Agent-based backup of Windows, Linux, Max, AIX and Solaris machines.
Post Reply
EcoboostPerformance
Enthusiast
Posts: 27
Liked: 2 times
Joined: May 05, 2020 5:50 pm
Full Name: Ryan
Contact:

Do GMSA Accounts work with Windows Agent Backups?

Post by EcoboostPerformance »

Hello everyone,

I have a question regarding the use of Group Managed Service Account (GMSA) accounts with Windows Agent Backups. Specifically, I'm wondering if GMSA accounts can be used to authenticate backups made with the Windows Agent. (or just vmware)

I tried to add one a server in an existing protection group today and could not select the account (it was not present in the list) even after following the instructions to add it.

Thanks in advance,

Ryan
Mildur
Product Manager
Posts: 10103
Liked: 2696 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Do GMSA Accounts work with Windows Agent Backups?

Post by Mildur »

Hi Ryan

No, today gMSA works for VM backups only.
Agent Management still requires credentials. If you don't want to store credentials in the backup server, you can use protection group with pre-installed agents, in case you don't want to store credentials in the backup server.

Best,
Fabian
Product Management Analyst @ Veeam Software
EcoboostPerformance
Enthusiast
Posts: 27
Liked: 2 times
Joined: May 05, 2020 5:50 pm
Full Name: Ryan
Contact:

Re: Do GMSA Accounts work with Windows Agent Backups?

Post by EcoboostPerformance » 1 person likes this post

Hi Fabian,

Thank you for letting me know that gMSA accounts only work with VM backups and not with Agent Management. I appreciate the clarification.

I was wondering if it would be possible to feature request the ability to use gMSA accounts with Agent Management in a future version of Veeam Backup? This would be helpful for those who want to use GMSA accounts to reduce management complexity and increase their security posture.

Thank you again for your response.

Best regards,
Ryan
Mildur
Product Manager
Posts: 10103
Liked: 2696 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Do GMSA Accounts work with Windows Agent Backups?

Post by Mildur » 1 person likes this post

Hi Ryan

Of course.
We count your vote as a +1 for gMSA and agent backups.

Best,
Fabian
Product Management Analyst @ Veeam Software
VAAirGap706
Lurker
Posts: 1
Liked: never
Joined: Feb 16, 2024 4:56 pm
Full Name: Matthew Anderson
Contact:

Re: Do GMSA Accounts work with Windows Agent Backups?

Post by VAAirGap706 »

I also would like to add a Feature Request for the ability to use gMSA accounts with Agent based backups. Our IT Security team does not want Domain Admin service accounts whenever possible. Trying to backup Domain Controllers and SubCA's require DA accounts for the Application Aware backup.

Thanks and I hope this gets worked out in a new release of v.12.

Best,
Matt
Marco31
Influencer
Posts: 10
Liked: never
Joined: Jun 01, 2017 11:01 am
Contact:

[MERGED] gMSA Support for Server-managed Windows Agents

Post by Marco31 »

I implemented gMSA Accounts for the backups of my Windows VM Guests, to avoid having an Account with local admin rights on my VMs where passwords must be changed manually. But unfortunately, gMSA Accounts are not supported for Server-Managed Backups of Windows Agents.
Is there any chance to have this function in future releases? Pre-Installed Agents in protection groups are a workaround, but have some restrictions compared to Server-Managed Agent backups.
Mildur
Product Manager
Posts: 10103
Liked: 2696 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Do GMSA Accounts work with Windows Agent Backups?

Post by Mildur »

Hello Marco

Today it's not possible to use gMSA for Veeam Agents.
We may introduce gMSA support (or certification based authentication) in a future version. But no promises today about an ETA or targeted version. Your vote for this request is counted.

Workaround today as mentioned by you:
- "protection group with pre-installed agents"

Best,
Fabian
Product Management Analyst @ Veeam Software
aschmieg
Influencer
Posts: 10
Liked: 2 times
Joined: Nov 11, 2021 8:06 pm
Full Name: Tony Schmieg
Contact:

Re: Do GMSA Accounts work with Windows Agent Backups?

Post by aschmieg »

Add my vote to the feature request of GMSA for agent backups. Specifically app aware backup of domain controllers on physical hardware.
This workaround does not work on Windows Core OS.
EricinIT
Service Provider
Posts: 110
Liked: 17 times
Joined: Dec 16, 2020 7:03 pm
Full Name: Eric Henke
Contact:

Re: Do GMSA Accounts work with Windows Agent Backups?

Post by EricinIT »

+1
Post Reply

Who is online

Users browsing this forum: No registered users and 13 guests