I'm not sure about best pratice VBR v12 should be integate AD with MFA or not if customer need us to sugguest
becuase the customer using veeam 11 not connect to AD.
-
- Enthusiast
- Posts: 40
- Liked: never
- Joined: Dec 01, 2021 2:30 am
- Full Name: Jareewan
- Contact:
-
- Product Manager
- Posts: 9815
- Liked: 2595 times
- Joined: May 13, 2017 4:51 pm
- Full Name: Fabian K.
- Location: Switzerland
- Contact:
Re: pls assits Active directory integate with VBR v12
Hello Jareewan
Veeam Backup & Replication should run outside of your production active directory.
You may use a dedicated active directory domain for the backup components. I would only do it if you have a lot of servers and many backup administrators to manage.
Management of backup server:
- Protect remote access (RDP, physical logon, ...) to the backup server and it's components with MFA
- Use MFA for the Veeam Console when working from a jump host via the remote console.
https://helpcenter.veeam.com/docs/backu ... ml?ver=120
Guest Processing:
- For guest application processing, use gMSA accounts instead of default service accounts.
https://helpcenter.veeam.com/docs/backu ... ml?ver=120
Best,
Fabian
Veeam Backup & Replication should run outside of your production active directory.
You may use a dedicated active directory domain for the backup components. I would only do it if you have a lot of servers and many backup administrators to manage.
Management of backup server:
- Protect remote access (RDP, physical logon, ...) to the backup server and it's components with MFA
- Use MFA for the Veeam Console when working from a jump host via the remote console.
https://helpcenter.veeam.com/docs/backu ... ml?ver=120
Guest Processing:
- For guest application processing, use gMSA accounts instead of default service accounts.
https://helpcenter.veeam.com/docs/backu ... ml?ver=120
Best,
Fabian
Product Management Analyst @ Veeam Software
Who is online
Users browsing this forum: Bing [Bot], mdippold, restore-helper and 60 guests