Veeam Backup and Replication v12: gMSA Demo

Описание

Veeam Backup and Replication v12 ile beraber gelen yeni yeteneklerden 1 tanesi application aware (uygulama tutarlı) işlemler için Group Managed Service Accounts (gMSA) hesaplarının da kullanılabiliyor olması.

gMSA servis hesapları, Domain controller tarafından yönetildiği için bizlerin parolayı yönetmesine gerek kalmıyor. Rastgele oluşturulan karmaşık şifreler, her 30 günde bir otomatik olarak değiştiriliyor ve bu da brute-force ve dictionary attack gibi saldırıların riskini azaltıyor.

gMSA servis hesaplarını Veeam ile nasıl yapılandıracağınızı bu demo videosu ile takip edebilir, göz atabilirsiniz. gMSA'lar hakkında daha fazla bilgi için Microsoft makalesine göz atabilirsiniz.

Kaynaklar:

Helpcenter:
https://helpcenter.veeam.com/docs/backup/vsphere/using_gmsa.html?ver=120
MANAGED SERVICE ACCOUNTS GUI
http://www.cjwdev.com/Software/MSAGUI/Info.html
Microsoft gMSA detayları:
https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/service-accounts-group-managed
Refresh membership in AD security groups without reboot or logoff
https://4sysops.com/archives/refresh-membership-in-ad-security-groups-without-reboot-or-logoff/

#veeam #gMSA #VBR #AppAware #v12

========================================
One of the new capabilities that comes with Veeam Backup and Replication v12 is the ability to use Group Managed Service Accounts (gMSA) accounts for application aware operations.

Since gMSA service accounts are managed by Domain controller, we do not need to manage the password. Randomly generated complex passwords are automatically changed every 30 days, reducing the risk of attacks such as brute-force and dictionary attacks.

You can follow and browse this video on how to configure gMSA service accounts with Veeam.

For more information about gMSAs, you can check the Microsoft article.

Resources:

Helpcenter:
https://helpcenter.veeam.com/docs/backup/vsphere/using_gmsa.html?ver=120
MANAGED SERVICE ACCOUNTS GUI
http://www.cjwdev.com/Software/MSAGUI/Info.html
Refresh membership in AD security groups without reboot or logoff
https://4sysops.com/archives/refresh-membership-in-ad-security-groups-without-reboot-or-logoff/
Microsoft gMSA details:
https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/service-accounts-group-managed


#veeam #gMSA #VBR #AppAware #v12