required permission for VSS

[olivero]

hi all,

we want to backup windows servers 2008 with AD roles .

what level of account user did we have to use for enable application-aware processing with Microsoft VSS ?

did it must be member o administrator of the domain or can it be on another group with a lower level ?

can we make a backup concitency of 2 VM's at the same time : exemple with 2 severs with AD domain roles ?

thanks for your help
regards

[PTide]

Hi,

what level of account user did we have to use for enable application-aware processing with Microsoft VSS ?

You need to specify an account with local admin privileges on the VMs being processed in order to make VSS work. However, local admin account is not present on DC, therefore you are forced to use Domain Admin.

can we make a backup concitency of 2 VM's at the same time : exemple with 2 severs with AD domain roles ?

Please refer to this thread.

Please let me know if that helps.

Thank you.

[olivero]

Hi,

yes, it's help me really, is there any veeam doc that explain all of this informations.
it doesn't on training docs V8

thanks a lot
regards

[Vitaliy S.]

Olivier, if you're talking about permissions for in-guest VSS processing, then it should be mentioned in the corresponding step of the backup job wizard. If you want to know more data on how to backup AD, then please review Pavel's link or our recorded webinars (search for Active Directory there). Hope this helps!

[olivero]

hi all,

if i want to use local admin account for "standard" VM's and a Domain Admin account for VM's DC, i have to create 2 differents jobs
because the Guest OS credential is unique for all of the VM's in a job, we can't assign a different credentials for each VM's in a same job .
Am i right ?

regards

[PTide]

Hi,

We can't assign a different credentials for each VM's in a same job

You can set accounts for each VM in a job individually. Please see the screenshot.

[olivero]

Hi, thanks for your screenshot, it works

now i have a new problem, the user domain account does not work when i use test "check box" on guest credentials test
is there any log file instead of the windows of "guest credentials test" with no error messages ?

does the account of the user must be in the same domain of the Veeam server's domain or did we must have relations between domains of veeam's backup servers and the other domain the server i want to backup.

example: Veeam backup server is: my_domain\serv1_veeam
and the server i want to backup is: the_other_domain\server1_DC

did we must have relations between my_domain and the_other_domain ?

regards

[PTide]

did we must have relations between my_domain and the_other_domain ?

Not necessarily. You have to specify your credentials in the following way: DC_domain\Administrator. Your veeam server may belong to some other domain, it does not matter.

I guess credentials test just fails immediately without any details on log, right? Do you have VMware tools installed on your DC?

[olivero]

Hi,
thanks for your reply, no i don't have vmware tools on my DC, is it a pre requisite ?

is there any log text file on the veeam backup server that record all error message , more verbose than the gui view ?

regards

[PTide]

no i don't have vmware tools on my DC, is it a pre requisite ?

Yes, it is a prerequisite if you want to perform app-aware backup and/or filesystem indexing.

is there any log text file on the veeam backup server that record all error message , more verbose than the gui view ?

Yes, there are some. Find "Help" in the drop-down list (push the buttone located in the top-left corner), choose "Support information", choose log export options.

Thank you.

[olivero]

Hi, thanks for your reply

i have the wmwre tools on my VMs, and i upload logs from help menu.

i create a case and give you the reponse if you're interested

regards

[PTide]

Great! Could you post you support case ID here please?

Thank you.

[olivero]

Hi,
number: 00974874

it seems to be issue due to closed ports:
required ports for AA VSS
http://helpcenter.veeam.com/backup/80/v ... ports.html

regards