Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[New Feature]: Disable VM Time Synchronization #1615

Open
MichaelGrafnetter opened this issue Mar 5, 2024 · 2 comments
Open

[New Feature]: Disable VM Time Synchronization #1615

MichaelGrafnetter opened this issue Mar 5, 2024 · 2 comments
Assignees
Labels
Enhancement The issue is an enhancement request.

Comments

@MichaelGrafnetter
Copy link
Contributor

Description

Hello, I would like to disable VM time sync for Active Directory domain controllers. The New-LWHypervVM.ps1 script already contains the following code:

if ($DisableIntegrationServices)
{
    Disable-VMIntegrationService -VMName $Machine.ResourceName -Name 'Time Synchronization'
}

But I have not found any other reference to the $DisableIntegrationServices variable in the AutomatedLab code base. Is there please a way to set this value in the Add-LabMachineDefinition cmdlet, or is that feature not yet implemented? Thanks.

@raandree raandree self-assigned this Mar 9, 2024
@raandree raandree added the Enhancement The issue is an enhancement request. label Mar 9, 2024
@raandree
Copy link
Member

raandree commented Mar 9, 2024

This code is very old, git says, at least 8 years.

To support this, we either need to add a property to the C# machine class or use the machine's hashtable HypervProperties for this.

Is it worth making other VMIntegrationService configurable as well?

@MichaelGrafnetter
Copy link
Contributor Author

MichaelGrafnetter commented Mar 10, 2024

@raandree Good question. Here is the list of integration services from WS 2022:
image

It would also make sense for lab environments to automatically enable the Guest Services component, which is disabled by default, but is required by the handy Copy-VMFile cmdlet.

While it is not an integration service, I sometimes need to additionally disable Credential Guard for specific VMs:

Set-VMSecurity -VMName CONTOSO-PC1 -VirtualizationBasedSecurityOptOut $true

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement The issue is an enhancement request.
Projects
None yet
Development

No branches or pull requests

2 participants