Comprehensive data protection for all workloads
Post Reply
Psycorp
Novice
Posts: 4
Liked: never
Joined: Apr 05, 2016 7:31 am
Full Name: Kris Woodward
Contact:

Guest OS Credentials

Post by Psycorp »

Hi All

Veeam V9 User Guide states an account with local administrator privileges must be specified in a Windows (2012 R2 in this case) VM backup job, however I have a colleague who insists that "the" Local Administrator account must be used.

Is there any technical reason why the Local Administrator account should be used rather than an account with local admin privileges?

Thanks
PTide
Product Manager
Posts: 6431
Liked: 729 times
Joined: May 19, 2015 1:46 pm
Contact:

Re: Guest OS Credentials

Post by PTide »

Hi and welcome to the commuinty!
Is there any technical reason why the Local Administrator account should be used rather than an account with local admin privileges?
The account that is used on a backup job has to have the rights to execute VSS tasks. This is why a user that is in the Administrator group should be specified for application-aware image processing and guest filesystem indexing. In situations where UAC must remain enabled, named Administrator accounts must be used for this process. Only administrative accounts with SID-500 access will be able to execute remote administration commands with this Windows feature enabled. These will be the local “Administrator” account made locally when installing windows, or the “Administrator” account used with the domain.

Hope this helps,

Thank you.
Psycorp
Novice
Posts: 4
Liked: never
Joined: Apr 05, 2016 7:31 am
Full Name: Kris Woodward
Contact:

Re: Guest OS Credentials

Post by Psycorp »

Hi

Thanks for the clarification.

Another question. Our backup jobs currently use a domain account with domain and local admin privileges. UAC in guest OS's is turned on and using default settings. Backup job is set to use application aware processing for all VM's and all backups are completing successfully. Given the details above it sounds this setup shouldn't work. Is this correct?

Thanks
tdewin
Veeam Software
Posts: 1775
Liked: 646 times
Joined: Mar 02, 2012 1:40 pm
Full Name: Timothy Dewin
Contact:

Re: Guest OS Credentials

Post by tdewin »

This requirement is only for VMware VIX API interaction, and not if we do AAIP over the network.

So if B&R or the GIP can reach the administrative share, we just need administrator rights not necessarily and admin account with a well known SID/disable UAC.

You can use the "Test" button on the AAIP to check if your credentials work and if you can reach it over the network or not
Psycorp
Novice
Posts: 4
Liked: never
Joined: Apr 05, 2016 7:31 am
Full Name: Kris Woodward
Contact:

Re: Guest OS Credentials

Post by Psycorp »

That's great.

Thank you.
Post Reply

Who is online

Users browsing this forum: Google [Bot] and 166 guests