windows user password change on remote server

[uk1984]

We are facing the problem, that on the Veeam ONE server for example for the user management
Windows Users are being used.
Our Veeam ONE Windows Server is not domain joined, like all other servers in our
Backup infrastructure.

So we have the challenge that the users which we authorize for accessing Veeam ONE
Web Client (through their browser) or the Veeam ONE Client (through a Terminalserver)
have not the possibility to change or self-reset their passwords.

And for security reasons we won't allow them Remote Desktop access to the Veeam ONE server.

So I was thinking if it is maybe possible via a remote powershell command/script that they
can change their Windows user password on the Veeam ONE server?

Best Regards
Udo

[david.domask]

Hi Udo,

Think this one is a bit outside of what we can feasibly advise on. Powershell can do this with Set-LocalUser (non-Veeam cmdlet) but I think it requires fairly high permissions that you probably don't want to give. (Though I've not tested)

Do these users actually need to configure Veeam One in any way? If not, consider low-privilege accounts with Read-Only or Power User roles on Veeam One. But for password rotation, it will depend heavily on the resources your team has available and that your security team allows.