Solved Windows 11 and Hyper V enhanced session.

johnlgalt · Jun 18, 2021

hrk said:
If using MS account and enhanced mode, "Require Windows Hello sign-in for Microsoft accounts" must ne OFF.
Settings > Accounts > Sign-in options.

Windows Hello is for local logins only.

Nothing new here. Windows 11 is Windows 10, so far.

Which is a PITA, because Hello works perfectly well on W10 in all my VMs.

Ah well. It's Microsoft, so....

Kari · Jun 18, 2021

johnlgalt said:
Which is a PITA, because Hello works perfectly well on W10 in all my VMs.

Ah well. It's Microsoft, so....

John, I have Windows Hello enabled in all my virtual machines. If you add yourself on VM to Remote Desktop Users group in Local Users and Groups (lusrmgr.msc) > Users > [username] > Member of, you should be able to use enhanced session:

Click screenshots to enlarge.

Of course, as RDP does not allow Windows Hello, it will be disabled for your enhanced session and you must sign in with password, but in any case you do not have to disable Hello.

Kari

z3r010 · Jun 18, 2021

Thanks, @Kari & btw can you start using bigger pictures in your post, I hate thumbs

Also, I noticed on one of your posts you used javascript code option for xml...,..it has XML!!!"

That's my moaning out of the way.

badrobot · Jun 18, 2021

z3r010 said:
Thanks, @Kari & btw can you start using bigger pictures in your post, I hate thumbs

Also, I noticed on one of your posts you used javascript code option for xml...,..it has XML!!!"

That's my moaning out of the way.

if you click on the thumbs, it will give you a bigger picture. :)

z3r010 · Jun 18, 2021

Kari · Jun 18, 2021

z3r010 said:
Thanks, @Kari & btw can you start using bigger pictures in your post, I hate thumbs

Also, I noticed on one of your posts you used javascript code option for xml...,..it has XML!!!"

That's my moaning out of the way.

LOL! I have been using thumbnails ONLY to avoid you criticising me for posting too big screenshots! Lesson learned. I have a 4K display, and when taking screenshots and posting them here, they seem so big.

About JavaScript: it shows PS scripts quite well, is suitable for those, but I will start using XML for XML scripts like answer files.

About Windows Hello: Remote Desktop Protocol does not work with it. The simple workaround, as I mentioned, is to add yourself to Remote Desktop Users group on remote host.

Kari

Kari · Jun 18, 2021

@John, of course you are right. I tested now, changed three XML answer files in this post from JavaScript to XML, and they really look better.

Thanks.

Kari

jimbo45 · Jun 18, 2021

OK Guys :

Not an answer so ignore if it's not relevant. I realize this might be "Adding Petrol to a fire to extinguish it" but
why use HYPER-V on a Non Server version of Windows . It's absolutely OK for servers etc but single user Windows consumer systems what's the point of it. Almost any other VM system works seamlessly - VBOX, VMWare etc -- OK I know I push KVM/QEMU but that's a HYPERVISOR which consumes minimal resources and "just works" straight OOB without any mega problems like sound / video / USB connects, RDP constraints, type 1 or type 2 etc etc.

Sorry guys but surely HYPER-V on domestic single user systems is destined for the bin like the old W7 XP Mode. -- Nothing wrong at all with it on on servers etc.

Post back and bite me if you like - I'll defend my corner -- I've got loads of all sorts of Windows systems running on KVM /QEMU with very little issues and so long as the USB arbitration service works no trouble whatsoever in running VM's of any sort.

Challenge to HYPER-V adherents -- get an XP system working with old fashioned Minidisc recording hardware working and full sound and video on other devices too plus connections to modern multi TB HDD NAS Disks--I've images posted on the W10 Forum where I've shown this successfully working on KVM/QEMU..

Leave HYPER-V to Servers !!!!

Here's my xml config file of a successful XP VM running under KVM/QEMU

XML:

<domain type="kvm">
<name>winxp</name>
<uuid>bb9badcb-d50f-4ae8-aad1-61d9eed4e988</uuid>
<metadata>
<libosinfo:libosinfo xmlns:libosinfo="http://libosinfo.org/xmlns/libvirt/domain/1.0">
<libosinfo:eek:s id="http://microsoft.com/win/xp"/>
</libosinfo:libosinfo>
</metadata>
<memory unit="KiB">1048576</memory>
<currentMemory unit="KiB">1048576</currentMemory>
<vcpu placement="static">2</vcpu>
<os>
<type arch="x86_64" machine="pc-i440fx-6.0">hvm</type>
<boot dev="hd"/>
<bootmenu enable="yes"/>
</os>
<features>
<acpi/>
<apic/>
<hyperv>
<relaxed state="on"/>
<vapic state="on"/>
<spinlocks state="on" retries="8191"/>
</hyperv>
<vmport state="off"/>
</features>
<cpu mode="host-model" check="partial"/>
<clock offset="localtime">
<timer name="rtc" tickpolicy="catchup"/>
<timer name="pit" tickpolicy="delay"/>
<timer name="hpet" present="no"/>
<timer name="hypervclock" present="yes"/>
</clock>
<on_poweroff>destroy</on_poweroff>
<on_reboot>restart</on_reboot>
<on_crash>destroy</on_crash>
<pm>
<suspend-to-mem enabled="no"/>
<suspend-to-disk enabled="no"/>
</pm>
<devices>
<emulator>/usr/bin/qemu-system-x86_64</emulator>
<disk type="file" device="disk">
<driver name="qemu" type="raw"/>
<source file="/mnt/DV2/WINXP"/>
<target dev="hda" bus="ide"/>
<address type="drive" controller="0" bus="0" target="0" unit="0"/>
</disk>
<controller type="usb" index="0" model="ich9-ehci1">
<address type="pci" domain="0x0000" bus="0x00" slot="0x06" function="0x7"/>
</controller>
<controller type="usb" index="0" model="ich9-uhci1">
<master startport="0"/>
<address type="pci" domain="0x0000" bus="0x00" slot="0x06" function="0x0" multifunction="on"/>
</controller>
<controller type="usb" index="0" model="ich9-uhci2">
<master startport="2"/>
<address type="pci" domain="0x0000" bus="0x00" slot="0x06" function="0x1"/>
</controller>
<controller type="usb" index="0" model="ich9-uhci3">
<master startport="4"/>
<address type="pci" domain="0x0000" bus="0x00" slot="0x06" function="0x2"/>
</controller>
<controller type="pci" index="0" model="pci-root"/>
<controller type="ide" index="0">
<address type="pci" domain="0x0000" bus="0x00" slot="0x01" function="0x1"/>
</controller>
<controller type="virtio-serial" index="0">
<address type="pci" domain="0x0000" bus="0x00" slot="0x07" function="0x0"/>
</controller>
<interface type="network">
<mac address="52:54:00:5a:2d:43"/>
<source network="isolated"/>
<model type="virtio"/>
<address type="pci" domain="0x0000" bus="0x00" slot="0x03" function="0x0"/>
</interface>
<interface type="direct">
<mac address="52:54:00:7b:a0:2e"/>
<source dev="enp3s0f1" mode="bridge"/>
<model type="virtio"/>
<address type="pci" domain="0x0000" bus="0x00" slot="0x04" function="0x0"/>
</interface>
<serial type="pty">
<target type="isa-serial" port="0">
<model name="isa-serial"/>
</target>
</serial>
<console type="pty">
<target type="serial" port="0"/>
</console>
<channel type="spicevmc">
<target type="virtio" name="com.redhat.spice.0"/>
<address type="virtio-serial" controller="0" bus="0" port="1"/>
</channel>
<input type="tablet" bus="usb">
<address type="usb" bus="0" port="1"/>
</input>
<input type="mouse" bus="ps2"/>
<input type="keyboard" bus="ps2"/>
<graphics type="spice" autoport="yes">
<listen type="address"/>
<image compression="off"/>
</graphics>
<sound model="ich6">
<address type="pci" domain="0x0000" bus="0x00" slot="0x05" function="0x0"/>
</sound>
<audio id="1" type="spice"/>
<video>
<model type="qxl" ram="65536" vram="65536" vgamem="16384" heads="1" primary="yes"/>
<address type="pci" domain="0x0000" bus="0x00" slot="0x02" function="0x0"/>
</video>
<redirdev bus="usb" type="spicevmc">
<address type="usb" bus="0" port="2"/>
</redirdev>
<redirdev bus="usb" type="spicevmc">
<address type="usb" bus="0" port="3"/>[ATTACH type="full"]243[/ATTACH]
</redirdev>
<memballoon model="virtio">
<address type="pci" domain="0x0000" bus="0x00" slot="0x08" function="0x0"/>
</memballoon>
</devices>
</domain>

and here's the VM

awaiting "flame comments now" !!!!

Cheers
jimbo

z3r010 · Jun 18, 2021

HyperV is already on my system, I don't need to install any 3rd party programs.

Kari · Jun 18, 2021

z3r010 said:
HyperV is already on my system, I don't need to install any 3rd party programs.

Exactly.

I am something you might call a Windows Purist. I will never use any third party tools, if Windows can do it natively, or if there's at least a Microsoft tool available to download.

This means, that I for instance never use any third party snake-oil "optimizers", "tweakers", "cleaners" and so on.

And, of course, with Hyper-V I can do things VMware and VirtualBox can't do.

Kari

johnlgalt · Jun 18, 2021

OK, added RDU

Kari said:
John, I have Windows Hello enabled in all my virtual machines. If you add yourself on VM to Remote Desktop Users group in Local Users and Groups (lusrmgr.msc) > Users > [username] > Member of, you should be able to use enhanced session:

View attachment 237

View attachment 238

Click screenshots to enlarge.

Of course, as RDP does not allow Windows Hello, it will be disabled for your enhanced session and you must sign in with password, but in any case you do not have to disable Hello.

Kari

Not working here. I actually added both Hyper-V Admin and RDU to my username, but with Enhanced Session enabled, I don't get to log in. If I disable Enhanced Session, I get to log in *AND* it let's me use WinHello.

Are you actually using RD to connect? I'm using the default Hyper-V Manager Utility (Action --> Connect) to connect to the VM.

Also, if I disable enhanced session, and then close the connect window, the connect utility fails reconnect to the running VM....

Odd.

Kari · Jun 18, 2021

johnlgalt said:
OK, added RDU

Not working here. I actually added both Hyper-V Admin and RDU to my username, but with Enhanced Session enabled, I don't get to log in. If I disable Enhanced Session, I get to log in *AND* it let's me use WinHello.

Did you add yourself to those groups on remote host (Hyper-V guest)?

johnlgalt · Jun 18, 2021

Kari said:
Did you add yourself to those groups on remote host (Hyper-V guest)?

Yes, in the guest VM Windows 11 install. Not local bare metal install.

jimbo45 · Jun 18, 2021

Hi there
No 3rd party programs whatsoever !! -- it's part of the OS built in to the kernel !!! and doesn't need a specific version of OS -- e.g no requirement for Win 10 Pro or above to run it, Absolutely "Bog standard stuff.

Here's the LAN / NAS on that XP VM machine connectivity as well == Windows has always been a bit flakey on Networking

Absolutely no probs whatsoever. OK HYPER-V is a Virtualisation solution devised by Ms but really it's not for "The average Joe" unlike VMWare / VBOX and anybody with a small understanding of Linux can use KVM..

Anyway I'm sticking to my corner -- it takes seconds to create a new VM to install new builds of Windows which doesn't always work when using HYPER-V.

Cheers
jimbo

hrk · Jun 18, 2021

Kari said:
Of course, as RDP does not allow Windows Hello, it will be disabled for your enhanced session and you must sign in with password, but in any case you do not have to disable Hello.

No need to disable Windows Hello. But if you "Require Windows Hello sign-in for
Microsoft Accounts", the MS account users cannot sign in using RDP. And if there are no local accounts, nobody can login from RDP. Thus "empty" screen.

This is not new.

johnlgalt · Jun 18, 2021

@jimbo45 - the vast majority of us 'geeks', as @Kari affectionately refers to us users here and in 10F and WinQ forums, that run Win10 do so because we have an underlying need to have that as the base OS, the fallback, the daily driver, call it what you will.

I know we had a nice long discussion of trying to use Server as a daily driver, but there were apps that simply would not install in a Windows Server environment. I've researched this extensively, and as a PC Gamer who does not have a console - IOW, I game only on PC (well, and on my phone, but that is a different conversation), I'm stuck with using Windows. My only true alternative would be to dual boot a hypervisor and Windows 10 - or, more succinctly, install the hypervisor, then install Windows 10 as a bare metal install on another drive, and import it into the hypervisor, so that I can either run 10 from inside the hypervisor (giving me 95%+ usage of my Win10 install and the apps I need for non-gaming related stuff) and then boot out of the hypervisor and directly into the bare metal Win10 install for the gaming. To add to that, I opted to not get a new video card when I built this machine last year because the nVidia 30x0 series was not officially released, but was coming soon. Had I known what an absolute shitshow the attempted procurement for such a card would have been, I'd have happily bought a current gen (20x0 series) card and installed it and called it a day.

The card I have is an older GTX 970 card, and it barely holds its own as a video card for gaming, only doing so well for me because my monitors are even older than the card - being close to 8 years old now, and only supporting 1080p resolution, nothing higher. PLUS, there is the added need to have CompTIA VMs running that are accessible to my students as they need them - which, then, precludes my ability to boot out of the hypervisor just for gaming.

Thus, I'm stuck with using Win10 client (vs server) on my machine. Once I Have a more modern video card, I can try for a hypervisor that will aloow me to share the newer GPU for use in VMs while keeping the 970 installed for use by the hypervisor itself (no platform I've researched allows for using a single video card for both shared usage in VMs as well as for the hypervisor - yet - with successful usage specifically for gaming).

Now, others may not have such lofty needs / desires as I do, of course - but I've researched this extensively and even tried it with you. Until they get some things worked out, including the use of nested VMs (I can set up the VMs I need for the CompTIA classes manually, but that will take a *LOT* of time as they also need to interact directly for various steps that the students need to perform in the labs - and most importantly, my students need remote access to the VMs, which I'm not sure even how to begin to approach that via a hypervisor platform from people outside my internal network.

So, I'm one of those resigned to using Win10 as my daily driver installed on bare metal OS. I'd be on Linux in a heartbeat if I could reliably game on Linux without issues, with both new titles and old, and with a variety of publishers (Rockstar, EA, various things on Steam, Epic, Battle.net, and GOG, to name a few - I've got games spread all over the place).

badrobot · Jun 18, 2021

jimbo45 said:
Hi there
No 3rd party programs whatsoever !! -- it's part of the OS built in to the kernel !!! and doesn't need a specific version of OS -- e.g no requirement for Win 10 Pro or above to run it, Absolutely "Bog standard stuff.

Here's the LAN / NAS on that XP VM machine connectivity as well == Windows has always been a bit flakey on Networking

View attachment 245
Absolutely no probs whatsoever. OK HYPER-V is a Virtualisation solution devised by Ms but really it's not for "The average Joe" unlike VMWare / VBOX and anybody with a small understanding of Linux can use KVM..

Anyway I'm sticking to my corner -- it takes seconds to create a new VM to install new builds of Windows which doesn't always work when using HYPER-V.

Cheers
jimbo

VM is for those who use it on a regular basis like you maybe. But for a quick OS check just to satisfy a curiosity, Hyper-V will do the job. After all, we should all be installing these OS on physical drives and machines because that's mostly where the real world problems arise. Clean install issue and hardware related problems, etc. But maybe later when this Win 11 is officially released.

Kari · Jun 18, 2021

@jimbo45 , please do not take this personally. To my defence, I can only say, that I am quite sick with extreme pain, and that your post now was the straw that broke the camel's back (https://en.wikipedia.org/wiki/Straw_that_broke_the_camel's_back).

In my books, you still are one of the good guys. I just wish, that you could stop posting this kind of rubbish. On Ten Forums, I have not reacted to your posts about this topic on purpose, trying to avoid a fight.

jimbo45 said:
Not an answer so ignore if it's not relevant. I realize this might be "Adding Petrol to a fire to extinguish it" but
why use HYPER-V on a Non Server version of Windows . It's absolutely OK for servers etc but single user Windows consumer systems what's the point of it.

Jimbo, we are quite used to you posting something completely, profoundly irrelevant, especially when it has something to do with virtualisation. You are the Number One member to take any virtualisation thread off topic.

What's the point to use Hyper-V, you ask. I give you just a few examples, from an endless list of benefits.

Lets say I have a VM Win11PROx64, stored in folder X:\VirtualMachines\Win11PROx64. Its VHD is X:\VirtualMachines\Win11PROx64\Win11PROx64.vhdx.

For any reason, I want to check how that W11 installation on my VM works on 100% real physical hardware. Not a problem. I mount that VHD as drive W: and with one command I can add that virtual hard disk to Windows boot menu as a native boot virtual hard disk:

bcdboot W:\Windows

I restart my PC, and select that from boot menu, and I will be booted to it, using real physical hardware. Tutorial on our sister site Ten Forums: https://www.tenforums.com/tutorials/53256-hyper-v-native-boot-vhd.html

Please tell me how you do it with a VMware VHD?

Or, lets talk about security. I want the Windows core to be absolutely safe. I want to write protect it. Easy: I just use differencing disks. Please tell me how you do it in VMware? Tutorial on Ten Forums: https://www.tenforums.com/tutorials/139511-hyper-v-use-differencing-disks.html

Reinstall Windows on a Hyper-V VM in less than a minute? Easy, use differencing disks.

I could continue, but let's keep this short.

jimbo45 said:
Challenge to HYPER-V adherents -- get an XP system working with old fashioned Minidisc recording hardware working and full sound and video on other devices too plus connections to modern multi TB HDD NAS Disks- Leave HYPER-V to Servers !

Please tell me why I would need a Windows XP VM?

jimbo45 said:
Awaiting "flame comments now" !!!!

Please check your medication.

Kari

Steve C · Jun 19, 2021

Kari said:
@jimbo45 , please do not take this personally. To my defence, I can only say, that I am quite sick with extreme pain, and that your post now was the straw that broke the camel's back (https://en.wikipedia.org/wiki/Straw_that_broke_the_camel's_back).

In my books, you still are one of the good guys. I just wish, that you could stop posting this kind of rubbish. On Ten Forums, I have not reacted to your posts about this topic on purpose, trying to avoid a fight.

Jimbo, we are quite used to you posting something completely, profoundly irrelevant, especially when it has something to do with virtualisation. You are the Number One member to take any virtualisation thread off topic.

What's the point to use Hyper-V, you ask. I give you just a few examples, from an endless list of benefits.

Lets say I have a VM Win11PROx64, stored in folder X:\VirtualMachines\Win11PROx64. Its VHD is X:\VirtualMachines\Win11PROx64\Win11PROx64.vhdx.

For any reason, I want to check how that W11 installation on my VM works on 100% real physical hardware. Not a problem. I mount that VHD as drive W: and with one command I can add that virtual hard disk to Windows boot menu as a native boot virtual hard disk:

bcdboot W:\Windows

I restart my PC, and select that from boot menu, and I will be booted to it, using real physical hardware. Tutorial on our sister site Ten Forums: https://www.tenforums.com/tutorials/53256-hyper-v-native-boot-vhd.html

Please tell me how you do it with a VMware VHD?

Or, lets talk about security. I want the Windows core to be absolutely safe. I want to write protect it. Easy: I just use differencing disks. Please tell me how you do it in VMware? Tutorial on Ten Forums: https://www.tenforums.com/tutorials/139511-hyper-v-use-differencing-disks.html

Reinstall Windows on a Hyper-V VM in less than a minute? Easy, use differencing disks.

I could continue, but let's keep this short.

Please tell me why I would need a Windows XP VM?

Please check your medication.

Kari

I use Hyper V since it's simple to use and free!

Kari · Jun 19, 2021

johnlgalt said:
Not working here. I actually added both Hyper-V Admin and RDU to my username, but with Enhanced Session enabled, I don't get to log in. If I disable Enhanced Session, I get to log in *AND* it let's me use WinHello.

Are you actually using RD to connect? I'm using the default Hyper-V Manager Utility.

I am using VM Connection. Anyway, it should be irrelevant, because enhanced mode is based on RDP, and works exactly like remote desktop connection.

Here, sign in screen in normal mode asking for PIN, clearly showing that Hello is enabled: