Comprehensive data protection for all workloads
Post Reply
wkl
Enthusiast
Posts: 34
Liked: never
Joined: Jan 31, 2018 8:19 am
Full Name: wkl
Contact:

application-aware processing request admin right

Post by wkl »

Hi,

I would like to backup AD server, but it seem it request domain admin permission for enable application-aware processing. Can i use backup operator instead of domain admin?

ID# 02393764]

Thanks and regards
dennis
veremin
Product Manager
Posts: 20284
Liked: 2258 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: application-aware processing request admin right

Post by veremin »

The account specified for guest OS processing must have local admin privileges (check this page for more information). Thanks.
wkl
Enthusiast
Posts: 34
Liked: never
Joined: Jan 31, 2018 8:19 am
Full Name: wkl
Contact:

Re: application-aware processing request admin right

Post by wkl »

Hi,

Yes I know. However, how to make server can run in backup client permission? As window is already created backup role, I think it may have some way to solve this issue. It is because, backup server have much password is not good. Also, we always auto change root password. Therefore, we have some difficult.

If we are backup successfully, I think we may use this backup image to recreate os processing.

Thanks
foggy
Veeam Software
Posts: 21073
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: application-aware processing request admin right

Post by foggy »

Not sure I understand your request. If you want to have consistent backup of your domain controller, you need to provide domain admin account and enable application-aware image processing.
wkl
Enthusiast
Posts: 34
Liked: never
Joined: Jan 31, 2018 8:19 am
Full Name: wkl
Contact:

Re: application-aware processing request admin right

Post by wkl »

Can veeam consider to use other way to backup? For example, per-install agent with admin right. Thus, backup server no need password to connect server and backup. It is because, Dominic admin account in backup server have security concerns
veremin
Product Manager
Posts: 20284
Liked: 2258 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: application-aware processing request admin right

Post by veremin »

We're already installing runtime coordination process inside a guest to perform application-consistent backups. In order to do that we need account with certain set of permissions.

Since the coordination process is not persistent, meaning that it gets removed as soon as the job finishes, we have to store the credentials on a backup server.

Can you clarify the security concerns you have?

Thanks.
wkl
Enthusiast
Posts: 34
Liked: never
Joined: Jan 31, 2018 8:19 am
Full Name: wkl
Contact:

Re: application-aware processing request admin right

Post by wkl »

we need account with certain set of permissions <--we look for a solution thatit do not require admin right. IS it possible that veeam can change window server setting to fit our requirement? if agent (with admin right) can provide related feature. For example, use access web page , which root permission is not required.
veremin
Product Manager
Posts: 20284
Liked: 2258 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: application-aware processing request admin right

Post by veremin »

Currently the only way to have application consistent backup is to use account with local admin privileges.

As to your feature request, consider it noted.

Thanks.
wkl
Enthusiast
Posts: 34
Liked: never
Joined: Jan 31, 2018 8:19 am
Full Name: wkl
Contact:

Re: application-aware processing request admin right

Post by wkl »

Thanks.
Post Reply

Who is online

Users browsing this forum: No registered users and 156 guests