Hardening Restore

[strivoli]

PC1 is used by Admin1 and Admin2. Veeam Agent Backups are scheduled on a B&R Repo. Admin2 is able to restore Admin1's Profile and access it. How can I harden the Backup to prevent this behavior?

[Mildur]

Hi Stefano

I assume Admin1 and Admin2 does have local admin permissions? A local administrator can always access all data. Admin2 can simply add permissions for himself to Admin1's profile folder and access the data inside.
If you want to ensure that Admin1 cannot access data from Admin2, you should consider using a second computer or removing local administrative permissions from both users.

If you remove the local admin permission, you can leverage the option "Allow file level recovery without administrative account" in your protection group. This will allow the user to restore files to which they originally had access.

Best,
Fabian