VeeamOne server location

[matteu]

Hello,

For security reason, VBR should be in dedicated domain or in workgroup. I install it on workgroup because lot's of overhead to build new domain only for this.

I would like to know what about VeeamOne ?

I mean, I could set it on domain but what I'm afraid of is I need to enter some credentials about virtualisation infrastructure + Backup infrastructure for connection to be done between VeeamOne and VBR / vmware / Hyper-V.
I know I can easely get all my saved credential in a VBR server. I guess it's the same on VeeamOne ?

If yes, I would like to know if it's possible to use it in workgroup environment or there are some limitation ?

[haslund]

No requirement to keep it in a domain. There is even a KB for when you move from workgroup to domain for the Veeam ONE server: https://www.veeam.com/kb4310 in case you change your mind later.

[matteu]

Thanks for the answer.
I will install it in workgroup if there is no requirement !

[RomanK]

Hi all,

Correct, it is possible to install Veeam ONE in a workgroup environment. However, if you disable NTLM, you must use AD LDAP instead and that could be the case.

Thanks

[chris.childerhose]

Also, when using a Workgroup, remember DNS if you want to use hostnames versus IPs. Sometimes, you may need to use the HOSTS file.

[matteu]

I'm going to use Workgroup but point to the DNS server

However, I see recommended database for production environment is SQL standard and not express.
It's for a customer with arround 70 VM and no physicall computer backup, no NAS, ...
If I use local SQL it should be ok. If I use remote, that mean I have to use SQL authentication right ? Because windows authentication can't work with workgroup + domain join computer.

[chris.childerhose]

Yeah, you can use SQL authentication or recreate the service account on the DB server. Either option works as long as you create them as DBAdmin.

[matteu]

Thanks for your answer.
Why DBadmin ?

On documentation, it's possible to use less permission : https://helpcenter.veeam.com/docs/one/d ... ml?ver=120

[chris.childerhose]

We assign that for our environment but you can follow documentation for less.

[jorgedlcruz]

Hello Matteu,
I see that everyone have already replied, in case you want to hardened a bit the connections, and permissions about different components, please use the next link:
https://helpcenter.veeam.com/docs/one/d ... ml?ver=120

I usually have VONE on a workgroup, and tend to recommend it as well.

Thanks!

[matteu]

Thanks for your answer.

[william.bishop]

I'm going to use Workgroup but point to the DNS server

However, I see recommended database for production environment is SQL standard and not express.
It's for a customer with arround 70 VM and no physicall computer backup, no NAS, ...
If I use local SQL it should be ok. If I use remote, that mean I have to use SQL authentication right ? Because windows authentication can't work with workgroup + domain join computer.

VeeamOne works fine on express for a small environment, and removes any headaches for creating user permissions

[matteu]

It's not a really issue to set some SQL permission. You need to build the SQL query once and then, I will just have to copy/paste it for future installation on other customer as I do to create vsphere role...
What I see is default retention is 1 year and 10 Gb is not a lot for this retention when I use the veeamOne xlsx calculator file .
Then, I know performance on SQL express will not be the same than SQL standard. I will use SQL standard because my customer can use it. The hardest part here is to configure it when server is workgroup (VBR + Vone) but I already open a topic for it and I should have a support case number tomorow.