Domain Admin account allow to use agent install and AAIP

[adam900331]

Hy.

I create a backup on some DCs (1 physical and 3 virtual). I created a Domain Admin account to use th agent install on physical and using AAIP. Can I allow this Domain Admin account for these operation somehow? How can I controll it?

Thanks.

[HannesK]

Hello,
as far as I see, you have done everything correctly and I expect it to work.

I'm not really sure what the question is. How to control a domain admin is a topic for a Microsoft forum.

Best regards,
Hannes

[adam900331]

Hy!

I would like to control this Domain Admin account which can connect only the DCs to install agent and create consistent backup. I tried to use the Logon to option on the account:
http://woshub.com/restrict-workstation-logon-ad-users/

I give only the DCs, but when I create a rescan process, the Veeam cannot connect to the DC:
2022. 11. 10. 12:19:09 :: Cannot connect to TST-ADDS01.domain.com Details: An extended error has occurred.

Is it possible to achieve it?

[HannesK]

Hello,
I don't see why "Log On To" would break anything... just to be sure: it's working find without the that setting?

Maybe support can have a look and see what error it really is. Please post the case number for refrerence.

Best regards,
Hannes

[albertwt]

Hi @adam,

What about assigning the Veeam Service account as the local admin of the target computer ?
That should be enough to do the operation.

[adam900331]

Hy Albert.

Thanks, yes I used a dedicated service account which assigned to the local admin.