Issue with Restoring config on consoles with MFA enabled

[Adv_UK]

I will try keep this short but we have just come across an issue when restoring Veeam config onto a new server (part of a migration), when the B&R server is not part of the domain.

When MFA is enabled, the restore/migrate process completes fine but then you get a 'Account cannot be found' message when trying to load the B&R console.

Much scratching of the head and I have worked out the problem.

The account SID is stored in the database table dbo.backup.security.accounts.

To regain access, I simply edited the account SID to match the account on the new server we have migrated to, and also updated the NT4_Name column as the server name changed too.

I hope this helps someone in the future, and I think it is something that Veeam maybe need to fix/account for when restoring configuration to a new server.

Not sure if updating this table causes any other problems but so far backups are going through successfully.

[HannesK]

Hello,
yes, that makes sense if the SIDs don't match anymore. There is another workaround from the release notes (temporarily switch to community edition which does not support MFA)

Best regards,
Hannes

[Adv_UK]

I did try this, but even on community edition it shows 'account cannot be found' when you try to login.

[HannesK]

hmm okay... then thanks again for sharing, I will check with my colleagues on how we can improve that.

[Gostev]

@Egor Yakovlev let's please look at this issue more closely, apparently still a problem in 12.1

[Egor Yakovlev]

Investigating.

[Egor Yakovlev]

Confirmed this behavior in case when [MFA is enabled] + [Configuration Restore wizard mode is "Migrate"] + [New server does not have that SID](workgroup or non-original domain).
We will definitely fix that in one of the future updates, but for now it is safe to use "Restore" mode instead or follow with steps in KB4477.

/Thanks!