VBR disjoin from domain

[BostjanUNIJA]

Hi.
VBR was a part of a domain now due to Veeam hardening we will disjoin it from domain.
Is disjoining VBR from domain supported?
Or do we need to reinstall VBR?

[david.domask]

Hi Bostjan,

Yes, it's supported, but please see our KB here for potential side-effects and common solutions. You may not hit all (or any) of these, but these are typically the most common considerations to prepare for.

[BostjanUNIJA]

David,
Thank you for your reply.

[pmichelli]

Hi.
VBR was a part of a domain now due to Veeam hardening we will disjoin it from domain.
Is disjoining VBR from domain supported?
Or do we need to reinstall VBR?

Our Veeam and proxies all run in a workgroup in an isolated vLan. You can certainly do it

[BostjanUNIJA]

@pmicheli thank you for your reply.
Yes, we always keep VBR servers outside domain at all customers due to security considirations.
This specific customer had VBR joined into the domain by other IT company and now we are optimising/tweaking the situation.

[jacobpalm]

We did this a couple of years ago, in an environment with one VBO server and three separate proxy/repository servers. Followed the KB linked to by David above and had zero issues.

[mcz]

Did that as well some months ago. Didn't know that there was a KB, so I figured it out by myself beforehand. DNS and firewall was the most important aspect, but all in all it went well.
If you disjoin components from the domain and some jobs fail, you can have a look at the job.log, most of the time you get a perfect hint why it failed and then you know what you have to fix.

[aschm590]

We did this in our environment with our production VBR setup and had zero problems.

[bretth]

If you were replacing a physical domain-joined VBR server with new hardware in a workgroup, would you
1. disjoin the current server from the domain and make changes, take a config backup and restore to new (workgroup) server, or
2. take a config backup and restore to new server, then fix up domain issues like 'log on as' services?
I can see arguments for both scenarios. Which would you consider cleaner?