VEEAM 12 Workaround for MFA and PowerShell

[aantonacci@shci.ca]

Hi,

We use PowerShell to monitor our backup servers (we run a script once a day and report backup information back to us)

When enabling MFA on Veeam 12, PowerShell Cmdlets don't work,
we can create a read only USER and disable MFA, but PowerShell still won't run.
how do we create a PowerShell session that will bypass MFA?
(or is there another way to read backup sessions and jobs and results without powershell Cmdlets?)

We only need (and want) read privilege.

[HannesK]

Hello,

we can create a read only USER and disable MFA, but PowerShell still won't run.

did this ever work? With "read only" you mean a "backup viewer" role?

As far as I see, PowerShell does not work for "backup viewer". No matter whether MFA is enabled or not.

(or is there another way to read backup sessions and jobs and results without powershell Cmdlets?)

VeeamONE has reports and also REST API is available.

https://helpcenter.veeam.com/docs/backu ... llSessions


Best regards,
Hannes

[aantonacci@shci.ca]

"did this ever work? With "read only" you mean a "backup viewer" role?"

We had never tried, it, since Veeam used AD logins, as soon as an unauthorized user gained admin access to the server it was Game over for Veeam backups. (ex: a hacker trying to encrypt you server)
Now that MFA is finally here, we have some protection against this situation.
Obviously, PowerShell wasn't going to permit users to change backup settings with MFA activated, it would have been a huge fail.
But now if you want to protect your backups you can't use powershell

I will look into Veeam one, when we tested it two years ago it wasn't a very complete solution, PowerShell gave us more information and it was quicker to setup .
I will have it installed and see if we can pull backup results from our 30-40 veeam servers...