Skip to main content
  • EN
Solved

Mejores practicas Veeam y Active Directory

Buenas tardes estimados,

 

Mejores practicas Veeam y su integración aun Dominio Active Directory

 

Una consulta, estamos evaluado la implementación de Veeam y se mencionó que no se recomienda su integración al dominio. ¿Esto es cierto? 

 

Me gustaría tener claro este punto, ya que de mi parte he visto varios artículos que mencionar su operatividad.

2.- ¿Es recomendable integrar Veeam al Dominio Active Directory? Y si es recomendable, donde puedo obtener esa confirmación oficial?

 

Agradecido de antemano por la ayuda que me puedan brindar,

 

Saludos cordiales,

8 comments

coolsport00
Userlevel 7
Badge +19

Hi @Armando -

Veeam Best practice is to use a separate management domain for Veeam, different from your production domain. 

See the Veeam Best Practice guide for more information:

https://bp.veeam.com/security/Design-and-implementation/Hardening/Workgroup_or_Domain.html

Shane Williford - Veeam VMCA/VMCE | Veeam Legend | VUG Leader | VCP-DCV | Twitter: @coolsport00
Iams3le
Userlevel 7
Badge +9

Hi @Armando, you will find this guide very useful as it discusses your concern in detail: https://bp.veeam.com/security/Design-and-implementation/Hardening/Workgroup_or_Domain.html

[Microsoft MVP | Veeam Legend 5* | VMware vExpert 4* | Cisco Champion 3* | Object First Ace]
Chris.Childerhose
Userlevel 7
Badge +21

I am in the process of doing this currently in our datacenters.  I followed the BP guide posted which helps but also needed to do some reading on domain trusts.  It works very well so far and no issue with good planning.

Chris Childerhose - VMCA2024 | VMCE2023 | Veeam Vanguard 7* | Veeam Legend 4* | vExpert 5* | VCAP-DCV/VCP-DCV | Object First Ace | Cisco Champion | Twitter: @cchilderhose | Blog Site – https://just-virtualization.tech
A
Userlevel 1

Hello dear,

Thank you very much for your prompt response.

 

I understand that it is recommended, but creating a sub-domain in my forest is only one-way?

 

Regards

Chris.Childerhose
Userlevel 7
Badge +21

Hello dear,

Thank you very much for your prompt response.

 

I understand that it is recommended, but creating a sub-domain in my forest is only one-way?

 

Regards

I believe a subdomain will have a two-way trust and why a separate domain is the better option cause you can then set a one-way trust.  That is what I have done for our environment.

Chris Childerhose - VMCA2024 | VMCE2023 | Veeam Vanguard 7* | Veeam Legend 4* | vExpert 5* | VCAP-DCV/VCP-DCV | Object First Ace | Cisco Champion | Twitter: @cchilderhose | Blog Site – https://just-virtualization.tech
A
Userlevel 1

I understand, then I will need to add 2 new Servers to the prerequisites to create this Veeam domain.

Sincerely, thank you all very much for answering me quickly.

Greetings to all...

Andanet
Userlevel 7
Badge +10

Hi @Armando 

Permit me to add a little bit about domains.

If you create a domain in the existing forest it's automatically linked with two-way relationships.

Best practice is to create a new AD forest with one way trust as @Chris.Childerhose wrote.

Regards 

Antonio D'Andrea | VMCE 2021 | VMCA 2022 | VMTSP2024 | Veeam Legend 2023/2024 | VUG Italy Leader | VCP6-DCV | I want it written on my tombstone "Please start a restore to the last valid backup"
A
Userlevel 1

Hi Andanet

Yes, I totally agree, thank you very much!! I will also bring to the table those tips indicated in the URL: https://bp.veeam.com/security/Design-and-implementation/Hardening/Workgroup_or_Domain.html Regards!!

Comment


Terms & Conditions