-
- Lurker
- Posts: 1
- Liked: 1 time
- Joined: Feb 06, 2015 4:37 pm
- Full Name: Adrian Tanguay
- Contact:
Feature request - Managed Service Accounts. MSA and GMSA
I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing. Thanks.
https://technet.microsoft.com/en-us/lib ... 31782.aspx
-Adrian
https://technet.microsoft.com/en-us/lib ... 31782.aspx
-Adrian
-
- Enthusiast
- Posts: 26
- Liked: never
- Joined: Feb 22, 2012 1:45 pm
- Full Name: Sergio Murteira
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
I was asked the same question today by my management team. Can someone from Veeam chime in and let us know if it is supported?
-
- Product Manager
- Posts: 20415
- Liked: 2302 times
- Joined: Oct 26, 2012 3:28 pm
- Full Name: Vladimir Eremin
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
Could you clarify where you're going to use those accounts? For VSS processing or for Veeam servers/SQL?
-
- Enthusiast
- Posts: 26
- Liked: never
- Joined: Feb 22, 2012 1:45 pm
- Full Name: Sergio Murteira
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
When enabling application away processing. You have to pass credentials that can backup and restore the DB's at the table level, which seems needs to be an sa account
-
- VP, Product Management
- Posts: 27377
- Liked: 2802 times
- Joined: Mar 30, 2009 9:13 am
- Full Name: Vitaliy Safarov
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
Have you tried specifying these accounts in your job configuration already?adrian.tanguay wrote:I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing
Yes, that's correct. For SQL Server processing these permissions are required > Latest Patch broke transaction log truncationsmurteira wrote:You have to pass credentials that can backup and restore the DB's at the table level, which seems needs to be an sa account
-
- Expert
- Posts: 203
- Liked: 34 times
- Joined: Jul 26, 2012 8:04 pm
- Full Name: Erik Kisner
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
I hate to necro a months old post, but it looks like this is the most recent thread on the subject. Wanted to touch base on this and see if this is a supported configuration. I too believe it would be most easily set up to use a gMSA.
-
- Enthusiast
- Posts: 32
- Liked: never
- Joined: Dec 09, 2014 6:41 am
- Full Name: Lukas Zimmer
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
Good Morning,
we have the same requirements.
"I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing."
Support Case: 01184911
What is the current status?
regards
we have the same requirements.
"I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing."
Support Case: 01184911
What is the current status?
regards
-
- Expert
- Posts: 203
- Liked: 34 times
- Joined: Jul 26, 2012 8:04 pm
- Full Name: Erik Kisner
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
I honestly hadn't even thought of using a gMSA for guest OS indexing. That would be wicked useful from a security standpoint.
-
- VP, Product Management
- Posts: 27377
- Liked: 2802 times
- Joined: Mar 30, 2009 9:13 am
- Full Name: Vitaliy Safarov
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
Hi Lukas, there is no update since my previous post. I have forwarded this info to our QA team for investigation. On a side note, can you please tell me what is the error message you receive when trying to use this account?
-
- Novice
- Posts: 8
- Liked: never
- Joined: Jan 29, 2016 5:29 pm
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
I too would like to throw in my request for a gMSA related to Veeam Backup Jobs.
http://pasteboard.co/H0EdpcNPy.png <- Link to image since the forum software doesn't seem to like the img tag.
http://pasteboard.co/H0EdpcNPy.png <- Link to image since the forum software doesn't seem to like the img tag.
-
- Novice
- Posts: 3
- Liked: never
- Joined: Jul 27, 2016 12:41 pm
- Full Name: Oleg Shcherbinin
- Contact:
[MERGED] Make option for Guest OS Credentials
We would highly appreciated once you can add an option for Guest OS credentials to use msa/gmsa accounts. at present moment it is unavailable option to use such accounts
-
- Product Manager
- Posts: 20415
- Liked: 2302 times
- Joined: Oct 26, 2012 3:28 pm
- Full Name: Vladimir Eremin
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
Your post has been merged into existing thread discussing similar matter.
Currently, it is not possible to leverage such accounts for both running Veeam-specific services and guest processing.
However, we appreciate you taking time and sharing your feedback with us.
Thanks.
Currently, it is not possible to leverage such accounts for both running Veeam-specific services and guest processing.
However, we appreciate you taking time and sharing your feedback with us.
Thanks.
Re: Feature request - Managed Service Accounts. MSA and GMS
Now that 9.5U3 has dropped - or 9.9 to quote Gostev, has there been any movement on this? Is it planned for vNext?
-
- VP, Product Management
- Posts: 27377
- Liked: 2802 times
- Joined: Mar 30, 2009 9:13 am
- Full Name: Vitaliy Safarov
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
John, yes there was some movement. This functionality is still logged for our next updates.
-
- Novice
- Posts: 4
- Liked: never
- Joined: Feb 14, 2018 1:55 pm
- Full Name: Caleb Edwards
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
I would also like to express interest in this functionality.
-
- Veteran
- Posts: 377
- Liked: 86 times
- Joined: Mar 17, 2015 9:50 pm
- Full Name: Aemilianus Kehler
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
I also would like to move to a better user setup. I currently have a standard domain account, with some pretty heavy previledges. It would be nice to move away from a very generic open account that almost anyone of my sysadmins could use. To reconfigure all jobs with dedicated MSA's (2008 R2) or gMSAs (2012 +).
The less amount of accounts I need to store usernames and passwords for are great.
I've recently moved almost all SQL or IIS services to start using gMSAs, and managed to get SharePoint to manage my SP service accounts (Since SharePoint can't even leverage MSAs/gMSAs) so it has its own in-house solution.
This would be the final nail in the coffin for me to move away from almost any and all storing of "service accounts" usernames and passwords.
The less amount of accounts I need to store usernames and passwords for are great.
I've recently moved almost all SQL or IIS services to start using gMSAs, and managed to get SharePoint to manage my SP service accounts (Since SharePoint can't even leverage MSAs/gMSAs) so it has its own in-house solution.
This would be the final nail in the coffin for me to move away from almost any and all storing of "service accounts" usernames and passwords.
-
- Novice
- Posts: 4
- Liked: never
- Joined: Mar 12, 2018 3:18 pm
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
I need this feature as well
-
- Expert
- Posts: 170
- Liked: 15 times
- Joined: Apr 20, 2018 8:12 am
- Full Name: Mats Holm
- Contact:
[MERGED] Group Managed Service Account for Veeam
Hi
I've seen some posts and feature request around MSA and gMSA in this and other forums but I want to ask for my self.
We have a situation where we will have a Veeam Server in central DC and a Veeam Proxy in all remote sites (15 sites). In the local sites there's 2-15 VMs being protected with Veeam and our plan was to have one account for each site like; svc-veeam-itaxxx. This account wolud be granted local administrators rights on all servers in the itaxxx site and can be used for guest interaction in only that site.
Our security/AD responsible wants to use gMSA for all this situations so I ask can we use gMSA together with Veeam telling Veeam to use this specific account?
//mats
I've seen some posts and feature request around MSA and gMSA in this and other forums but I want to ask for my self.
We have a situation where we will have a Veeam Server in central DC and a Veeam Proxy in all remote sites (15 sites). In the local sites there's 2-15 VMs being protected with Veeam and our plan was to have one account for each site like; svc-veeam-itaxxx. This account wolud be granted local administrators rights on all servers in the itaxxx site and can be used for guest interaction in only that site.
Our security/AD responsible wants to use gMSA for all this situations so I ask can we use gMSA together with Veeam telling Veeam to use this specific account?
//mats
-
- VP, Product Management
- Posts: 27377
- Liked: 2802 times
- Joined: Mar 30, 2009 9:13 am
- Full Name: Vitaliy Safarov
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMS
Hi Mats, gMSA are not yet fully supported in the application, but thank you for your FR.
-
- Veeam Legend
- Posts: 230
- Liked: 37 times
- Joined: Nov 04, 2009 2:08 pm
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMSA
Has there already been any progress on this? I see this being requested a lot from larger customers.
Thanks,
Mike
Thanks,
Mike
-
- VP, Product Management
- Posts: 27377
- Liked: 2802 times
- Joined: Mar 30, 2009 9:13 am
- Full Name: Vitaliy Safarov
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMSA
This is still on our radar. Currently the Update 4 is in the feature lock state, but we will discuss this for our next updates.
-
- Veteran
- Posts: 377
- Liked: 86 times
- Joined: Mar 17, 2015 9:50 pm
- Full Name: Aemilianus Kehler
- Contact:
-
- Influencer
- Posts: 17
- Liked: 3 times
- Joined: Sep 23, 2014 12:58 pm
- Full Name: Kevin McDonnell
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMSA
I think this is going to become a necessity as more users look to enhance the security of their environments.
We already have the ability to use SSH keys for Linux system, and really this would be the next logical step for Windows.
We already have the ability to use SSH keys for Linux system, and really this would be the next logical step for Windows.
Kevin McDonnell
-
- VP, Product Management
- Posts: 27377
- Liked: 2802 times
- Joined: Mar 30, 2009 9:13 am
- Full Name: Vitaliy Safarov
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMSA
Kevin, thanks for your feedback. Just for my own education - do you want to use these accounts for services or for AAP as well?
-
- Influencer
- Posts: 20
- Liked: 2 times
- Joined: Oct 01, 2018 3:15 pm
- Full Name: John Lawrence
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMSA
Our company also needs to request that Veeam Backup & Replication support MSA and gMSA. We recently were audited and dinged for any servers that must run using a regular domain account. We have migrated a number of services for other vendors to Group Managed Service Accounts and need Veeam ONE to support as well. Thanks.
Thanks,
John
John
-
- Expert
- Posts: 122
- Liked: 7 times
- Joined: Mar 27, 2012 10:13 pm
- Full Name: Chad Killion
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMSA
Hello- We need this feature as well. Any update? Would like to support using gMSA for both running of the Veeam service as well as for security context for AAP. Thanks.
-
- VP, Product Management
- Posts: 27377
- Liked: 2802 times
- Joined: Mar 30, 2009 9:13 am
- Full Name: Vitaliy Safarov
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMSA
It is still on the discussion table, thanks for the push, it will help me in the discussions with RnD.
-
- Lurker
- Posts: 1
- Liked: 1 time
- Joined: Mar 05, 2019 8:25 pm
- Full Name: Nick Jones
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMSA
GMSA's are in high demand from the security team here. Adding my vote to get this thread for a feature request.
-
- Service Provider
- Posts: 84
- Liked: 13 times
- Joined: Nov 11, 2015 3:50 pm
- Location: Canada
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMSA
Plus 1 here for that feature, we are having an strong internal push to gMSA.
VMCE
-
- Enthusiast
- Posts: 29
- Liked: 3 times
- Joined: Jan 15, 2017 7:39 pm
- Location: France
- Contact:
Re: Feature request - Managed Service Accounts. MSA and GMSA
I'll add my vote as well.
Who is online
Users browsing this forum: Baidu [Spider], Google [Bot], Mildur and 53 guests