Machines added to the domain add domain administrators to the localĪdministrator group.

By default, Veeam is configured to allow anyone in the localĪdministrators group full access to the Veeam console. Separate user accounts and password policiesĭoes have to be a local administrator, but it does not have to be every localĪdministrator. This article will discuss some simple ways to lock down your Veeam server to help protect it from internal and external forces. We would like to promote the concept of least privilege when it comes to Veeam and its components. Maybe consider that everyone who has access to the Veeam server does not need the ability to create/modify jobs or restore sensitive information. This allows domain administrators access to the console without stopping to consider who is a domain administrator in your organization. Sure, you could consider encrypting your backups or taking your storage off the domain but not what could be compromised if you do not protect your Veeam server. But even the server backing up your environment needs to be protected from attacks like ransomware and people with the best or malicious intent. Here is something you don’t always think about - protecting your Veeam Backup & Replication console. Protect your Veeam Backup & Replication console This series will give you some insight on existing and new features Veeam offers to turn this disaster event into you being the hero. You may have several roles in your infrastructure but when ransomware hits, the backup admin is at the front of the line to get the data restored as quickly and with as little loss as possible. In the end though, the business is going to want their data back regardless of who’s fault it is and guess who’s in charge of making sure that data was backed up? The backup admin. The network admin accuses the storage admin for not having more secure write access to the storage. The security admin points the finger at the network admin for allowing the attack into the network. And when one strikes, everyone starts blaming someone else. Ransomware: every admins’ worst nightmare.

Veeam backup best practices