KB: Changing the owner of a VM in System Center 2012 Virtual Machine Manager causes the console to become unresponsive
Published Feb 15 2019 11:49 AM 273 Views
First published on TECHNET on Apr 30, 2012

Here’s a new Knowledge Base article we published this morning. This one talks about an issue you can run into if your AD groups have circular references.



After changing the Self-Service Owner of a Virtual Machine (VM) to an AD Security Group in System Center 2012 Virtual Machine Manager, the console becomes unresponsive and after a few minutes displays the following:

Attempting to reconnect

Another dialog maybe also be shown with the following:

An unknown error occurred while executing the PowerShell script:

The connection to the VMM management server <VMM Server> was lost. Ensure that the <VMM Server> is online and that you can access the server remotely from your computer. Then connect to the <VMM Server> and try the command again using the new connection. Or, you can ensure that the Virtual Machine Manager service is started on <VMM Server>. Then connect to<VMM Server> and try the command again using the new connection. If the command fails again because of a connection failure, restart the Virtual Manager service and then try the operation again.

Try the operation again. If the issue persists contact Microsoft Help and Support

ID: 27235

The Event logs will contain the following:

Log Name: System
Source: Service Control Manager
Event ID: 7031
Level: Error
Description: The System Center Virtual Machine Manager service terminated unexpectedly. It has done this <#> times(s). The following corrective action will be taken in 100 milliseconds: Restart the service.

Log Name: Application
Source: Application Error
Event ID: 1000
Level: Error
Faulting application name: vmmservice.exe, version: 3.0.####.0, time stamp: 0x4e92b38a
Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e21213c
Exception code: 0xe053534f
Fault offset: 0x000000000000cacd
Faulting process id: 0x%9
Faulting application start time: 0x%10
Faulting application path: %11
Faulting module path: %12
Report Id: %13


This can occur if the AD security group's membership is such that it is part of a circular membership. In the following example, adding any of the AD groups would result in the failure because Group_Users is a member of Group_VMMSSU and contains references to Group_VMMSSU:

> Group_Users
> > Group_VMMSSU

> Group_Admins
> > Group_2

It is this circular membership that results in the vmmservice encountering a StackOverflowException [Exception code: 0xe053534f] and terminating unexpectedly.


To resolve this issue, review the AD group membership for any circular references and remove them. If the circular reference is not obvious, the script below can list the nested members of a particular group.

NOTE Use Active Directory Users and Computers to determine the top most group of the group causing issues.

dsquery group -name "Group_VMMSSU" | dsget group -members -expand


For the most current version of this article please see the following:

2680843 : Changing the owner of a VM in System Center 2012 Virtual Machine Manager causes the c...

J.C. Hornbeck | System Center & Security Knowledge Engineer

Get the latest System Center news on Facebook and Twitter :

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

Version history
Last update:
‎Mar 11 2019 09:14 AM
Updated by: