Discussions specific to the VMware vSphere hypervisor
Post Reply
keith Drayton
Influencer
Posts: 14
Liked: 3 times
Joined: Apr 13, 2015 8:38 am
Full Name: Keith Drayton
Contact:

Add domain users to non domain Veeam server

Post by keith Drayton » Jan 08, 2019 1:31 pm

Hi All

Recently carried out a server refresh and this time we have kept the Veeam server as a work group member rather than adding to the Domain.
What i am now stuck with is adding users to Veeam, The local server account is fine and backup jobs are running fine,
I want to add a couple domain users to give them access to some backups how ever it will only allow me to select users from the local server or workgroup,
Is this possible? am i missing something simple? I have spent a lot of time searching nad had no luck,

Thank You

Andreas Neufert
Veeam Software
Posts: 3895
Liked: 706 times
Joined: May 04, 2011 8:36 am
Full Name: Andreas Neufert
Location: Germany
Contact:

Re: Add domain users to non domain Veeam server

Post by Andreas Neufert » Jan 08, 2019 1:37 pm

Correct, Veeam Backup & Replication and Enterprise Manager only work with the specific domain added to the Backup & Replication/Enterprise Manager Server.

Have you looked into our Self Services? Then it would make sense to add only the Enterprise Manager (seperate VM) to the Domain and use the users defined in the domain to allow them to do self restore. As well it is possible in Update 4 to use vCenter defined access for Backup job management. You can allow a specific vCenter user group (and other seletable scopes) to create Jobs/manage jobs/create restores for their individual VMs where they have rights in vcenter.

keith Drayton
Influencer
Posts: 14
Liked: 3 times
Joined: Apr 13, 2015 8:38 am
Full Name: Keith Drayton
Contact:

Re: Add domain users to non domain Veeam server

Post by keith Drayton » Jan 08, 2019 2:09 pm

Hello Andreas

Am i right in saying Self Services is only available in Enterprise Plus? - Thought i read that this morning, We have Enterprise.

Is there an ETA for Update 4 ? That may be the way to go

Thank You

bdufour
Expert
Posts: 199
Liked: 29 times
Joined: Nov 01, 2017 8:52 pm
Full Name: blake dufour
Contact:

Re: Add domain users to non domain Veeam server

Post by bdufour » Jan 08, 2019 4:03 pm

the idea with the workgroup server, is to separate veeam from the domain. say a domain account is compromised - the veeam server will be protected. so trying to add domain users to that server defeats that purpose.

i personally dont like the workgroup design, but it has its place. MFA on AD/Domain accounts is a better solution imo. also, when a server or pc isnt joined to a domain, you will not be using kerberos for auth, you will be using ntlm exclusively.

keith Drayton
Influencer
Posts: 14
Liked: 3 times
Joined: Apr 13, 2015 8:38 am
Full Name: Keith Drayton
Contact:

Re: Add domain users to non domain Veeam server

Post by keith Drayton » Jan 09, 2019 11:58 am

I have set up a new Veeam user which is fine but as we do not have Plus i am unable to restrict VM access for the user,
Assuming it is not restricted to Plus users i will have to wait for Update 4 and vCenter defined access.

Thanks

Post Reply

Who is online

Users browsing this forum: mtellier and 15 guests