MFA and service account

[matteu]

Hello,

Today I use a VeeamOne server on Workgroup.

On the server, I have the built in administrator (I don't use it) and an additionnal account svc_veeam_one.
I added svc_veeam_one as local admin and use this account for VeeamOne services (monitoring, reporting, ...).

I would like to know if I can enable MFA on this account or I will have issue ?

I don't find anything on the documentation about relation between MFA and the windows service account used for VeeamOne.

Thanks for your answer.

[vnikiforov]

Veeam ONE checks MFA when a user logs in to Veeam ONE Web Client or Veeam ONE Client, see Configuring Multi-Factor Authentication. It is a Veeam ONE user setting, not a property of the Windows account, and the Veeam ONE services running under svc_veeam_one does not go through that login.

However, I recommend it to handle it the way Veeam Backup & Replication does: keep MFA disabled for svc_veeam_one through the per-user override and treat it as a pure service account nobody logs in with. Put MFA on the named admin accounts instead.

[matteu]

Hello,

Thanks for your answer