We realized that Veeam ONE creates or changes local accounts of the "Veeam_*" format on the Veeam ONE server machine.
This is explained in this kb: https://www.veeam.com/kb4042
The KB explains the cause of this process and why it does it. But I need to know the process in depth. I need to know at what specific moment Veeam executes the creation of this user and when it deletes it. We need to defend this in front of cybersecurity so that they understand the reason for the process itself.
Thank you!
-
- Service Provider
- Posts: 62
- Liked: 7 times
- Joined: Jul 28, 2021 2:36 pm
- Full Name: Facundo Barisano
- Location: Argentina
- Contact:
How this Veeam ONE process works?
VMCE / VMCA
-
- Veeam Software
- Posts: 783
- Liked: 205 times
- Joined: Nov 01, 2016 11:26 am
- Contact:
Re: How this Veeam ONE process works?
Hello ibarizz,
The monitoring service is unable to work with no-windows user accounts. That is why when the user logs in as a tenant, the service creates a "proxy" account. There is no association with the tenant itself. The account has a random password and minimum permissions granted.
The account was deleted by timeout as KB mentions.
Thanks
The monitoring service is unable to work with no-windows user accounts. That is why when the user logs in as a tenant, the service creates a "proxy" account. There is no association with the tenant itself. The account has a random password and minimum permissions granted.
The account was deleted by timeout as KB mentions.
Thanks
-
- Service Provider
- Posts: 62
- Liked: 7 times
- Joined: Jul 28, 2021 2:36 pm
- Full Name: Facundo Barisano
- Location: Argentina
- Contact:
Re: How this Veeam ONE process works?
Thank you Roman!
And may I ask, is there any way to schedule those account's creation or it's practically impossible? Thank you!
And may I ask, is there any way to schedule those account's creation or it's practically impossible? Thank you!
VMCE / VMCA
-
- Veeam Software
- Posts: 783
- Liked: 205 times
- Joined: Nov 01, 2016 11:26 am
- Contact:
Re: How this Veeam ONE process works?
Hello ibarizz,
I'm not sure I fully understood about the schedule, could you please clarify your use case?
Currently, the account creates almost immediately during the login procedure. It is possible to set only InactiveLocalUserKeepIntervalSec in the registry.
Thanks
I'm not sure I fully understood about the schedule, could you please clarify your use case?
Currently, the account creates almost immediately during the login procedure. It is possible to set only InactiveLocalUserKeepIntervalSec in the registry.
Thanks
Who is online
Users browsing this forum: Bing [Bot] and 11 guests