Your network contains an Active Directory domain. The domain contains two Hyper-V hosts.
You plan to perform live
migrations between the hosts.
You need to ensure that the live migration traffic is authenticated by using Kerberos.
What should you do first?
A. From Server Manager, install the Host Guardian Service server role on a domain controller.
B. From Active D
irectory Users and Computers, add the computer accounts for both servers to the Cryptographic Operators group.
C. From Active Directory Users and Computers, modify the Delegation properties of the computer accounts for both servers.
D. From Server Manager,
install the Host Guardian Service server role on both servers.
Explanation:
If you have decided to use Kerberos to authenticate live migration traffic, configure constrained delegation before you proceed to the rest of the steps.
To configure
constrained delegation
Open the Active Directory Users and Computers snap-in.
From the navigation pane, select the domain and double-click the Computers folder.
From the Computers folder, right-click the computer account of the source server and then click
Properties.
In the Properties dialog box, click the Delegation tab.
On the delegation tab, select Trust this computer for delegation to the specified services only.
Under that option, select Use Kerberos only.
References:
https://docs.microsoft.com/en-us
/windows-server/virtualization/hyper-v/deploy/set-up-hosts-for-live-migration-without-failover-clustering