• EN
Solved

gMSA V12 services

De Cock
Userlevel 3
Badge

Hi everyone

We did install in our test environment Veeam VBR V12
I want to test the gMSA.
Installed as subscribed in
https://helpcenter.veeam.com/docs/backup/vsphere/using_gmsa.html?ver=120
Is it possible to run the Veeam Service with gMSA and so yes on which services I should run it on.
Currently the Veeam services on this test VBR are running with the local system account.
I have on a production VBR the services running with a service account worked fine but after the last crittical update I had to change the Veeam NFS service to local system as It did make my SureBackup during the mounting phase.

Looking forward to your comments!
 

icon

Best answer by Chris.Childerhose 3 April 2023, 14:45

View original

4 comments

Chris.Childerhose
Userlevel 7
Badge +20

I typically change all services for Veeam to use a service account or in your case gMSA account.  Start there and then see if that works but like you said you might need to have other services with a different account.

Chris Childerhose - VMCA2022 | VMCE2023 | Veeam Vanguard 7* | Veeam Legend 3* | vExpert 5* | VCAP-DCV/VCP-DCV | Object First Ace | Cisco Champion | Twitter: @cchilderhose | Blog Site – https://just-virtualization.tech
dips
Userlevel 7
Badge +7

Have a look here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120

  • Veeam Backup Service (VeeamBackupSvc) and Veeam Backup Enterprise Manager Service (VeeamEnterpriseManagerSvc) must run under the LocalSystem account (default installation settings).

 

So essentially apart from that service, the rest can be changed.

Dipen N. K. | IT Security Specialist | Veeam Legend 2022 - 2023 | www.dipen.co.uk
De Cock
Userlevel 3
Badge

Have a look here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120
Hi Dips,
Did checked it out  but this is a bout Kerberos and not gMSA.
The Veeam Backup Service (VeeamBackupSvc) is on of the services that I run for a while on VBR with a service account without an issue running it with a local system account does sound less secure to me.
 

  • Veeam Backup Service (VeeamBackupSvc) and Veeam Backup Enterprise Manager Service (VeeamEnterpriseManagerSvc) must run under the LocalSystem account (default installation settings).

 

So essentially apart from that service, the rest can be changed.

 

Chris.Childerhose
Userlevel 7
Badge +20

Have a look here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120

  • Veeam Backup Service (VeeamBackupSvc) and Veeam Backup Enterprise Manager Service (VeeamEnterpriseManagerSvc) must run under the LocalSystem account (default installation settings).

 

So essentially apart from that service, the rest can be changed.

However, I know the help says this, but you can change the services to run under another account as I have done this many times without issue.  As long as the service account is in the Local Administrators group on the VBR server it works fine.

Chris Childerhose - VMCA2022 | VMCE2023 | Veeam Vanguard 7* | Veeam Legend 3* | vExpert 5* | VCAP-DCV/VCP-DCV | Object First Ace | Cisco Champion | Twitter: @cchilderhose | Blog Site – https://just-virtualization.tech

Comment


Terms & Conditions