Step 10. Specify Guest Processing Settings

At the Guest Processing step of the wizard, you can enable the following settings for VM guest OS processing:

To coordinate guest processing activities, Veeam Backup & Replication deploys non-persistent runtime components or uses (if necessary, deploys) persistent agent components on the VM guest OS. For more information, see the Non-Persistent Runtime Components and Persistent Agent Components section.

The non-persistent runtime components run only during guest processing and are stopped immediately after the processing is finished (depending on the selected option, during the backup job session or after the backup job completes).

You must specify a user account that will be used to connect to the VM guest OS and deploy the non-persistent runtime components or use persistent agent components:

  1. From the Guest OS credentials list, select a user account that has enough permissions. For more information on the permissions and requirements for the user account, see Permissions for Guest Processing.

If you have not set up credentials beforehand, click the Manage accounts link or click Add on the right to add credentials. For more information on adding credentials, see the Credentials Manager section.

By default, Veeam Backup & Replication uses the Log on as a batch job policy to connect to guest OS. If the connection fails, Veeam Backup & Replication switches to Interactive Logon.


[For Kerberos authentication] Mind the following:

  • Local accounts do not support Kerberos authentication. To authenticate with Microsoft Windows guest OS using Kerberos, specify an Active Directory account.
  • Networkless application-aware guest processing through VMware VIX/vSphere Web Services is not supported for VMs with guest OS where NTLM is restricted.
  • Veeam backup infrastructure servers must correctly resolve FQDNs of guest operating systems.
  • To back up VMs where Kerberos is used, NTLM must be allowed in the Veeam backup infrastructure machines. For details, see Kerberos Authentication for Guest OS Processing.
  1. By default, Veeam Backup & Replication uses the same credentials for all VMs in the job. If some VM requires a different user account, click Credentials and enter custom credentials for the VM.
  2. If you have added Microsoft Windows VMs to the job, specify which guest interaction proxy Veeam Backup & Replication can use to deploy the non-persistent runtime components or connect to (if necessary, deploy) persistent agent components on the VM guest OS. On the right of the Guest interaction proxy field, click Choose.
  • Leave Automatic selection to let Veeam Backup & Replication automatically select the guest interaction proxy.
  • Select Use the selected guest interaction proxy servers only to explicitly define which servers will perform the guest interaction proxy role. The list of servers contains Microsoft Windows servers added to the backup infrastructure.

To check if Veeam Backup & Replication can communicate with VMs added to the job and deploy the non-persistent runtime components or use (if necessary, deploy) persistent agent components on their guest OSes, click Test Now. Veeam Backup & Replication will use the specified credentials to connect to all VMs in the list.


The guest interaction proxy functionality is included in the Veeam Universal License. When using a legacy socket-based license, Enterprise or higher edition is required.

Step 10. Specify Guest Processing Settings 

Related Topics

Guest Processing