"Test Credentials" function to switch to less privileged users

[david.brunner]

Dear Forum members,

using VBR v12 I am in the process of hardening and making everything more secure.
Right now in process of switching credentials and stop using "domain admin" service account.

The Backup of AD I now successfully switched to gMSA (using another VM as guest processing proxy)
Now I will switch Exchange, SQL, ... guest processing credentials to dedicated users with just enough privileges ( using this information here : https://helpcenter.veeam.com/docs/backu ... ml?ver=120 )

Upon doing that - does "Test Credentials" cover all tests?
does it also test if it is able to truncate logs?

Or is there a danger of some things in the job not going well anymore after that? will VBR recognize the loss of permissions?

thanks and best regards,

merry christmas and a happy new year, too!

David

[Mildur]

Hi David

Merry Christmas to you too.

Upon doing that - does "Test Credentials" cover all tests?

It doesn't test the login and permissions for a specific application. The test will check, if the specified OS credentials can be used to connect to all machines in the list.

Or is there a danger of some things in the job not going well anymore after that? will VBR recognize the loss of permissions?

The job will show an error or warning if the specified credentials/gMSA account does not have enough permission for application aware processing.

Best,
Fabian

[david.brunner]

Hi Fabian,

thanks.
So the best way is to either wait for the job to (hopefully not) fail or test with a duplicate Job then. Got it.

best regards,
David