Sam Cochrane
Message:

Man, your my personal hero!
I've been bugged by this problem for a straight week now, and you're
right -- the KB article is crap. I can't understand why they put information
like that on the net and don't bother to correct it; you already asked them
_twice_. I try to imagine how many other people might be stuck with this
exact same problem especially since VirtualServer is a free addon now;
it took me quite a while to find your post.
Thanks again.
Sam

"Niklas Engfelt" wrote:

Show quoted text

> I managed to fix this error finally :)
>
> What I did later, which I think is what fixed the problem was to add
> the vmrc/-entry in servicePrincipalName with the ports after the
> server. (adsiedit.msc) To be sure I added 4 entries, 2 netbios and 2
> FQDN with the 2 ports that Virtual Server is using. I guess only one
> port is relevant, so probably one of them has no effect, but I don't
> see any real security issue by adding an extra entry. After restarting
> services, the error messages dissappeared from the Virtual Server event
> log, but the problem remained when trying to access the Admin Web site.
>
>
> After changing the Security Permissions on the servicePrincipalName,
> adding Network Service account (Read&Write), and rebooting the server,
> all problems were fixed. :)
>
> Best regards
> Niklas Engfelt
>
>

RE: The parameter is incorrect error when trying to access Admin-site

Sent: 04/27/2006
From: "Pete"<(email address - cut out)>
Message:

I'm having a similar problem with The service principal name for the VMRC server could not be registered. Automatic authentication will always use NTLM authentication. Error 0x80072098 - Insufficient access rights to perform the operation.

I have looked at the entries that are posted on the MS KB article and they already exist. The server has been working fine for months and now this started happening. Any suggestions PLEASE?

Posted via http://www.VirtualServerFaq.com - Brought to you by Business Information Technology Shop - http://www.bitshop.com

Show quoted text

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 04/30/2006
From: "Ben Armstrong [MSFT]" <(email address - cut out)>
Message:

If none of the suggestions in this thread have helped - I would
recommend that you contact Microsoft product support.
--
Cheers,
Benjamin Armstrong
===============================
Virtual machine Program Manager

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

Pete wrote:

Show quoted text

>> Why do I get "The parameter is incorrect" error when trying to access
>> Admin-site in Virtual Server R2 (64-bit)?
>>
>> After some search I found that it could be fixed by logging in with
>> 127.0.0.1 as address, which actually works, but gives me an annoying
>> extra logon box.
>>
>> I also have these two messages in the VS-log when I log into the admin
>> site:
>> ----------
>> The service principal names for Virtual Server could not be registered.
>> Constrained delegation cannot be used until the SPNs have been
>> registered manually. Error 0x80072098 - Insufficient access rights to
>> perform the operation.
>> ----------
>> The service principal name for the VMRC server could not be registered.
>> Automatic authentication will always use NTLM authentication. Error
>> 0x80072098 - Insufficient access rights to perform the operation.
>> -----------
>>
>> What can I do to fix these 3 problems?
>>
>> I first had problems accessing the admin-site after upgrading the
>> server to a domain-controller, but after having found a KB about that
>> it seemed to work fine, but after a while these errors occured. I
>> haven't done or installed anything so it seems strange to me that it
>> suddenly stopped working.
>>
>> Best regards
>> Niklas
>
> I'm having a similar problem with The service principal name for the VMRC server could not be registered. Automatic authentication will always use NTLM authentication. Error 0x80072098 - Insufficient access rights to perform the operation.
>
> I have looked at the entries that are posted on the MS KB article and they already exist. The server has been working fine for months and now this started happening. Any suggestions PLEASE?
>
> Posted via http://www.VirtualServerFaq.com - Brought to you by Business Information Technology Shop - http://www.bitshop.com

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 05/03/2006
From: "Niklas Engfelt" <(email address - cut out)>
Message:

Sam:
No problem. I have sent it to Premier support who has forwarded it to
the appropriate documentation update group so hopefully it is updated
now or will soon be updated.
------ 2006-04-19-----
Thank you for contacting Microsoft Customer Service and bringing this
issue to our attention.

I have directed your feedback to the appropriate group for review.
------

Benjamin:
Do you have a list of what is required to successfully run VS? E.g.
what components are needed to be checked in Add/Remove -> Windows
Components (IIS), Registry settings/permissions, files/directories and
its permissions, AD-structure/accounts/groups/permissions other things
like these adsiedit.msc-"hacks"(servicePrincipalName).

I am looking for what is missing from a clean install on a domain
controller and a clean install on a workgroup-server upgraded to domain
controller later.

Best regards
Niklas Engfelt

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 05/03/2006
From: "Ben Armstrong [MSFT]" <(email address - cut out)>
Message:

Unfortunately I do not know of a definitive list.
--
Cheers,
Benjamin Armstrong
===============================
Virtual machine Program Manager

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

Niklas Engfelt wrote:

Show quoted text

> Sam:
> No problem. I have sent it to Premier support who has forwarded it to
> the appropriate documentation update group so hopefully it is updated
> now or will soon be updated.
> ------ 2006-04-19-----
> Thank you for contacting Microsoft Customer Service and bringing this
> issue to our attention.
>
> I have directed your feedback to the appropriate group for review.
> ------
>
> Benjamin:
> Do you have a list of what is required to successfully run VS? E.g.
> what components are needed to be checked in Add/Remove -> Windows
> Components (IIS), Registry settings/permissions, files/directories and
> its permissions, AD-structure/accounts/groups/permissions other things
> like these adsiedit.msc-"hacks"(servicePrincipalName).
>
> I am looking for what is missing from a clean install on a domain
> controller and a clean install on a workgroup-server upgraded to domain
> controller later.
>
> Best regards
> Niklas Engfelt
>

Re: The parameter is incorrect error when trying to access Admin-site

Sent: 05/10/2006
From: (email address - cut out)
Message:

I've seen this problem but haven't had the time to analyze it - so
forgive me if I'm mistaken...

I changed my IE security settings to always prompt for a login - this
solved my "Parameter is incorrect" problem. My theory is that when IE
passes the default credentials VS for some reason is not rejecting
them, simply returning the nasty error message. You could also try
clearing your saved passwords in your profile, perhaps that would help.

Cheers,
Anil

Re: The parameter is incorrect error when trying to access Admin-s

Sent: 07/05/2006
From: Dale Networkguy
Message:

Sam, yes indeed. I'm one in the crowd stumbling around with the under edited
VS instructions on constrained delegation and the KB on SPN. Perhaps MS is
putting all their eggs into releasing a hot fix or SP soon ...I am equally
bothered though by the inaccuracies and lack of stewardship.

"Sam Cochrane" wrote:

Show quoted text

> Man, your my personal hero!
> I've been bugged by this problem for a straight week now, and you're
> right -- the KB article is crap. I can't understand why they put information
> like that on the net and don't bother to correct it; you already asked them
> _twice_. I try to imagine how many other people might be stuck with this
> exact same problem especially since VirtualServer is a free addon now;
> it took me quite a while to find your post.
> Thanks again.
> Sam
>
>
> "Niklas Engfelt" wrote:
>
> > I managed to fix this error finally :)
> >
> > What I did later, which I think is what fixed the problem was to add
> > the vmrc/-entry in servicePrincipalName with the ports after the
> > server. (adsiedit.msc) To be sure I added 4 entries, 2 netbios and 2
> > FQDN with the 2 ports that Virtual Server is using. I guess only one
> > port is relevant, so probably one of them has no effect, but I don't
> > see any real security issue by adding an extra entry. After restarting
> > services, the error messages dissappeared from the Virtual Server event
> > log, but the problem remained when trying to access the Admin Web site.
> >
> >
> > After changing the Security Permissions on the servicePrincipalName,
> > adding Network Service account (Read&Write), and rebooting the server,
> > all problems were fixed. :)
> >
> > Best regards
> > Niklas Engfelt
> >
> >

RE: The parameter is incorrect error when trying to access Admin-site

Sent: 02/08/2008
From: "Lawson Gold"<(email address - cut out)>
Message:

I too had the same problem -

It's all very well getting the active subscription pack, but when you've installed 2003 x64 first so that you can play with Exch2007, it leaves most of the rest of the apps redundant as they're 32-bit (see SCE2007, SQL2005, etc.).

More shocking is the fact that MS apparently haven't got their act together with this VM stuff - I mean, not even updating incorrect pages on their site....I thought they were giving it away to combat VMWare, but it seems to be more a case of 'we haven't finished it, so we won't ask for money'.

Thankfully the steps advised above cleared my problem too - I suppose this is why we get paid, if MS made their s/w as easy to use as they make out, we'd all be out of work :-)

Posted via http://www.VirtualServerFaq.com - Brought to you by Business Information Technology Shop - http://www.bitshop.com

Show quoted text

Post Reply | This is Spam! | Mark as Spam

Other groups

Virtual PC (Mac)(3592)	Virtual PC(12844)	Virtual PC (French)(496)
Virtual Server 2005(6245)

Our Sponsors

Virtual Server 2005 Info Here!
http://www.aspdeveloper.net

Wiki

Blogs

Articles

Image galleries

File galleries

Forums

Maps

Directories

ASP Developer Network (since 1996) - Brought to you by Steve Radich and BitShop, Inc. - http://www.bitshop.com
Copyright © 1997-2005 by BitShop, Inc. All Rights Reserved.
No content may be reproduced in any form without written permission from BitShop, Inc.
We will be honored to assist with reproduction rights on our material if you contact us.
We also can provide print articles for your magazine, private training seminars at your site, and conference presentations.
Thank you for visiting. Please bookmark our site if you found it useful!
If you wish to make a donation it will help further the development of these free resources: