Blogs and Podcasts

When it comes to sizing a new Backup environment or just new repository server, one metric that is always asked is the daily change rate. You can also see in the most popular - unofficial - Veeam sizer:https://rps.dewin.me/ https://rps.dewin.me/rpc/      Even with VeeamONE it was not simple to get this information easily for VMs and physical machines. This gap was closed with the version v11a of Veeam ONE. The previous report named VM Change Rate History was replaced by the new Data Change Rate History. Fortunately not just the name changed, it also gets some new features!What's new in report configurationIncludes Agent backups. Now these job-types are supported: VM Backup Replication Agent Backup   You can select the base of change rate calculation: Data transferred or read.   What's new in the report itselfIncludes a nice graph for change rate history - for VM and agent data. Includes daily change rate. In Summary In detail - per machine   This is a great help for siz

There has been a significant focus on how to make Veeam Backup resilient to ransomware.  More specifically - how to have Veeam backups available for recovery in case of an incident.In the past few months, I have had discussions with customers who have successfully recovered their production data after a ransomware attack. The common theme among these successful recoveries has been the availability of a secondary off-site copy of their backups to recover from, as their primary backup repository was compromised and destroyed outside of the Veeam software.Veeam ransomware protection should be the customers’ focus, and it is always a priority goal in my architecture designs. Secure by design is also a core design principle of the Veeam Architecture team.Off-site backup copies can provide an additional layer of data security:They are usually behind a VPN with a robust firewall deployment They are typically kept on a different network segment They often use an additional authentication metho

Hola!Esta entrada no es nada “tech”, es de comunidad y de ayudar a los demás!En esta ocasión, ayudar a otra comunidad creo que es el mejor regalo que podemos hacer, ya que el enfoque de todo esto es colaborar y ayudar!Por suerte y desgracia, yo pertenezco a estas dos asociaciones, hacen una gran labor, y gracias a su trabajo y cariño, muchas familias pueden atender a sus hijos, y aliviar un poco su carga!Si quieres colaborar, o no sabes cómo ayudar, sigue los enlaces y colabora, puedes hacer un donativo, o comprar un regalo para alguien en su tienda solidaria.Asociación NUPAAsociación MENUDOS CORAZONES Regala pensando en los demás!Luis.Hi!This entry isn't “tech at all, its about community and helping others!In this post, I believe that helping other community is the best gift we can offer, our focus as a community is always that, sharing and helping others!fortunately and unfortunately, I do belong to this two communities, associations, they do a great job, and thanks to that, and also

Os dejo el webinar que hicimos junto con Wasabi sobre Protección moderna de datos con almacenamiento S3 Object Storage, de la mano de la Comunidad de usuarios de Veeam, Victor Perez de Mingo y Wasabi. 

Hi all In this post I want to describe my personal experience in preparing and taking the VMCE exam.I know that there are some other topics written about the VMCE exam, like a good post of our top legend @MicoolPaul 😉, but I also want to share my personal experience.It’s very hot these days because some of our legends have recently received a free VMCE course of VEEAM. How cool is that from Veeam 😊.So especially for these co-legends (and in the meantime I luckily have met them in person at the Veeam 100 Summit event 😊) and hopefully other people wanting to take the course and exam. Requirement : Yes, indeed taking an official 3-day VMCE course is a requirement before taking the VMCE exam.For me it’s almost 5 years ago that I took the VMCE course – version 9.5 at that time. Because I work for a certified Veeam reseller and service provider, one of the requirements is that we have to have at least 1 VMCE in the company if we want to keep a Gold Partnership with Veeam.Because I’m the o

Veeam has just released a warning about a potential data loss issue for the Cloud products (AWS, Azure, GCP).IssueAccording to the article, data loss can occur in the background during the movement of backup objects.Affected versionsThe following versions are affected:Veeam Backup for AWS 5.0.0.452 Veeam Backup for AWS 5.1.0.39 Veeam Backup for Microsoft Azure 4.0.0.679 Veeam Backup for Google Cloud 3.0.0.859SolutionHotfixes have been released for the 3 products and it’s advised to install the update immediately.Veeam Backup for AWS 5.1.1.8 Veeam Backup for Microsoft Azure 4.0.0.705 Veeam Backup for Google Cloud 3.0.0.868Besides that, Health Check should be enabled for all policies in order to notice any backup chain problems.For more information visit KB4383

Hola!Para todos aquellos que hablais Español - Castellano,recordaros que vamos a celebrar un webinar el 13/12/2022 a las 09:00am. CEST“Protección moderna de datos” Animaros a participar en invitar a todos los “colegas” que queráis y creáis que les interese! Saludos.

Hi everyone,I assume some of you already know about this, but I think is interesting and also a good resource, being in the same path Veeam and VMware.VMware user group has a yearly subscription, for less than 200 dollars a year, you have access to a lot of 1 year licenses for many products, for lab and study proposes.It also offers discounts on official courses, certification exams and so on,so please, if you run a home lab, you want to grow it, and don’t have licenses to do so, check it out! VMUG ADVANTAGE Now includes also ESXi 8 and VCENTER 8!cheers!Luis F.

IntroductionWith backup direct to object being one of the most anticipated features in v12 AND with the ever-increasing number of cyber-threats, it is paramount to secure access to our buckets.In this series of posts, I will explore v12's direct to object capabilities and offer some suggestions to batten down the hatches.Note: For this post, I will use Wasabi and Minio as my Object Stores of choice. While some slight variations are expected, keep in mind that the same concepts should apply to any S3 compatible target. Restrict bucket access with a simple User IAM policyYou can find the Amazon S3 Object Storage Permissions in the User Guide for VMware vSphere and kb3151 highlights the required steps.Let's review what that looks like in Wasabi's console. For this example, I will configure a simple S3 bucket without immutability. Step 1: Create the policy as described in kb3151This policy grants access to the <<orossisecurebucket01>> bucket to the identity it is associated wit

Alt Text: Title “In The Lab With: Windows” Subtitle: “Endpoint Management” Subtitle Two: “Delaying Windows Feature Updates with Group Policy”There was recently a lively discussion on the Veeam R&D forums that inspired me to write this post. The essence of the disagreement on there was about Veeam’s inability to support new Windows Feature Updates sooner. I won’t repeat all of my points on the topic as they’re available for reading freely on the R&D forums already. What I do want to focus on however, is providing support to the thinly-stretched sysadmin who needs to get a grip on the Windows Update Lifecycle, to avoid issues with the Veeam Agent, and other applications that don’t have ‘Day One’ support for a new Operating System (Yes, Feature Updates are considered upgrades).So, what is a feature update? Please the quote below directly from Microsoft’s own documentation.Feature updates: Previously referred to as “upgrades,” feature updates contain not only security and quality r

VMware Tools is a set of services and modules that enable several features in VMware products for better management of guests operating systems and seamless user interactions with them. VMware Tools has the ability to pass messages from the host operating system to the guest operating system. Therefore, VMware Tools is a suite of utilities that enhances the performance of the virtual machine guest operating system and improves the management of the virtual machine. Without VMware Tools installed in your guest operating system, guest performance lacks important functionality. Installing VMware Tools improves these issues low video resolution, inadequate color depth, incorrect display of network speed, restricted movement of the mouse, inability to copy and paste and drag and drop files, missing sound, and provides the ability to take quiesced snapshots of the guest OS, and synchronises the time in the guest operating system with the time on the host Impacted ProductVMware Tools for Wind

December Chocolatey Month banner; Alfred, a cat and community mascotte, is wearing a Christmas hat and licking a Chocolate bar with the Chocolatey logo on it. On the background pine trees are draw, a green heart and some festive swirls.As you might have noticed, the Automation Desk is doing a December Chocolatey Month, and December starts tomorrow! There are prizes to win, so make sure you read the rules and you are ready for this! More info: 

Hi Everyone, More and more of us are spending our days wandering around various CLIs. There are times when you need to jump out into a file explorer in the precise location where your pwd command locates you.on windows simply type start .on a Mac doopen .and on Linux (I will demo this since I am in my basement on one of my stashed Linux machines hidden away :) xdg-open .So here I am in my Pictures directory I would like to see the thumbnails quickly so here it goes  and Voila!   If the xdg-open command is too long for you go ahead and create an alias in your .bashrc file  

When attempting to add a pre-created (provisioned) PC to a domain or reuse an existing computer account, the following error below is encountered.An account with the same name exists in Active Directory. Re-using the account was blocked by the security policy.Microsoft released this update on October 11, 2022, thereby introducing additional protections (hardening) for your environment. This hardening mitigates the following “CVE-2022-38042 (Active Directory Domain Services Elevation of Privilege Vulnerability)”.Legacy behaviourBefore the installation of the October 11, 2022 update, or later cumulative updates, the client computer queries Active Directory for an existing account with the same name. This query occurs during domain join and computer account provisioning. If such an account exists, the client will automatically attempt to reuse it.Note: During this time, the re-use computer account will only fail if the user does not have the appropriate permission to join the device to th

Hi Everyone,So as stated before my University decided to switch providers for their Alumni email accounts from gmail to O365 and that has forced me to create a new channel. This week I am getting deep into SAML territory and experiencing issues, always fun while connecting Okta and then later Auth0 for SSO.  You can get a free Auth0 account here and try this yourself:https://a0.to/signup-for-auth0

This is part three of the blogpost. If you want to read it from the beginning, head here: SOBR Archive Tier – Explained and Configured – Part 1 of 4 | Veeam Community Resource HubIn this part 3 of 4, I will walk you through all the things to set up for the archive tier in Azure. How to setup the archive tier for your SOBR in Microsoft AzureLet’s assume we already have a SOBR using a capacity tier to offload data to Azure in a specific schema. Could be either copy or move or even a combination of both to fulfill the 3-2-1 rule. A nice walkthrough of the capacity tier setup could be found e.g. here: https://jorgedelacruz.uk/2019/05/14/veeam-cloud-tier-capacity-tier-in-microsoft-azure-blob-how-to-configure-a-veeam-backup-replication-scale-out-backup-repository/This would be our starting point to enable another shift of the already offloaded data into the cheaper archive tier.Therefore, first of all we have to define another storage account in the correct tier level. In our example for Azu

Because we had already the option to backup files directly to tape, it was already possible to backup file shares to tape without backing it up to disk before. But this was limited at least to performance. This will be be much better in v12.Another limitation was that it was not possible to copy a NAS backup to tape. This will be available in v12.At least in v12 beta media pools are limited to Standard media Pools and WORM Media Pools.

Recently I had to troubleshoot an error in Veeam Backup and Replication. Error appeared at File Level Restore operations. In detail: restore Windows files from a Veeam Hardened Repository.Environment consists of existing and freshly installed proxies and repositories servers. New repository servers were Windows and Linux as hardened repository (LHR). Mount server was a physical Windows server.Problem that occurredWhen we tried to restore files from LHR we get errors like these:   We also could see that mounting of the restore point worked for a few moments. Restore Explorer also showed first directories. After a few seconds, mount point was disconnected automatically and browsing in Explorer resulted in an error.After some tests we found out, this only happens when we were using newly installed proxies as mount servers. It worked fine with already running proxies and even with new Windows repository server.That was solved the problemWhen we were checking the configuration of new proxy

IntroductionOne of the most notable upcoming Veeam Backup and Replication v12 capability is Direct to “Object Storage” backups.I thought it might come in handy to share a small AWS cli cheat sheet with the community. Initial AWS cli configurationThe first step is to run aws configureAll you need to provide are access key and secret key. You specify the --endpoint-url directly in the commands.Next, make sure you are using v4 signature aws configure set default.s3.signature_version s3v4 Creating a simple bucketaws s3api create-bucket --bucket <yourbucketname> --endpoint-url=<yourendpointurl> --no-verify-sslNote: You don’t necessarily need the --no-verify-ssl option except if like me you are lazy with certificates in your lab. Creating a bucket with object lockCheck out this great post from my colleague Steve Firmes where he discusses “How to avoid an Immutability Migraine”.The command is pretty straight forward:aws s3api create-bucket --bucket <yourbucketname> --object-

Account lockout help keep user accounts secure by preventing unauthorised users etc., from guessing the username and password. When your account is locked, you will have to wait for a specified amount of time before being able to log into your account again. Here is the link to the original blogpost. In the past, it was recommended to disable the local Administrator account due to several known vulnerabilities such as the built-in administrator account cannot be locked out no matter how many failed logins it accrues, making it a prime target for brute-force attacks that attempt to guess passwords. This is no longer true as beginning October 11, 2022, or later Windows cumulative updates, a local policy will be available to enable local administrator account lockouts.  Brute force attacks are one of the prevalent ways Windows devices are attacked today. Previously, Windows devices did not allow local administrators to be locked out. This leads to scenarios where, without the proper netwo

A new feature in vSphere 7 is the ability to configure a VMkernel port used for backups in NBD (Network Block Device) respectively Network mode. This can be used to isolate backup traffic from other traffic types. Up to this release, there was no direct option to select VMkernel port for backup. In this post I  show how to isolate NBD backup traffic in vSphere.ConfigurationIt is quite simple to configure backup traffic isolation. With vSphere 7 there is a new service tag for Backup: vSphere Backup NFC. NFC stands for Network File Copy. By selecting this, vSphere will return the IP address of this port when the backup software asks for ESXi hosts address.So all you need to do is to add a new VMkernel port, enable Backup service and set IP and VLAN ID. Host does not need to be rebooted. Now NBD backup traffic will be routed through this port.   How does it look likeFor verification there are a few options. You can check log file or monitor ESXi network throughput. On my demo ESXi host, I

Complementing my last post highlighting the Veeam software releases reaching end of support in 2023, I’m once again providing an expanded list of software that Veeam works with, that will be approaching end of life in 2023. Why does this matter when I’m just trying to protect the data? Times change, and software changes with them, until it’s no longer supported. At any point, a patch to an operating system, a .NET framework update, or anything else really, could end up with the software no longer being backed up properly, or not working at all in production. Without valid support there’s no process to get a fix, and whilst your backup software may still be in support with Veeam, if the vendor won’t fix the problem, it’s time to start panicking.With this in mind, let’s explore the software & operating systems being declared end of life in 2023 so we can start planning our upgrades/migrations if necessary. Microsoft We may as well start with one of, or potentially the largest softwar

It’s that time again to remind everyone that all good things run out of support eventually. The 2023 calendar year has the following products reaching end of support status for the following products.February 2023Veeam Backup & Replication v10 Veeam ONE v10 Veeam Agent for Microsoft Windows v4 Veeam Agent for Linux v4March 2023Veeam Backup for Nutanix AHV v2 Veeam Service Provider Console v4June 2023Veeam Agent for Oracle Solaris v2July 2023Veeam Disaster Recovery Orchestrator v3 (Formerly known as ‘Veeam Availability Orchestrator’)September 2023Veeam Agent for IBM AIXDates To Be Defined:Veeam Backup for Microsoft 365 v5 (Formerly known as Veeam Backup for Office 365) Veeam Backup for AWS v4 Veeam Backup for Microsoft Azure v3 Veeam Backup for Google Cloud v2As a footnote to this section, why do I say ‘dates to be defined’? This is because Veeam’s support for these products is based on ‘Next GA Date + 1 Version’ for the cloud protection products (AWS/Azure/GCP), and ‘Next GA date +

Hi! Thinking about Polish M365 users i prepared short article about Veeam Backup for MS365. https://inleo.pl/blog/veeam-backup-for-ms365-czyli-gdzie-zaczyna-sie-twoja-odpowiedzialnosc/Here is English summary. Microsoft’s Shared Responsibility Model, in the simplest words, says “Your data – your matter.”Many people aren’t aware of that and think they are protected against data loss. They are partially right, but only in case of internal Microsoft infrastructure failures. Microsoft replicates its regions between each other to maintain the continuity of the services. But replication and backup are different things. If your file gets damaged, it will be replicated in its current state, and you will not be able to restore it. If you delete a file accidentally, and 93 days are left (the time of MS Data retention), you will not be able to restore it. So how do you cope with it?The solution is Veeam Backup for M365, a great tool that allows you to protect data stored in M365, Hybrid, or On-Pre

I’d like to first thank Rick Vanover, Madalina Cristil, Nikola Pejková, Aubrey Galen, and everyone at Veeam for their efforts and support leading into the Veeam 100 Summit. It’s a HUGE undertaking that requires many levels of coordination. This was my first time attending the event in person. It was an honour to attend such a prestigious event and meet many fellow Vanguards, Legends and MVPs in person.  It is amazing how being at an event and being able to speak to others of the same mindset makes you feel great.  As for the host city of Prague, it never fails.Day 1 included a Welcome Reception.A big thanks to Jim Jones and 11:11 Systems for sponsoring our Go Kart event earlier in the day! It’s safe to assume everyone thoroughly enjoyed this experience!Day 2 was the official kickoff for the Veeam 100 Summit. Rick, Madalina, and Hannes Kasparick started the day with a presentation in which we learned more about the various Community groups managed by each.  If you’re not familiar with e