Question

Veeam Community- Localhost allowing anyone to login


Userlevel 1

Hello, I have version 12 installed on a Server in our domain.  I have checked the users and roles area and am unable to determine how this is happening, but anytime I enter correct active directory credentials for a user, I am able to authenticate in the console and it works fine? 

 

What can I do to resolve this? 


32 comments

Userlevel 7
Badge +9

Yes Rick, Unfortunately I have no other units that can be used to host the recovery console.  It appears it requires too much memory / cpu etc. to even consider on my end, unless I am wrong. 

 

In this case, get a Mini PC, this works greatly! From what you have said, I can tell your environment is not so big. Therefore, use Acemargic and can serve your needs. This is a need addition to my lab and can vouch for it.

Userlevel 7
Badge +20

I can try to migrate the whole thing to a separate Virtual Machine, but I dont expect that to go well.    I just dont have the hardware. 

 

 

Just be sure that the VM meets the minimum requirements for CPU/RAM, etc.  Best of luck.

Userlevel 1

I can try to migrate the whole thing to a separate Virtual Machine, but I dont expect that to go well.    I just dont have the hardware. 

 

 

Userlevel 7
Badge +20

No settings to transfer as those are stored in the DB on the VBR server.  You just need to install the console and connect to Veeam server.

That would not solve the situation „get the backup server off the domain controller“.

@mschreiberjr

Please see this user guide page. It explains how to migrate the backup server and it’s configuration to another machine.

https://helpcenter.veeam.com/docs/backup/vsphere/vbr_config_migrate.html?ver=120

 

best,

Fabian

 

I get that but if you read the thread he has no other server to use it on.  I was just answering the console question and know he needs to get it off the DC.  🙄

Userlevel 7
Badge +12

No settings to transfer as those are stored in the DB on the VBR server.  You just need to install the console and connect to Veeam server.

That would not solve the situation „get the backup server off the domain controller“.

@mschreiberjr

Please see this user guide page. It explains how to migrate the backup server and it’s configuration to another machine.

https://helpcenter.veeam.com/docs/backup/vsphere/vbr_config_migrate.html?ver=120

 

best,

Fabian

 

Userlevel 7
Badge +20

How do you import settings that just pertain to the console, without having all the stuff transfer ? 

 

 

No settings to transfer as those are stored in the DB on the VBR server.  You just need to install the console and connect to Veeam server.

Userlevel 7
Badge +12

To @Chris.Childerhose point → You can install B&R on a Windows PC (Win 10, 11, etc.). Do everything possible to get it off of the domain controller.

And your production domain

 

Best,

Fabian

Userlevel 1

How do you import settings that just pertain to the console, without having all the stuff transfer ? 

 

 

Userlevel 7
Badge +10

To @Chris.Childerhose point → You can install B&R on a Windows PC (Win 10, 11, etc.). Do everything possible to get it off of the domain controller.

Userlevel 7
Badge +20

Ok, is there a way I can keep the SQL part on the current server and remove the console ?   I dont know how to do that. I see the migration utility in the console to backup and move. 


 

Sorry for all the questions.   

 

Yes just go in to Add/Remove Programs and click on Veeam Backup & Replication - Uninstall.  Then during the uninstall you can select just the console part as it allows selecting single components.

Userlevel 1

Ok, is there a way I can keep the SQL part on the current server and remove the console ?   I dont know how to do that. I see the migration utility in the console to backup and move. 


 

Sorry for all the questions.   

 

Userlevel 7
Badge +20

On my laptop when I run the console to connect to one of my servers over VPN it uses just under 500MB to start but when it gets going that drops.

Userlevel 7
Badge +20

Yes Rick, Unfortunately I have no other units that can be used to host the recovery console.  It appears it requires too much memory / cpu etc. to even consider on my end, unless I am wrong. 

 

If you just need the console that can be installed on any decent machine.  It is the main VBR program and such that needs resources.

Userlevel 1

Yes Rick, Unfortunately I have no other units that can be used to host the recovery console.  It appears it requires too much memory / cpu etc. to even consider on my end, unless I am wrong. 

 

Userlevel 7
Badge +10

Please confirm Veeam B&R is installed on a Domain Controller?

This is a red-flag worst practice. Honestly we should block this on the installer, will put this as a feature request.

Userlevel 7
Badge +20

I added a separate domain admin account ( not the one im logging in with ) and it does not change.   We are on 12.1.1.56   

 

License community free edition.

Well the only thing left is to move it off the DC.  That seems to be the only anomaly here probably causing the issue.

Userlevel 7
Badge +17

 

 

Here is the screenshot.  If I modify this one to say a specific user, it doesnt work any different.  I am using multiple generic accounts with no permissions other than our users group, which is not an admin group at all.   It just lets everyone in.  I am thinking its a bug with version 12.

Well, as Chris stated...add only specific users. 

I’ve never seen Veeam login behavior like you’re experiencing. I guess it could be a bug when installed on a DC. I use v12.1 and do not have that logon issue. I suggest contacting Veeam Support to see if they have a fix and/or if they’ve heard of this issue with Veeam installed on a DC. 

Userlevel 1

I added a separate domain admin account ( not the one im logging in with ) and it does not change.   We are on 12.1.1.56   

 

License community free edition.

Userlevel 7
Badge +20

Also are you on Version 12.1 or 12 RTM?

Userlevel 7
Badge +20

 

 

Here is the screenshot.  If I modify this one to say a specific user, it doesnt work any different.  I am using multiple generic accounts with no permissions other than our users group, which is not an admin group at all.   It just lets everyone in.  I am thinking its a bug with version 12.

You need to get rid of Domain Admins and specify users.

Userlevel 1

 

 

Here is the screenshot.  If I modify this one to say a specific user, it doesnt work any different.  I am using multiple generic accounts with no permissions other than our users group, which is not an admin group at all.   It just lets everyone in.  I am thinking its a bug with version 12.

Userlevel 7
Badge +17

I checked users and roles, I have only one group remaining in there relative to admins.  When I connect to localhost over port 9392, it just allows anyone to sign in. 

 

I am actually using credentials of a regular new user who I just created and they are not a member of any local admin group or group.  Is there anywhere else other than users and roles that I can check for permission settings ?   

No...no other area in Veeam deals with user logons. As Chris suggests, could you share a screenshot, removing/blurring any sensitive org info?

Userlevel 7
Badge +20

I checked users and roles, I have only one group remaining in there relative to admins.  When I connect to localhost over port 9392, it just allows anyone to sign in. 

 

I am actually using credentials of a regular new user who I just created and they are not a member of any local admin group or group.  Is there anywhere else other than users and roles that I can check for permission settings ?   

No there is not as this controls access to the console.  The only other thing I can think of is because of it being on a DC that is the problem right there.  If you can send a screenshot of the Users & Roles screen that might help more as we are just guessing at this point.

Userlevel 1

I checked users and roles, I have only one group remaining in there relative to admins.  When I connect to localhost over port 9392, it just allows anyone to sign in. 

 

I am actually using credentials of a regular new user who I just created and they are not a member of any local admin group or group.  Is there anywhere else other than users and roles that I can check for permission settings ?   

Userlevel 7
Badge +17

By default, the local computer Administrators group is added to the Veeam Users & Roles. All Domain Admins are in local computers’ Administrators group. So, any Domain Admin would be able to login.

Comment