Backup Repository Security on domain-joined servers

[Ctek]

Hi,

What would be your recommended compromise for protecting Veeam Backup Files on domain-joined Windows Repositories against accidental or malicious intrusion, deletion, etc?

I understand that the best course of action is to have a Repository with local auth, but what about a compromise, having them on the domain but have a decent amount of protection?

My first is to delete the administrative shares of the server. I have other ideas but I wanted your input.

What are your ideas? Link to other posts on the subjet?

[foggy]

Here are some links on the subject:

Yes, Ransomware can delete your Veeam backups.
New ransomware that targets backups. Are we susceptible?
Crypto protection (ransomware) for repositories