Skip to main content

Hello Veeam Gnus ;)

Got myself totally confused so can someone unpick this for me?

I need to protect a single physical DC which has all FSMO roles. So guessing I don’t need a Protection group as its 1 computer. So do I just create a Veeam Agent job and add the DC ? But can I use a gMSA ? I want to use the Explorer and I am sure I read that you can’t use a gMSA with explorers ? In which case I need to create a domain account and add to BuiltIn Administrators group in AD ? (InfoSec are not going to like that !)

Presume I also will not need a GiP because the Agent job will install the Agent on the DC which will remain persistent ?

Have I got that all right ? I’m seeing double after reading so much !

 

Thanks Guys

 

Phil

 

You are correct on all counts.  The agent will be installed to the DC and that is how VBR will manage doing the backups.  It is unfortunate that gMSA is not supported with the Explorers but it states that right in the documentation.


I forgot to add that as per best practice, the VBR server is in its own workgroup and not part of the domain.


I forgot to add that as per best practice, the VBR server is in its own workgroup and not part of the domain.

So everything still applies from your OP anyway even being in a WG.


Superb ! Thanks Chris - I will crack on.


Superb ! Thanks Chris - I will crack on.

Not a problem.  Let us know how it goes.


Comment