Wednesday, 2 January 2013

XenServer Devices are displayed and can be removed by users

I had a customer call in complaining that their VDA users could see the XenServer devices and disconnect them from VIA the taskbar, thus rendering the VDA hung and useless until next reboot. The customer was using XenServer tools ver. 6.0.54210

The below screenshots demonstrate the issue:



And the devices are clearly visible in the control panel too:

The solution we found was to add the following to the VDA's registry via GPO Computer Preferences. Once these were added the devices were not able to be removed by the users.

HKLM\SYSTEM\CurrentControlSet\Enum\XEN\VIF\0\Capabilitiies=00000012
HKLM\SYSTEM\CurrentControlSet\Enum\XEN\VIF\1\Capabilitiies=00000012
HKLM\SYSTEM\CurrentControlSet\Enum\XENBUS\CLASS&VIF\_\Capabilitiies=00000032
HKLM\SYSTEM\CurrentControlSet\Enum\XENBUS\CLASS&IFACE\_\Capabilitiies=00000032
HKLM\SYSTEM\CurrentControlSet\Enum\SCSI\Disk&Ven_XENSRC&Prod_PVDISK&Rev_1\.000000\Capabilitiies=00000072
HKLM\SYSTEM\CurrentControlSet\Enum\SCSI\Disk&Ven_XENSRC&Prod_PVDISK&Rev_1\.000100\Capabilitiies=00000072
HKLM\SYSTEM\CurrentControlSet\Enum\SCSI\Disk&Ven_XENSRC&Prod_PVDISK&Rev_1\.000200\Capabilitiies=00000072
HKLM\SYSTEM\CurrentControlSet\Enum\SCSI\Disk&Ven_XENSRC&Prod_PVDISK&Rev_1\.000400\Capabilitiies=00000072
HKLM\SYSTEM\CurrentControlSet\Enum\SCSI\Disk&Ven_XENSRC&Prod_PVDISK&Rev_1\.000500\Capabilitiies=00000072

No comments:

Post a Comment