Step 6. Specify Credentials

The Credentials step of the wizard is available if you have chosen to define a protection scope that includes Microsoft Active Directory objects or computers specified in a CSV file.

At this step of the wizard, specify credentials to connect to computers included in the protection group:

  1. If you want to use the same credentials for all computers in the protection group, select the necessary user account from the Master account list. The account must have local administrator permissions on all computers that you have added to the protection group.

If you have not set up credentials beforehand, click the Manage accounts link or click Add on the right to add credentials.

Veeam Backup & Replication allows to add the following types of credentials:

  • Stored credentials. Select stored credentials if you want Veeam Backup & Replication to use the specified user name and password for each connection to Veeam Agent.
  • [For Linux computers] Single-use credentials. Select single-use credentials if you do not want Veeam Backup & Replication to store credentials in the configuration database. With this option selected, Veeam Backup & Replication will use the specified user name and password only for the first connection to Veeam Agent. After that, Veeam Backup & Replication will use Veeam Transport Service to communicate with the Veeam Agent computer.

Keep in mind that the username must be specified in the down-level logon name format. For example, DOMAIN\UserName or HOSTNAME\UserName. Use the full domain or hostname name. Do not replace them with a dot.

For more information, see the Credentials Manager section in the Veeam Backup & Replication User Guide.

  1. By default, Veeam Backup & Replication uses credentials specified in the Master account field for all computers in the protection group. If some computer requires a different user account, do the following:
  1. Select the Use custom credentials for the following objects check box.
  2. Click Add next to the list of objects and select the necessary object in the Add Objects window:
  • If you configure a protection group that includes Active Directory objects, objects that you have added to the protection group at the Active Directory step or the wizard are already displayed in the Use custom credentials for the following objects list. In the Add Objects window, you can also select child objects for which you want to specify custom credentials. For example, you may want to specify separate credentials for different organizational units, containers, groups or individual computers within the entire domain added to the protection group.
  • If you configure a protection group that includes computers specified in a CSV file, you can select in the Add Objects window one or more computers listed in a CSV file and add them to the Use custom credentials for the following objects list.
  1. In the Use custom credentials for the following objects list, select the necessary object, click Edit and select custom credentials for the object. Credentials must be specified in the following format:
  • For Active Directory accounts — DOMAIN\Username
  • For local accounts — Username or HOST\Username

 

NOTE

Consider the following:

  • Veeam Backup & Replication supports user account names in the SAM-Account-Name format (DOMAIN\Username). The User-Principal-Name (UPN) format (username@domain) is not supported. If you specify credentials in the UPN format, Veeam Backup & Replication will successfully connect to computers added to the protection group during the Test Now operation. However, the subsequent protection group rescan operations will fail.
  • The user account that you use to connect to a Linux computer must have a home directory, users without home directories are not supported.
  • If you configure a protection group that includes dynamic Active Directory objects, such as domain, organizational unit, container or group, the master account or custom account specified for an object must be a member of the DOMAIN\Administrators group.
  • If you plan to back up Oracle databases that run on Linux computers, the OS account used to connect to the computer must be a member of the group that owns configuration files of the Oracle database (for example, the oinstall group).
  • You cannot use an Azure Active Directory account to connect to computers included in the protection group.

To check if Veeam Backup & Replication can connect to computers added to the protection group, click Test Now. Veeam Backup & Replication will form a list of computers to connect and use the specified credentials to connect to computers in the list.

Step 6. Specify Credentials