Invoke script command error

Question

Hello,
Environment:
VMM Cluster 2012 R2
2x Windows Server 2012 R2 + Hyper-V Role
We are using "Run Script Command" (Powershell: Invoke-SCScriptCommand) for customizations on the Hyper-V hosts, but recently it's the VMM Server reporting an error.
Invoke-SCScriptCommand Parameters:
Executable programm: C:\Windows\System32\WindowsPowershell\v1.0\Powershell.exe
Parameters: -File "Script.ps1" -ExecutionPolicy Bypass -WindowStyle Hidden
Script Resource package: name.cr
Run As Account: User with Domain Admin permissions
Error (22029)
VMM could not create a process for the script command C:\Windows\System32\WindowsPowershell\v1.0\Powershell.exe.
Either a required impersonation level was not provided, or the provided impersonation level is invalid (0x80070542)
Recommended Action
Verify the script command settings, then try operation again.
The problem appears after installing the "Security Update for Microsoft Windows (KB3000483)" on the Hyper-V hosts.
http://support.microsoft.com/kb/3000483
When I am using the builtin Domain Administrator "domain\Administrator" the error doesn't occur.
Did anyone got the same issue?
Thanks,

Answer 1

Only one way I've found around this:
cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f
This disables LUA prompting. Which is what is breaking running the CMD.exe.  You can't add -RunAS to your powershell script because you are not even getting that far.
Turn LUA back on after your service template deployment completes by running.
cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 1 /f
(Then RESTART the server through script, as it requires a reboot)
You can add this into your unnattend also.  (Which will be in the right context to run during the OS Install Process)
<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <RunSynchronousCommand wcm:action="add">
                    <Order>1</Order>
                    <Path>cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v FilterAdministratorToken /t REG_DWORD /d 0 /f</Path>
                </RunSynchronousCommand>
            </RunSynchronous>
        </component>
You can find the complete set of LUA registry settings at:
https://technet.microsoft.com/en-us/library/dd835564%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396#BKMK_AdminPromptBehavior
Cheers, Chris Shockey - Cloud Architect (Microsoft) - Cisco Systems