Comprehensive data protection for all workloads
adrian.tanguay
Lurker
Posts: 1
Liked: 1 time
Joined: Feb 06, 2015 4:37 pm
Full Name: Adrian Tanguay
Contact:

Feature request - Managed Service Accounts. MSA and GMSA

Post by adrian.tanguay » 1 person likes this post

I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing. Thanks.

https://technet.microsoft.com/en-us/lib ... 31782.aspx

-Adrian
smurteira
Enthusiast
Posts: 26
Liked: never
Joined: Feb 22, 2012 1:45 pm
Full Name: Sergio Murteira
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by smurteira »

I was asked the same question today by my management team. Can someone from Veeam chime in and let us know if it is supported?
veremin
Product Manager
Posts: 20415
Liked: 2302 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by veremin »

Could you clarify where you're going to use those accounts? For VSS processing or for Veeam servers/SQL?
smurteira
Enthusiast
Posts: 26
Liked: never
Joined: Feb 22, 2012 1:45 pm
Full Name: Sergio Murteira
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by smurteira »

When enabling application away processing. You have to pass credentials that can backup and restore the DB's at the table level, which seems needs to be an sa account
Vitaliy S.
VP, Product Management
Posts: 27377
Liked: 2802 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by Vitaliy S. »

adrian.tanguay wrote:I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing
Have you tried specifying these accounts in your job configuration already?
smurteira wrote:You have to pass credentials that can backup and restore the DB's at the table level, which seems needs to be an sa account
Yes, that's correct. For SQL Server processing these permissions are required > Latest Patch broke transaction log truncation
ekisner
Expert
Posts: 203
Liked: 34 times
Joined: Jul 26, 2012 8:04 pm
Full Name: Erik Kisner
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by ekisner »

I hate to necro a months old post, but it looks like this is the most recent thread on the subject. Wanted to touch base on this and see if this is a supported configuration. I too believe it would be most easily set up to use a gMSA.
lukeroom
Enthusiast
Posts: 32
Liked: never
Joined: Dec 09, 2014 6:41 am
Full Name: Lukas Zimmer
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by lukeroom »

Good Morning,

we have the same requirements.

"I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing."

Support Case: 01184911

What is the current status?
regards
ekisner
Expert
Posts: 203
Liked: 34 times
Joined: Jul 26, 2012 8:04 pm
Full Name: Erik Kisner
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by ekisner »

I honestly hadn't even thought of using a gMSA for guest OS indexing. That would be wicked useful from a security standpoint.
Vitaliy S.
VP, Product Management
Posts: 27377
Liked: 2802 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by Vitaliy S. »

Hi Lukas, there is no update since my previous post. I have forwarded this info to our QA team for investigation. On a side note, can you please tell me what is the error message you receive when trying to use this account?
bpr-backup
Novice
Posts: 8
Liked: never
Joined: Jan 29, 2016 5:29 pm
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by bpr-backup »

I too would like to throw in my request for a gMSA related to Veeam Backup Jobs.

http://pasteboard.co/H0EdpcNPy.png <- Link to image since the forum software doesn't seem to like the img tag.
oleg.scherbinin
Novice
Posts: 3
Liked: never
Joined: Jul 27, 2016 12:41 pm
Full Name: Oleg Shcherbinin
Contact:

[MERGED] Make option for Guest OS Credentials

Post by oleg.scherbinin »

We would highly appreciated once you can add an option for Guest OS credentials to use msa/gmsa accounts. at present moment it is unavailable option to use such accounts
veremin
Product Manager
Posts: 20415
Liked: 2302 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by veremin »

Your post has been merged into existing thread discussing similar matter.

Currently, it is not possible to leverage such accounts for both running Veeam-specific services and guest processing.

However, we appreciate you taking time and sharing your feedback with us.

Thanks.
john.brodhurst

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by john.brodhurst »

Now that 9.5U3 has dropped - or 9.9 to quote Gostev, has there been any movement on this? Is it planned for vNext?
Vitaliy S.
VP, Product Management
Posts: 27377
Liked: 2802 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by Vitaliy S. »

John, yes there was some movement. This functionality is still logged for our next updates.
cedwards_BREMCO
Novice
Posts: 4
Liked: never
Joined: Feb 14, 2018 1:55 pm
Full Name: Caleb Edwards
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by cedwards_BREMCO »

I would also like to express interest in this functionality.
Zew
Veteran
Posts: 377
Liked: 86 times
Joined: Mar 17, 2015 9:50 pm
Full Name: Aemilianus Kehler
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by Zew »

I also would like to move to a better user setup. I currently have a standard domain account, with some pretty heavy previledges. It would be nice to move away from a very generic open account that almost anyone of my sysadmins could use. To reconfigure all jobs with dedicated MSA's (2008 R2) or gMSAs (2012 +).

The less amount of accounts I need to store usernames and passwords for are great.

I've recently moved almost all SQL or IIS services to start using gMSAs, and managed to get SharePoint to manage my SP service accounts (Since SharePoint can't even leverage MSAs/gMSAs) so it has its own in-house solution.

This would be the final nail in the coffin for me to move away from almost any and all storing of "service accounts" usernames and passwords.
nmaas87
Novice
Posts: 4
Liked: never
Joined: Mar 12, 2018 3:18 pm
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by nmaas87 »

I need this feature as well
mrholm
Expert
Posts: 170
Liked: 15 times
Joined: Apr 20, 2018 8:12 am
Full Name: Mats Holm
Contact:

[MERGED] Group Managed Service Account for Veeam

Post by mrholm »

Hi
I've seen some posts and feature request around MSA and gMSA in this and other forums but I want to ask for my self.
We have a situation where we will have a Veeam Server in central DC and a Veeam Proxy in all remote sites (15 sites). In the local sites there's 2-15 VMs being protected with Veeam and our plan was to have one account for each site like; svc-veeam-itaxxx. This account wolud be granted local administrators rights on all servers in the itaxxx site and can be used for guest interaction in only that site.
Our security/AD responsible wants to use gMSA for all this situations so I ask can we use gMSA together with Veeam telling Veeam to use this specific account?

//mats
Vitaliy S.
VP, Product Management
Posts: 27377
Liked: 2802 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by Vitaliy S. »

Hi Mats, gMSA are not yet fully supported in the application, but thank you for your FR.
mdiver
Veeam Legend
Posts: 230
Liked: 37 times
Joined: Nov 04, 2009 2:08 pm
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by mdiver »

Has there already been any progress on this? I see this being requested a lot from larger customers.

Thanks,
Mike
Vitaliy S.
VP, Product Management
Posts: 27377
Liked: 2802 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by Vitaliy S. »

This is still on our radar. Currently the Update 4 is in the feature lock state, but we will discuss this for our next updates.
Zew
Veteran
Posts: 377
Liked: 86 times
Joined: Mar 17, 2015 9:50 pm
Full Name: Aemilianus Kehler
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by Zew »

Ouch....
kevin.mcdonnell
Influencer
Posts: 17
Liked: 3 times
Joined: Sep 23, 2014 12:58 pm
Full Name: Kevin McDonnell
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by kevin.mcdonnell »

I think this is going to become a necessity as more users look to enhance the security of their environments.

We already have the ability to use SSH keys for Linux system, and really this would be the next logical step for Windows.
Kevin McDonnell
Vitaliy S.
VP, Product Management
Posts: 27377
Liked: 2802 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by Vitaliy S. »

Kevin, thanks for your feedback. Just for my own education - do you want to use these accounts for services or for AAP as well?
jklaw91
Influencer
Posts: 20
Liked: 2 times
Joined: Oct 01, 2018 3:15 pm
Full Name: John Lawrence
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by jklaw91 »

Our company also needs to request that Veeam Backup & Replication support MSA and gMSA. We recently were audited and dinged for any servers that must run using a regular domain account. We have migrated a number of services for other vendors to Group Managed Service Accounts and need Veeam ONE to support as well. Thanks.
Thanks,

John
electricd7
Expert
Posts: 122
Liked: 7 times
Joined: Mar 27, 2012 10:13 pm
Full Name: Chad Killion
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by electricd7 »

Hello- We need this feature as well. Any update? Would like to support using gMSA for both running of the Veeam service as well as for security context for AAP. Thanks.
Vitaliy S.
VP, Product Management
Posts: 27377
Liked: 2802 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by Vitaliy S. »

It is still on the discussion table, thanks for the push, it will help me in the discussions with RnD.
jones.nickolas
Lurker
Posts: 1
Liked: 1 time
Joined: Mar 05, 2019 8:25 pm
Full Name: Nick Jones
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by jones.nickolas » 1 person likes this post

GMSA's are in high demand from the security team here. Adding my vote to get this thread for a feature request.
Ctek
Service Provider
Posts: 84
Liked: 13 times
Joined: Nov 11, 2015 3:50 pm
Location: Canada
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by Ctek »

Plus 1 here for that feature, we are having an strong internal push to gMSA.
VMCE
Salm
Enthusiast
Posts: 29
Liked: 3 times
Joined: Jan 15, 2017 7:39 pm
Location: France
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by Salm »

I'll add my vote as well.
Post Reply

Who is online

Users browsing this forum: Baidu [Spider], Google [Bot], Mildur and 53 guests