Remove Veeam Console without uninstalling everything else

[ChuckS42]

I'm sure the answer to this is in the forum somewhere, but I can't seem to find it.

We're hardening access to the full Veeam Console, and want to remove it from our Veeam B&R servers. How do I go about this without uninstalling the core B&R components?

[Mildur]

I don‘t think thats supported today or possible out of the box. If you use google, you can find a guide. I won‘t post it publicly here.

[ChuckS42]

There is this Best Practices guide. It seems up to date.

[Mildur]

I know. I have written you a PM

[veremin]

This guide has been created and is being managed by trustworthy system engineers and architects, so we are not against refencing it here

[Aniz]

I know this post are from 2021, but I found it when I faced a similar situation, this is the way I workaround it.
In your Veeam Server where do you want to remove the server, create an entry in your hosts file (c:\windows\system32\drivers\etc\hosts) using a dead ip address, make sure to edit as administrator and save.
Test if the ping from your Veeam Server to your infra server (example proxy) is not working.
Go to your Veeam console and remove it from Servers, once your Veeam will not be able to reach the correct server, it will delete your server with warnings.

Starting infrastructure item deletion process
Starting infrastructure item deletion process
<You may see several warnings or errors here>
[YOUR REMOVED SERVER] Failed to uninstall some components. Error: '<Some other errors>'
Warning Server was deleted with warnings

[pmichelli]

Follow the hardening guide linked above. I did the same thing when I deployed V12. The Veeam server has no explorers or the Veeam Console. We have a secure jumpbox in a locked down vLAN that runs the console now.

Just remember when you patch Veeam you need to patch and upgrade the console on whatever endpoint you have it on.

I find it very odd Veeam employees in this thread won't reference it. It's a Veeam document. I am confused as to the secrecy here. This should be something everyone does if you want to harden your backup infrastructure.

[Mildur]

I wasn't working for Veeam back in 2021
Today I'm happy to share the link with any customer.

Best,
Fabian

[vchris]

Update on this topic: To remove the console you need to remove ALL the explorers first:

Code: Select all

(Get-WmiObject Win32_Product -Filter "Name = 'Veeam Explorer for xxxx").Uninstall()

Easy to create a small script if needed here

And then remove the console itself:

Code: Select all

(Get-WmiObject Win32_Product -Filter "Name = 'Veeam Backup & Replication Console'").Uninstall()

[JasoonL]

Hi,

To automate the removal of Explorer services and the Console, you can use the following script:

Code: Select all

Write-host "Start removing Explorer and Console services" -BackgroundColor Yellow

# Récupérer les services correspondant aux critères
$services = Get-WmiObject -Class Win32_Product | Where-Object { $_.Name -match "Veeam" -and $_.Name -match "Explorer" }

Write-host "Start Explorer services removal" -BackgroundColor Green


If ($services.lenght -ne $null) {
    foreach ($service in $services) {
        Write-host "Service deletion: $service.Name" -BackgroundColor Green
        $service.Uninstall()
    }
}
Else {Write-host "No Explorer service to remove" -BackgroundColor Red}

$console = Get-WmiObject -Class Win32_Product | Where-Object { $_.Name -match "Veeam" -and $_.Name -match "Console" }



If ($console.lenght -ne $null) {
    Write-host "Start console service removal" -BackgroundColor Green
    $console.Uninstall()
}
Else {Write-host "No Console service to remove" -BackgroundColor Red}


Write-host "End of Explorer and Console services removal" -BackgroundColor Yellow

Regards
Jason