Feature request - Managed Service Accounts. MSA and GMSA

Availability for the Always-On Enterprise

Feature request - Managed Service Accounts. MSA and GMSA

Veeam Logoby adrian.tanguay » Fri Feb 06, 2015 6:25 pm

I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing. Thanks.

https://technet.microsoft.com/en-us/library/hh831782.aspx

-Adrian
adrian.tanguay
Lurker
 
Posts: 1
Liked: never
Joined: Fri Feb 06, 2015 4:37 pm
Full Name: Adrian Tanguay

Re: Feature request - Managed Service Accounts. MSA and GMS

Veeam Logoby smurteira » Wed Apr 15, 2015 5:20 pm

I was asked the same question today by my management team. Can someone from Veeam chime in and let us know if it is supported?
smurteira
Enthusiast
 
Posts: 26
Liked: never
Joined: Wed Feb 22, 2012 1:45 pm
Full Name: Sergio Murteira

Re: Feature request - Managed Service Accounts. MSA and GMS

Veeam Logoby v.Eremin » Thu Apr 16, 2015 12:24 pm

Could you clarify where you're going to use those accounts? For VSS processing or for Veeam servers/SQL?
v.Eremin
Veeam Software
 
Posts: 13534
Liked: 1002 times
Joined: Fri Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin

Re: Feature request - Managed Service Accounts. MSA and GMS

Veeam Logoby smurteira » Thu Apr 30, 2015 6:00 pm

When enabling application away processing. You have to pass credentials that can backup and restore the DB's at the table level, which seems needs to be an sa account
smurteira
Enthusiast
 
Posts: 26
Liked: never
Joined: Wed Feb 22, 2012 1:45 pm
Full Name: Sergio Murteira

Re: Feature request - Managed Service Accounts. MSA and GMS

Veeam Logoby Vitaliy S. » Fri May 01, 2015 12:11 pm

adrian.tanguay wrote:I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing

Have you tried specifying these accounts in your job configuration already?

smurteira wrote:You have to pass credentials that can backup and restore the DB's at the table level, which seems needs to be an sa account

Yes, that's correct. For SQL Server processing these permissions are required > Latest Patch broke transaction log truncation
Vitaliy S.
Veeam Software
 
Posts: 19767
Liked: 1120 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Feature request - Managed Service Accounts. MSA and GMS

Veeam Logoby ekisner » Tue Aug 04, 2015 7:32 pm

I hate to necro a months old post, but it looks like this is the most recent thread on the subject. Wanted to touch base on this and see if this is a supported configuration. I too believe it would be most easily set up to use a gMSA.
ekisner
Expert
 
Posts: 141
Liked: 31 times
Joined: Thu Jul 26, 2012 8:04 pm
Full Name: Erik Kisner

Re: Feature request - Managed Service Accounts. MSA and GMS

Veeam Logoby lukeroom » Tue Dec 01, 2015 8:30 am

Good Morning,

we have the same requirements.

"I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing."

Support Case: 01184911

What is the current status?
regards
lukeroom
Enthusiast
 
Posts: 31
Liked: never
Joined: Tue Dec 09, 2014 6:41 am
Full Name: Lukas Zimmer

Re: Feature request - Managed Service Accounts. MSA and GMS

Veeam Logoby ekisner » Tue Dec 01, 2015 3:42 pm

I honestly hadn't even thought of using a gMSA for guest OS indexing. That would be wicked useful from a security standpoint.
ekisner
Expert
 
Posts: 141
Liked: 31 times
Joined: Thu Jul 26, 2012 8:04 pm
Full Name: Erik Kisner

Re: Feature request - Managed Service Accounts. MSA and GMS

Veeam Logoby Vitaliy S. » Fri Dec 04, 2015 10:43 am

Hi Lukas, there is no update since my previous post. I have forwarded this info to our QA team for investigation. On a side note, can you please tell me what is the error message you receive when trying to use this account?
Vitaliy S.
Veeam Software
 
Posts: 19767
Liked: 1120 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Feature request - Managed Service Accounts. MSA and GMS

Veeam Logoby bpr-backup » Wed Mar 08, 2017 4:51 pm

I too would like to throw in my request for a gMSA related to Veeam Backup Jobs.

http://pasteboard.co/H0EdpcNPy.png <- Link to image since the forum software doesn't seem to like the img tag.
bpr-backup
Novice
 
Posts: 3
Liked: never
Joined: Fri Jan 29, 2016 5:29 pm

[MERGED] Make option for Guest OS Credentials

Veeam Logoby oleg.scherbinin » Fri Mar 24, 2017 10:14 am

We would highly appreciated once you can add an option for Guest OS credentials to use msa/gmsa accounts. at present moment it is unavailable option to use such accounts
oleg.scherbinin
Novice
 
Posts: 3
Liked: never
Joined: Wed Jul 27, 2016 12:41 pm
Full Name: Oleg Shcherbinin

Re: Feature request - Managed Service Accounts. MSA and GMS

Veeam Logoby v.Eremin » Fri Mar 24, 2017 11:53 am

Your post has been merged into existing thread discussing similar matter.

Currently, it is not possible to leverage such accounts for both running Veeam-specific services and guest processing.

However, we appreciate you taking time and sharing your feedback with us.

Thanks.
v.Eremin
Veeam Software
 
Posts: 13534
Liked: 1002 times
Joined: Fri Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin


Return to Veeam Backup & Replication



Who is online

Users browsing this forum: amannella and 43 guests