Comprehensive data protection for all workloads
pavela
Novice
Posts: 6
Liked: 1 time
Joined: Jun 17, 2014 8:07 am
Full Name: Pawel Bien
Contact:

Veeam B&R console needs admin rights to start

Post by pavela » 1 person likes this post

Launching B&R console always requires the administrator password. It doesn’t matter whether run locally on the B&R server, or remotely - from different computer.
From the User Guide: "The account used to start the Veeam Backup & Replication console must have the Local Administrator permissions on the machine where the console is installed."
When starting the console locally on the B&R server I can understand that more or less. By contrast, I do not understand the meaning of this requirement when you start the console remotely.
Since v9 B&R console connects through TCP port 9392. What is the point of having an ordinary client/console application that needs admin rights to work? From my standpoint, this app is useless for remote work. Our rules do not allow to daily work on accounts with admin privileges.

Pawel
the_mentor
Enthusiast
Posts: 48
Liked: 8 times
Joined: Jul 26, 2012 11:10 pm
Full Name: DeMentor
Contact:

Re: Veeam B&R console needs admin rights to start

Post by the_mentor » 2 people like this post

I think the reason it need admin rights on the local workstation is because it needs permissions to mount restores in c:\VeeamFLR and a few other things.
Where i work we use regular accounts for day to day work and privileged accounts for other stuff so i just run the veeam console as the privileged account using run as a different user.
-DeMentor
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy »

Correct, administrative rights are required for backup files mount (mount server component is installed as a part of remote console installation) and for reading some configuration settings from the registry. If you're not going to perform restores through the console, you can try to give the account rights to registry, probably this will work without elevation then (however, was not tested). Or just use the workaround mentioned above in case the need for restore arises.
Gostev
Chief Product Officer
Posts: 31457
Liked: 6648 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Gostev » 2 people like this post

I've brought this up before v9 was released. Devs have done some research and we should be able to get rid of this requirement in future releases. Thanks!
Steen
Service Provider
Posts: 51
Liked: 3 times
Joined: Mar 13, 2015 1:20 pm
Full Name: Steen
Contact:

[MERGED] B&R Console for non-admins

Post by Steen »

Is there any plans for a version that works for non-admins (local computer)?
Regards Steen
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy »

Hi Steen, yes, there are plans in this regard, please see above.
Steen
Service Provider
Posts: 51
Liked: 3 times
Joined: Mar 13, 2015 1:20 pm
Full Name: Steen
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Steen »

Nice to hear.
To bad Your support doesnt know this information (or wouldnt tell)
Regards Steen
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Our support just doesn't know any time frames. Posting feature requests in these forums is definitely the best way to share your feedback and get understanding on the current feature state.
HolgerE
Influencer
Posts: 11
Liked: 2 times
Joined: Mar 11, 2014 8:37 am
Full Name: Holger Ernst
Contact:

Re: Veeam B&R console needs admin rights to start

Post by HolgerE »

+1 for this feature request (launch Veeam B&R console without admin rights).
Is there already a time frame for the implementation?
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy »

Thank you for the feedback, however we cannot share any particular ETA.
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

[MERGED] Running VBR Console without admin privileges?

Post by hyvokar »

Hi!

I have a scenario where I want our help desk to be able to login from RDS server to veeam backup server and check the backups.
For that I've installed VBR Console on our RDS server. However, starting the console requires elevation. Now I dont want to give admin rights to help desk staff on RDS server, so what should I do?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Veeam backup console required local admin access on the server, please review this topic for more info. On a side note, can you please tell us what actions/operations your help desk staff should do within the backup console?
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar »

Primarily just to check that the backups are OK. I have assigned only viewer role for them.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar »

foggy wrote:Correct, administrative rights are required for backup files mount (mount server component is installed as a part of remote console installation) and for reading some configuration settings from the registry. If you're not going to perform restores through the console, you can try to give the account rights to registry, probably this will work without elevation then (however, was not tested). Or just use the workaround mentioned above in case the need for restore arises.

So where exactly should I add permissions?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

If you need to check whether backups are OK or not, then you can use Veeam ONE that has Veeam B&R monitoring and reporting built-in.
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy »

You can right-click Veeam B&R hive in registry editor, select Permissions and give rights to corresponding accounts. However, again, we haven't tested Veeam B&R console operation without elevation.
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar »

Vitaliy S. wrote:If you need to check whether backups are OK or not, then you can use Veeam ONE that has Veeam B&R monitoring and reporting built-in.
No i cant.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar »

foggy wrote:You can right-click Veeam B&R hive in registry editor, select Permissions and give rights to corresponding accounts. However, again, we haven't tested Veeam B&R console operation without elevation.
Well can you test it?
Server\users has a read permissions to hklm\software\veeam , should that be enough?
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy »

Yes, read access should be enough.
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar »

It's still asking for elevation :(
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam B&R console needs admin rights to start

Post by foggy »

Seems that permissions are required regardless of whether you're going to perform restores or not then and my assumption on the first page was not correct.
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar »

Vitaliy S. wrote:If you need to check whether backups are OK or not, then you can use Veeam ONE that has Veeam B&R monitoring and reporting built-in.
I dont have license for veeam ONE.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

That's a pity, in this case try to take a look at Enterprise Manager that should give basic information about job states, maybe it can help in your case.
Tech471
Influencer
Posts: 11
Liked: 1 time
Joined: Nov 22, 2013 6:23 pm
Full Name: Hank Vare
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Tech471 »

Another idea is to enable email notifications and check the "Notify on warning" and "Notify on failure" boxes under Options > Email settings.

Speaking of which I have a quick question re: warnings vs failures. If a job throws the warning "Guest processing skipped" isn't this essentially the same as a failure? If not what exactly is the difference?
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Hank, It depends on your setting defined over here, it can be both a failure and a warning > Application-Aware Processing
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar »

Vitaliy S. wrote:That's a pity, in this case try to take a look at Enterprise Manager that should give basic information about job states, maybe it can help in your case.
Hi!

We cannot use EM, since it totally messes up our restoration process.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

Can you please clarify that? You can use EM for monitoring, and keep doing restores with your current approach.
hyvokar
Veteran
Posts: 406
Liked: 29 times
Joined: Nov 21, 2014 10:05 pm
Contact:

Re: Veeam B&R console needs admin rights to start

Post by hyvokar »

Our restores via guest interaction proxies will stop functioning, if we install EM. We tried to found the reason for that with your support but with no success. The problem went away the moment we uninstalled EM.
Bed?! Beds for sleepy people! Lets get a kebab and go to a disco!
MS MCSA, MCITP, MCTS, MCP
VMWare VCP5-DCV
Veeam VMCE
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam B&R console needs admin rights to start

Post by Vitaliy S. »

In this case I would suggest to re-open a ticket with our support team to find out the reason for this behavior (or try to deploy EM on another machine, not on the backup server).
salzsieder
Lurker
Posts: 1
Liked: never
Joined: Jul 01, 2015 6:26 am

Re: Veeam B&R console needs admin rights to start

Post by salzsieder »

Are there plans to provide the Veeam console without admin rights? We have absolutely no possibility to assign local administrative rights. With > 240 sockets licensed this is very unfortunate. Thanks.
Post Reply

Who is online

Users browsing this forum: bct44, Ivan_B, Semrush [Bot] and 185 guests