Guest processing credentials

[marius roma]

I need to schedule a backup job for some Windows Server 2016 servers member of an Active Directory domain.
I am creating a domain user to be used for guest processing.
How should the user be configured?
Is it enough make the domain user member of the domain "Backup Operators" group?
Should it be added to any local group on each server (maybe "Backup operators")?
I made some tests by adding the domain user to the local "Administrators" group on each server and it works, but I'd like to assign more restrictive group membership...
Regards
marius

[foggy]

Hi Mario, we currently do not have a list of minimum required permissions for accounts involved in Veeam B&R activity, but creating one is in our plans.

[marius roma]

In the meantime I need to confngure Veeam B&R (v. 9.0) to backup a group of VMware VMs running Windows Server 2016 and configured as Domain Controllers (2 VMs) or Member Servers (all the other VMs).
How should I confngure the credentials to ensure that guest processing can run?
Regards
marius

[ponra05]

Configure the Service account which will have Local Administrator permissions as it needs to access Admin$ share of that VM.

[marius roma]

What do you mean

Configure the Service account which will have Local Administrator permissions?

How can I configure it in the Standard Ceredntials use for guest processing?
Regards
marius

[skrause]

You need to configure the account in AD/on the guest VMs.

Create the account in AD, then add it to the "Administrators" group on the VMs.

[foggy]

A small note though: Veeam B&R v9.0 doesn't support Windows Server 2016, it was added in v9.5.