Can all veeam services run as a GMSA account?

[Kazz]

Hi,

Does Veeam 12.x support running all of its Windows services as a gMSA account?

Thanks

[Mildur]

Hi Kazz,

Our recommendation is to use the LOCAL SYSTEM account to run Veeam services.
gMSA accounts are supported for guest processing tasks only.

Could you please share what you’re trying to achieve?
If your goal is to improve security, have you had a chance to look at our new Veeam Software Appliance with version 13?

Best,
Fabian

[Kazz]

Hi Fabian

I was hopping to switch all of Veeam services to run as GMSA, i was able to get most of the services to run as GMSA, but the 5 services that are critical would not start with gmsa

1. Veeam Backup Service
2. Veeam Broker
3. Veeam CDP
4. Veeam Cloud Connect
5. Veeam Data Analyzer

[Kazz]

is it because i am using postgress?

Service cannot be started. Veeam.Backup.DBCreator.DatabaseException: SSPI authentication failed for user "CORP\GMSA_Veeam$"
at Veeam.Backup.DBCreator.BackupDatabaseDeployer.CanDeploy(IDatabaseVersion fileVersion)
at Veeam.Backup.DBCreator.BackupDatabaseDeployer.DatabaseDeploy(List`1 changedOptions)
at Veeam.Backup.DBCreator.BackupDatabaseDeployer.Deploy()
at Veeam.Backup.DBManager.SqlRetryableInitializer.Init()
at Veeam.Backup.ServiceLib.CVbServiceImpl..ctor(CVbEnvironment env, CTerminationMediator terminator)
at Veeam.Backup.Service.CVeeamBackupSvc.OnStart(String[] args)
at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

[tyler.jurgens]

Please check this KB article - it should help you out.
https://www.veeam.com/kb4542

[Kazz]

Tyler,

Thanks, I was able to start veeam services after looking at the kb you mentioned and updating the conf file.