

When protecting the whole environment you do not want the Veeam repository to be tied to the same Windows Active Directory domain you are protecting with the backup. Use Veeam encryption while storing backups on the repository.Disable remote RDP services to the repository servers.Modify the Firewall, with dedicated rules for Veeam to allow access to specific ports.Set permissions on the repository directory to only that local account.Use a local account with administrative access.Make sure the repository servers are physical secured.Use a standalone Windows Server which is not part of any Active Directory Domain.design - Keep It Simple and Straightforward. Veeam needs a local account with administrative access to function properly.īest Practices for Hardening Veeam Backup Repositories based on Windows are: Create/Use a local account with administrative access and make sure only this (newly created) account has access rights to the location where the backup files are being stored. This site uses Just the Docs, a documentation theme for Jekyll.Ī good way of hardening the backup repository is by running it on a standalone Windows Server with storage attached to it. Restoring VMs to an HPE 3PAR with thin disks.

Backup Repository HA using Windows Storage Replica.
