local system vs proxy/service accounts for VBR

[bkain1]

For all the VBR processes, we have some "log on as" a proxy account and some as "local system". Is there a reason to not run as VBR processes as a proxy account (and the same one) for all of the processes? I was told Veeam recommends to run all of the VBR processes as "local system" but I can't find that information.

Thank you

Becki Kain

[PetrM]

Hello,

Local System is recommended to run the main service, for example you may have a look at the screenshot on this page. On the other hand, I don't see any reason against the usage of proxy account as long as it has local administrator privileges on the backup server.

Thanks!

[bkain1]

Can we use a GMSA account, which i guess is a new kind of account, for all of the VBR processes? thank you

[Gostev]

Yes, our QC folks have specifically tested this some time ago. But you will need to specify it manually in each Veeam service's settings using services.msc