Comprehensive data protection for all workloads
Post Reply
adrian.tanguay
Lurker
Posts: 1
Liked: 1 time
Joined: Feb 06, 2015 4:37 pm
Full Name: Adrian Tanguay
Contact:

Feature request - Managed Service Accounts. MSA and GMSA

Post by adrian.tanguay » Feb 06, 2015 6:25 pm 1 person likes this post

I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing. Thanks.

https://technet.microsoft.com/en-us/lib ... 31782.aspx

-Adrian

smurteira
Enthusiast
Posts: 26
Liked: never
Joined: Feb 22, 2012 1:45 pm
Full Name: Sergio Murteira
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by smurteira » Apr 15, 2015 5:20 pm

I was asked the same question today by my management team. Can someone from Veeam chime in and let us know if it is supported?

veremin
Product Manager
Posts: 16666
Liked: 1390 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by veremin » Apr 16, 2015 12:24 pm

Could you clarify where you're going to use those accounts? For VSS processing or for Veeam servers/SQL?

smurteira
Enthusiast
Posts: 26
Liked: never
Joined: Feb 22, 2012 1:45 pm
Full Name: Sergio Murteira
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by smurteira » Apr 30, 2015 6:00 pm

When enabling application away processing. You have to pass credentials that can backup and restore the DB's at the table level, which seems needs to be an sa account

Vitaliy S.
Product Manager
Posts: 22757
Liked: 1519 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by Vitaliy S. » May 01, 2015 12:11 pm

adrian.tanguay wrote:I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing
Have you tried specifying these accounts in your job configuration already?
smurteira wrote:You have to pass credentials that can backup and restore the DB's at the table level, which seems needs to be an sa account
Yes, that's correct. For SQL Server processing these permissions are required > Latest Patch broke transaction log truncation

ekisner
Expert
Posts: 194
Liked: 33 times
Joined: Jul 26, 2012 8:04 pm
Full Name: Erik Kisner
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by ekisner » Aug 04, 2015 7:32 pm

I hate to necro a months old post, but it looks like this is the most recent thread on the subject. Wanted to touch base on this and see if this is a supported configuration. I too believe it would be most easily set up to use a gMSA.

lukeroom
Enthusiast
Posts: 32
Liked: never
Joined: Dec 09, 2014 6:41 am
Full Name: Lukas Zimmer
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by lukeroom » Dec 01, 2015 8:30 am

Good Morning,

we have the same requirements.

"I would like the capability to use MSA or gMSA accounts to both run the Veeam services as well as use it for Guest OS file system indexing."

Support Case: 01184911

What is the current status?
regards

ekisner
Expert
Posts: 194
Liked: 33 times
Joined: Jul 26, 2012 8:04 pm
Full Name: Erik Kisner
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by ekisner » Dec 01, 2015 3:42 pm

I honestly hadn't even thought of using a gMSA for guest OS indexing. That would be wicked useful from a security standpoint.

Vitaliy S.
Product Manager
Posts: 22757
Liked: 1519 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by Vitaliy S. » Dec 04, 2015 10:43 am

Hi Lukas, there is no update since my previous post. I have forwarded this info to our QA team for investigation. On a side note, can you please tell me what is the error message you receive when trying to use this account?

bpr-backup
Novice
Posts: 7
Liked: never
Joined: Jan 29, 2016 5:29 pm
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by bpr-backup » Mar 08, 2017 4:51 pm

I too would like to throw in my request for a gMSA related to Veeam Backup Jobs.

http://pasteboard.co/H0EdpcNPy.png <- Link to image since the forum software doesn't seem to like the img tag.

oleg.scherbinin
Novice
Posts: 3
Liked: never
Joined: Jul 27, 2016 12:41 pm
Full Name: Oleg Shcherbinin
Contact:

[MERGED] Make option for Guest OS Credentials

Post by oleg.scherbinin » Mar 24, 2017 10:14 am

We would highly appreciated once you can add an option for Guest OS credentials to use msa/gmsa accounts. at present moment it is unavailable option to use such accounts

veremin
Product Manager
Posts: 16666
Liked: 1390 times
Joined: Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by veremin » Mar 24, 2017 11:53 am

Your post has been merged into existing thread discussing similar matter.

Currently, it is not possible to leverage such accounts for both running Veeam-specific services and guest processing.

However, we appreciate you taking time and sharing your feedback with us.

Thanks.

john.brodhurst
Influencer
Posts: 22
Liked: 1 time
Joined: May 11, 2012 12:16 pm
Full Name: John Brodhurst
Location: Canterbury, UK
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by john.brodhurst » Dec 28, 2017 9:45 am

Now that 9.5U3 has dropped - or 9.9 to quote Gostev, has there been any movement on this? Is it planned for vNext?

Vitaliy S.
Product Manager
Posts: 22757
Liked: 1519 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by Vitaliy S. » Dec 29, 2017 11:32 am

John, yes there was some movement. This functionality is still logged for our next updates.

cedwards_BREMCO
Lurker
Posts: 2
Liked: never
Joined: Feb 14, 2018 1:55 pm
Full Name: Caleb Edwards
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by cedwards_BREMCO » Feb 14, 2018 1:58 pm

I would also like to express interest in this functionality.

Zew
Expert
Posts: 214
Liked: 42 times
Joined: Mar 17, 2015 9:50 pm
Full Name: Aemilianus Kehler
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by Zew » Feb 14, 2018 8:10 pm

I also would like to move to a better user setup. I currently have a standard domain account, with some pretty heavy previledges. It would be nice to move away from a very generic open account that almost anyone of my sysadmins could use. To reconfigure all jobs with dedicated MSA's (2008 R2) or gMSAs (2012 +).

The less amount of accounts I need to store usernames and passwords for are great.

I've recently moved almost all SQL or IIS services to start using gMSAs, and managed to get SharePoint to manage my SP service accounts (Since SharePoint can't even leverage MSAs/gMSAs) so it has its own in-house solution.

This would be the final nail in the coffin for me to move away from almost any and all storing of "service accounts" usernames and passwords.

nmaas87
Novice
Posts: 4
Liked: never
Joined: Mar 12, 2018 3:18 pm
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by nmaas87 » Mar 13, 2018 8:12 am

I need this feature as well

mrholm
Enthusiast
Posts: 53
Liked: 3 times
Joined: Apr 20, 2018 8:12 am
Full Name: Mats Holm
Contact:

[MERGED] Group Managed Service Account for Veeam

Post by mrholm » May 22, 2018 11:09 am

Hi
I've seen some posts and feature request around MSA and gMSA in this and other forums but I want to ask for my self.
We have a situation where we will have a Veeam Server in central DC and a Veeam Proxy in all remote sites (15 sites). In the local sites there's 2-15 VMs being protected with Veeam and our plan was to have one account for each site like; svc-veeam-itaxxx. This account wolud be granted local administrators rights on all servers in the itaxxx site and can be used for guest interaction in only that site.
Our security/AD responsible wants to use gMSA for all this situations so I ask can we use gMSA together with Veeam telling Veeam to use this specific account?

//mats

Vitaliy S.
Product Manager
Posts: 22757
Liked: 1519 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMS

Post by Vitaliy S. » May 22, 2018 8:58 pm

Hi Mats, gMSA are not yet fully supported in the application, but thank you for your FR.

mdiver
Service Provider
Posts: 56
Liked: 11 times
Joined: Nov 04, 2009 2:08 pm
Location: Heidelberg, Germany
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by mdiver » Nov 20, 2018 2:41 pm

Has there already been any progress on this? I see this being requested a lot from larger customers.

Thanks,
Mike

Vitaliy S.
Product Manager
Posts: 22757
Liked: 1519 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by Vitaliy S. » Nov 21, 2018 11:26 am

This is still on our radar. Currently the Update 4 is in the feature lock state, but we will discuss this for our next updates.

Zew
Expert
Posts: 214
Liked: 42 times
Joined: Mar 17, 2015 9:50 pm
Full Name: Aemilianus Kehler
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by Zew » Jan 17, 2019 7:45 pm

Ouch....

kevin.mcdonnell
Influencer
Posts: 10
Liked: 2 times
Joined: Sep 23, 2014 12:58 pm
Full Name: Kevin McDonnell
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by kevin.mcdonnell » Feb 26, 2019 9:40 am

I think this is going to become a necessity as more users look to enhance the security of their environments.

We already have the ability to use SSH keys for Linux system, and really this would be the next logical step for Windows.
Kevin McDonnell
Lead Consultant – Professional Services
Arrow ECS - www.arrowecs.co.uk

Vitaliy S.
Product Manager
Posts: 22757
Liked: 1519 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by Vitaliy S. » Mar 01, 2019 4:23 pm

Kevin, thanks for your feedback. Just for my own education - do you want to use these accounts for services or for AAP as well?

jklaw91
Lurker
Posts: 2
Liked: never
Joined: Oct 01, 2018 3:15 pm
Full Name: John Lawrence
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by jklaw91 » Mar 06, 2019 6:06 pm

Our company also needs to request that Veeam Backup & Replication support MSA and gMSA. We recently were audited and dinged for any servers that must run using a regular domain account. We have migrated a number of services for other vendors to Group Managed Service Accounts and need Veeam ONE to support as well. Thanks.

electricd7
Expert
Posts: 117
Liked: 7 times
Joined: Mar 27, 2012 10:13 pm
Full Name: Chad Killion
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by electricd7 » Aug 13, 2019 6:40 pm

Hello- We need this feature as well. Any update? Would like to support using gMSA for both running of the Veeam service as well as for security context for AAP. Thanks.

Vitaliy S.
Product Manager
Posts: 22757
Liked: 1519 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Feature request - Managed Service Accounts. MSA and GMSA

Post by Vitaliy S. » Aug 13, 2019 7:16 pm

It is still on the discussion table, thanks for the push, it will help me in the discussions with RnD.

Post Reply

Who is online

Users browsing this forum: kevin.ridings, tsightler and 62 guests