-
- Enthusiast
- Posts: 27
- Liked: 2 times
- Joined: May 05, 2020 5:50 pm
- Full Name: Ryan
- Contact:
Do GMSA Accounts work with Windows Agent Backups?
Hello everyone,
I have a question regarding the use of Group Managed Service Account (GMSA) accounts with Windows Agent Backups. Specifically, I'm wondering if GMSA accounts can be used to authenticate backups made with the Windows Agent. (or just vmware)
I tried to add one a server in an existing protection group today and could not select the account (it was not present in the list) even after following the instructions to add it.
Thanks in advance,
Ryan
I have a question regarding the use of Group Managed Service Account (GMSA) accounts with Windows Agent Backups. Specifically, I'm wondering if GMSA accounts can be used to authenticate backups made with the Windows Agent. (or just vmware)
I tried to add one a server in an existing protection group today and could not select the account (it was not present in the list) even after following the instructions to add it.
Thanks in advance,
Ryan
-
- Product Manager
- Posts: 10103
- Liked: 2696 times
- Joined: May 13, 2017 4:51 pm
- Full Name: Fabian K.
- Location: Switzerland
- Contact:
Re: Do GMSA Accounts work with Windows Agent Backups?
Hi Ryan
No, today gMSA works for VM backups only.
Agent Management still requires credentials. If you don't want to store credentials in the backup server, you can use protection group with pre-installed agents, in case you don't want to store credentials in the backup server.
Best,
Fabian
No, today gMSA works for VM backups only.
Agent Management still requires credentials. If you don't want to store credentials in the backup server, you can use protection group with pre-installed agents, in case you don't want to store credentials in the backup server.
Best,
Fabian
Product Management Analyst @ Veeam Software
-
- Enthusiast
- Posts: 27
- Liked: 2 times
- Joined: May 05, 2020 5:50 pm
- Full Name: Ryan
- Contact:
Re: Do GMSA Accounts work with Windows Agent Backups?
Hi Fabian,
Thank you for letting me know that gMSA accounts only work with VM backups and not with Agent Management. I appreciate the clarification.
I was wondering if it would be possible to feature request the ability to use gMSA accounts with Agent Management in a future version of Veeam Backup? This would be helpful for those who want to use GMSA accounts to reduce management complexity and increase their security posture.
Thank you again for your response.
Best regards,
Ryan
Thank you for letting me know that gMSA accounts only work with VM backups and not with Agent Management. I appreciate the clarification.
I was wondering if it would be possible to feature request the ability to use gMSA accounts with Agent Management in a future version of Veeam Backup? This would be helpful for those who want to use GMSA accounts to reduce management complexity and increase their security posture.
Thank you again for your response.
Best regards,
Ryan
-
- Product Manager
- Posts: 10103
- Liked: 2696 times
- Joined: May 13, 2017 4:51 pm
- Full Name: Fabian K.
- Location: Switzerland
- Contact:
Re: Do GMSA Accounts work with Windows Agent Backups?
Hi Ryan
Of course.
We count your vote as a +1 for gMSA and agent backups.
Best,
Fabian
Of course.
We count your vote as a +1 for gMSA and agent backups.
Best,
Fabian
Product Management Analyst @ Veeam Software
-
- Lurker
- Posts: 1
- Liked: never
- Joined: Feb 16, 2024 4:56 pm
- Full Name: Matthew Anderson
- Contact:
Re: Do GMSA Accounts work with Windows Agent Backups?
I also would like to add a Feature Request for the ability to use gMSA accounts with Agent based backups. Our IT Security team does not want Domain Admin service accounts whenever possible. Trying to backup Domain Controllers and SubCA's require DA accounts for the Application Aware backup.
Thanks and I hope this gets worked out in a new release of v.12.
Best,
Matt
Thanks and I hope this gets worked out in a new release of v.12.
Best,
Matt
-
- Influencer
- Posts: 10
- Liked: never
- Joined: Jun 01, 2017 11:01 am
- Contact:
[MERGED] gMSA Support for Server-managed Windows Agents
I implemented gMSA Accounts for the backups of my Windows VM Guests, to avoid having an Account with local admin rights on my VMs where passwords must be changed manually. But unfortunately, gMSA Accounts are not supported for Server-Managed Backups of Windows Agents.
Is there any chance to have this function in future releases? Pre-Installed Agents in protection groups are a workaround, but have some restrictions compared to Server-Managed Agent backups.
Is there any chance to have this function in future releases? Pre-Installed Agents in protection groups are a workaround, but have some restrictions compared to Server-Managed Agent backups.
-
- Product Manager
- Posts: 10103
- Liked: 2696 times
- Joined: May 13, 2017 4:51 pm
- Full Name: Fabian K.
- Location: Switzerland
- Contact:
Re: Do GMSA Accounts work with Windows Agent Backups?
Hello Marco
Today it's not possible to use gMSA for Veeam Agents.
We may introduce gMSA support (or certification based authentication) in a future version. But no promises today about an ETA or targeted version. Your vote for this request is counted.
Workaround today as mentioned by you:
- "protection group with pre-installed agents"
Best,
Fabian
Today it's not possible to use gMSA for Veeam Agents.
We may introduce gMSA support (or certification based authentication) in a future version. But no promises today about an ETA or targeted version. Your vote for this request is counted.
Workaround today as mentioned by you:
- "protection group with pre-installed agents"
Best,
Fabian
Product Management Analyst @ Veeam Software
-
- Influencer
- Posts: 10
- Liked: 2 times
- Joined: Nov 11, 2021 8:06 pm
- Full Name: Tony Schmieg
- Contact:
Re: Do GMSA Accounts work with Windows Agent Backups?
Add my vote to the feature request of GMSA for agent backups. Specifically app aware backup of domain controllers on physical hardware.
This workaround does not work on Windows Core OS.
This workaround does not work on Windows Core OS.
-
- Service Provider
- Posts: 110
- Liked: 17 times
- Joined: Dec 16, 2020 7:03 pm
- Full Name: Eric Henke
- Contact:
Who is online
Users browsing this forum: No registered users and 13 guests