Skip to main content
  • EN

Hi everyone

We did install in our test environment Veeam VBR V12
I want to test the gMSA.
Installed as subscribed in
https://helpcenter.veeam.com/docs/backup/vsphere/using_gmsa.html?ver=120
Is it possible to run the Veeam Service with gMSA and so yes on which services I should run it on.
Currently the Veeam services on this test VBR are running with the local system account.
I have on a production VBR the services running with a service account worked fine but after the last crittical update I had to change the Veeam NFS service to local system as It did make my SureBackup during the mounting phase.

Looking forward to your comments!
 

I typically change all services for Veeam to use a service account or in your case gMSA account.  Start there and then see if that works but like you said you might need to have other services with a different account.

Have a look here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120

  • Veeam Backup Service (VeeamBackupSvc) and Veeam Backup Enterprise Manager Service (VeeamEnterpriseManagerSvc) must run under the LocalSystem account (default installation settings).

 

So essentially apart from that service, the rest can be changed.

Have a look here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120
Hi Dips,
Did checked it out  but this is a bout Kerberos and not gMSA.
The Veeam Backup Service (VeeamBackupSvc) is on of the services that I run for a while on VBR with a service account without an issue running it with a local system account does sound less secure to me.
 

  • Veeam Backup Service (VeeamBackupSvc) and Veeam Backup Enterprise Manager Service (VeeamEnterpriseManagerSvc) must run under the LocalSystem account (default installation settings).

 

So essentially apart from that service, the rest can be changed.

 

Have a look here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120

  • Veeam Backup Service (VeeamBackupSvc) and Veeam Backup Enterprise Manager Service (VeeamEnterpriseManagerSvc) must run under the LocalSystem account (default installation settings).

 

So essentially apart from that service, the rest can be changed.

However, I know the help says this, but you can change the services to run under another account as I have done this many times without issue.  As long as the service account is in the Local Administrators group on the VBR server it works fine.

Comment


Terms & Conditions