Enterprise manager off domain

[theviking84]

I have kept my veeam server off the domain. Now I want to install enterprise manager.

It would not make sense to put it on the domain either right? I would like the user and group tie ins to have helpdesk people sign in... but it seems this defeats the purpose of keeping actual veeam server off the domain and would let an attacker delete backups from enterprise manager instead of main server...

So will enterprise manager work fine if I install it on same vm as veeam server off of the domain? Just will have to manually manage credentials for it.

[HannesK]

Hello,
sure it will work fine in general (Exchange restore for helpdesk comes into my mind that will not work)

As an alternative to managing credentials locally, you could use SAML with Active Directory Federation Services.

Best regards,
Hannes

[theviking84]

Thank you!