PowerShell script exchange
Post Reply
aantonacci@shci.ca
Influencer
Posts: 21
Liked: never
Joined: Oct 19, 2020 7:42 pm
Full Name: Anthony Antonacci
Contact:

VEEAM 12 Workaround for MFA and PowerShell

Post by aantonacci@shci.ca »

Hi,

We use PowerShell to monitor our backup servers (we run a script once a day and report backup information back to us)

When enabling MFA on Veeam 12, PowerShell Cmdlets don't work,
we can create a read only USER and disable MFA, but PowerShell still won't run.
how do we create a PowerShell session that will bypass MFA?
(or is there another way to read backup sessions and jobs and results without powershell Cmdlets?)

We only need (and want) read privilege.
HannesK
Product Manager
Posts: 14314
Liked: 2889 times
Joined: Sep 01, 2014 11:46 am
Full Name: Hannes Kasparick
Location: Austria
Contact:

Re: VEEAM 12 Workaround for MFA and PowerShell

Post by HannesK »

Hello,
we can create a read only USER and disable MFA, but PowerShell still won't run.
did this ever work? With "read only" you mean a "backup viewer" role?

As far as I see, PowerShell does not work for "backup viewer". No matter whether MFA is enabled or not.
(or is there another way to read backup sessions and jobs and results without powershell Cmdlets?)
VeeamONE has reports and also REST API is available.

https://helpcenter.veeam.com/docs/backu ... llSessions


Best regards,
Hannes
aantonacci@shci.ca
Influencer
Posts: 21
Liked: never
Joined: Oct 19, 2020 7:42 pm
Full Name: Anthony Antonacci
Contact:

Re: VEEAM 12 Workaround for MFA and PowerShell

Post by aantonacci@shci.ca »

"did this ever work? With "read only" you mean a "backup viewer" role?"

We had never tried, it, since Veeam used AD logins, as soon as an unauthorized user gained admin access to the server it was Game over for Veeam backups. (ex: a hacker trying to encrypt you server)
Now that MFA is finally here, we have some protection against this situation.
Obviously, PowerShell wasn't going to permit users to change backup settings with MFA activated, it would have been a huge fail.
But now if you want to protect your backups you can't use powershell

I will look into Veeam one, when we tested it two years ago it wasn't a very complete solution, PowerShell gave us more information and it was quicker to setup .
I will have it installed and see if we can pull backup results from our 30-40 veeam servers...
Post Reply

Who is online

Users browsing this forum: No registered users and 11 guests