Launch Veeam Endpoint service as a different user - how???

Backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)

Launch Veeam Endpoint service as a different user - how???

Veeam Logoby riy » Thu Nov 17, 2016 10:20 pm

Hello!
By security reasons, I need to launch Veeam Endpoint Backup service not as Local System (as it launches by default), but as a different user (for example, backup). I change this in Computer Management -> Services, but the service can not start. It stops with the message: "The Veeam Endpoint Backup service on Local Computer started and than stopped. Some services stop automatically if they are not in use by other services or programs."
But I`ve read on this forum, that it can be done!
Can anyone help?
riy
Novice
 
Posts: 5
Liked: never
Joined: Thu Nov 17, 2016 10:04 pm

Re: Launch Veeam Endpoint service as a different user - how?

Veeam Logoby Dima P. » Thu Nov 17, 2016 10:31 pm

Hi riy,

I believe this was asked before and switching local system account to local admin works. Feel free to test it and let us know the results. Could you clarify what policy you have in your company – this might help us to understand the use case better.

P.S. A friendly reminder - testing should not be performed on a production server.
Dima P.
Veeam Software
 
Posts: 6261
Liked: 441 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov

Re: Launch Veeam Endpoint service as a different user - how?

Veeam Logoby riy » Thu Nov 17, 2016 11:30 pm

That was asked, but for Enterprise Veeam services.
In my case it`s quick and simple: i`m creating a local administrator account "backup" with some password, and after that change the user name the service logs on with. Restart it, it shuts down and does not start with the message.
riy
Novice
 
Posts: 5
Liked: never
Joined: Thu Nov 17, 2016 10:04 pm

Re: Launch Veeam Endpoint service as a different user - how?

Veeam Logoby riy » Fri Nov 18, 2016 1:50 pm

So, my task is to backup a local host and make my backups unavailable to ransomware. I can see 2 ways to do this:
1. Launch Veeam Endpoint Backup service as a different user and give this user a permission to have access to backups store folder. Other users and Local System must have no access there;
2. Use a network share on a local computer, and backup to it with some credentials, that only have access to backup store.
None of this is working.
riy
Novice
 
Posts: 5
Liked: never
Joined: Thu Nov 17, 2016 10:04 pm

Re: Launch Veeam Endpoint service as a different user - how?

Veeam Logoby Dima P. » Fri Nov 18, 2016 5:32 pm

riy,

And destination would be a local drive or USB drive, right?
Dima P.
Veeam Software
 
Posts: 6261
Liked: 441 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov

Re: Launch Veeam Endpoint service as a different user - how?

Veeam Logoby riy » Fri Nov 18, 2016 9:36 pm

A local drive, yes.
riy
Novice
 
Posts: 5
Liked: never
Joined: Thu Nov 17, 2016 10:04 pm

Re: Launch Veeam Endpoint service as a different user - how?

Veeam Logoby riy » Mon Nov 28, 2016 12:20 am

So, really no one knows how to do it?! It`s very strange it is not working by default, there must be a simple solution!
riy
Novice
 
Posts: 5
Liked: never
Joined: Thu Nov 17, 2016 10:04 pm

Re: Launch Veeam Endpoint service as a different user - how?

Veeam Logoby Dima P. » Fri Dec 09, 2016 3:16 pm

Hi,

I am sorry to keep you waiting. Just tested an option to start service under different account. In my case I used personal local admin account and it worked. Theoretically, you can create a dedicated local admin account, setup permissions to the repository, use it to start VEB service and that’s it.
Dima P.
Veeam Software
 
Posts: 6261
Liked: 441 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov

Re: Launch Veeam Endpoint service as a different user - how?

Veeam Logoby tgcs » Thu Mar 09, 2017 3:18 pm

You say this worked when you ran it as a Local Admin account, what about a Domain Admin account? We have been testing Veeam Endpoint Backup Free but can't get the service to run as anything other than 'Local System' on our domain controller. Thanks.
tgcs
Lurker
 
Posts: 1
Liked: never
Joined: Thu Mar 09, 2017 3:14 pm
Full Name: Tom Gibson


Return to Veeam Agent for Windows



Who is online

Users browsing this forum: No registered users and 11 guests