Disabling Enterprise Manager Self-Service File Restore Portal

[rleon]

Hi all,

Management has requested that the Enterprise Manager Guest OS FLR feature to be disable:
https://enterprise_manager_host:9443/selfrestore

To be clear, the main EM WebUI should be unaffected. (Users of Portal-Admin, Portal-User and Restore-Operator roles)
They just want the /selfrestore link disabled, so that domain\users who are members of the Windows Administrators group of backed up VMs with File Indexing enabled cannot use it to self-restore files.

Another way to put it:
https://enterprise_manager_host:9443 <----This is fine. This is the main EM WebUI.
https://enterprise_manager_host:9443/selfrestore <----Want this feature disabled. This is the Guest OS FLR Self-Service feature.
https://enterprise_manager_host:9443/backup <----This is fine. This is the vSphere VM Self-Service feature.

Can we disable /selfrestore through editing IIS settings, or through special registry keys on he EM server?

Thanks.

[HannesK]

Hello,
yep, that's possible.

You can prevent local administrators from accessing the self-service file restore functionality. You can do it by disabling Self-Service File Restore Portal. To disable the portal, change the Enterprise Manager registry key. For more information, contact Veeam Customer Support.

shortcut without support: add SelfServiceRestorePortal reg key and restart enterprise manager service

Code: Select all

reg add "HKLM\SOFTWARE\Veeam\Veeam Backup Reporting" /v SelfServiceRestorePortal /t REG_DWORD /d 0 /f

Best regards,
Hannes

[rleon]

Thanks Hannes! I knew there must be a key somewhere.