Comprehensive data protection for all workloads
Post Reply
DeadEyedJacks
Veeam ProPartner
Posts: 136
Liked: 23 times
Joined: Oct 12, 2015 2:55 pm
Full Name: DeadEyedJacks
Location: UK
Contact:

Identify who initiated VeeamZip backup

Post by DeadEyedJacks » Aug 02, 2017 1:58 pm

We need to establish who ran a VeeamZip backup of a VM.
How do we find this information within vSphere or Veeam Backup logs.
(VMware tasks and events just shows Veeam service account creating snapshot.)


Secondly, can we disable, remove or restrict use of this option, which is being widely misunderstood and is potentially disaterous as it defaults to targeting the system drive of the Veeam Backup server...


Case# 02267830

Dima P.
Product Manager
Posts: 10284
Liked: 832 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: Identify who initiated VeeamZip backup

Post by Dima P. » Aug 02, 2017 6:36 pm

Hello DeadEyedJacks,

Not sure (never tested myself) but try to check windows event log for event 110:
110 Backup job started <Job type> job "<Job name>" has been started. Info Backup
In the event details look for the User field and associated windows account.
it defaults to targeting the system drive of the Veeam Backup server...
If possible, remove the default C:\Backup repository. Once done this location should not appear under repository thus users won’t be able to choose it.

Post Reply

Who is online

Users browsing this forum: Bing [Bot] and 19 guests