Hi everyone
We did install in our test environment Veeam VBR V12
I want to test the gMSA.
Installed as subscribed in
https://helpcenter.veeam.com/docs/backup/vsphere/using_gmsa.html?ver=120
Is it possible to run the Veeam Service with gMSA and so yes on which services I should run it on.
Currently the Veeam services on this test VBR are running with the local system account.
I have on a production VBR the services running with a service account worked fine but after the last crittical update I had to change the Veeam NFS service to local system as It did make my SureBackup during the mounting phase.
Looking forward to your comments!
Solved
gMSA V12 services
Best answer by Chris.Childerhose
dips wrote:
Have a look here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120
- Veeam Backup Service (VeeamBackupSvc) and Veeam Backup Enterprise Manager Service (VeeamEnterpriseManagerSvc) must run under the LocalSystem account (default installation settings).
So essentially apart from that service, the rest can be changed.
However, I know the help says this, but you can change the services to run under another account as I have done this many times without issue. As long as the service account is in the Local Administrators group on the VBR server it works fine.
+21I typically change all services for Veeam to use a service account or in your case gMSA account. Start there and then see if that works but like you said you might need to have other services with a different account.
Chris Childerhose - VMCA2024 | VMCE2023 | VMCE-SP2024 | Veeam Vanguard 8* | Veeam Legend 5* | vExpert 6* | VCAP-DCV/VCP-DCV | Object First Ace | Cisco Champion | Twitter: @cchilderhose | Blog Site – https://just-virtualization.tech
+7Have a look here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120
- Veeam Backup Service (VeeamBackupSvc) and Veeam Backup Enterprise Manager Service (VeeamEnterpriseManagerSvc) must run under the LocalSystem account (default installation settings).
So essentially apart from that service, the rest can be changed.
Dipen N. K. | IT Security Specialist | Veeam Legend 2022 - 2025 | Cyber Security Space VUG Leader
dips wrote:
Have a look here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120
Hi Dips,
Did checked it out but this is a bout Kerberos and not gMSA.
The Veeam Backup Service (VeeamBackupSvc) is on of the services that I run for a while on VBR with a service account without an issue running it with a local system account does sound less secure to me.
- Veeam Backup Service (VeeamBackupSvc) and Veeam Backup Enterprise Manager Service (VeeamEnterpriseManagerSvc) must run under the LocalSystem account (default installation settings).
So essentially apart from that service, the rest can be changed.
+21dips wrote:
Have a look here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120
- Veeam Backup Service (VeeamBackupSvc) and Veeam Backup Enterprise Manager Service (VeeamEnterpriseManagerSvc) must run under the LocalSystem account (default installation settings).
So essentially apart from that service, the rest can be changed.
However, I know the help says this, but you can change the services to run under another account as I have done this many times without issue. As long as the service account is in the Local Administrators group on the VBR server it works fine.
Chris Childerhose - VMCA2024 | VMCE2023 | VMCE-SP2024 | Veeam Vanguard 8* | Veeam Legend 5* | vExpert 6* | VCAP-DCV/VCP-DCV | Object First Ace | Cisco Champion | Twitter: @cchilderhose | Blog Site – https://just-virtualization.tech
Comment
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.