Set-VBRADContainer

Short Description

Modifies a scope of Active Directory objects.

Product Edition: Community, Standard, Enterprise, Enterprise Plus, Veeam Universal License

Syntax

Set-VBRADContainer -Container <VBRADContainer> [-Domain <VBRADDomain>] [-Entity <VBRADEntity[]>] [-ExcludeVMs]

[-ExcludeOfflineComputers] [-ExcludeComputers] [-ExcludedEntity <VBRADEntity[]>]

[-MasterCredentials <CCredentials>] [-UseTemporaryCertificate] [-UseCustomCredentials]

[-CustomCredentials <VBRADCustomCredentials[]>] [<CommonParameters>]

Detailed Description

This cmdlet modifies the VBRADContainer object. This object contains a scope of Active Directory objects you want to add to a protection group.

Note

To modify settings, specify new values for the necessary parameters. The cmdlet will overwrite the previous parameter values with new values. The parameters that you omit will remain unchanged.

Parameters

Parameters

Parameter

Description

Type

Required

Position

Accept Pipeline Input

Container

Specifies the scope of Active Directory objects you want to add to a protection group.

Accepts the VBRADContainer object. To get this object, use the Container parameter of the Get-VBRProtectionGroupReturns protection groups. cmdlet.

VBRADContainer

True

Named

True (ByPropertyName, ByValue)

CustomCredentials

Specifies custom credentials for authenticating with associated Active Directory objects.

Accepts the VBRADCustomCredentials[] object. To create this object, run the New-VBRADCustomCredentialsSpecifies custom credentials for authenticating with Active Directory objects. cmdlet.

VBRADCustomCredentials[]

False

Named

True (ByPropertyName)

Domain

Specifies the Active Directory domain connection object.

Accepts the VBRADDomain object. To get this object, run the Get-VBRADDomainCreates an object for connecting to Active Directory domain. cmdlet.

VBRADDomain

False

Named

True (ByPropertyName)

Entity

Specifies the array of the Active Directory objects from the same domain. The cmdlet will add these objects to the protection scope.

You can add the following types of Active Directory objects:

  • Domain
  • Cluster
  • Organization unit
  • Global group
  • Folder
  • Computer

Note: You cannot add Domain Local or Universal groups.

Accepts the VBRADEntity[] object. To get this object, run the Find-VBRADEntity cmdlet.

VBRADEntity[]

False

Named

True (ByPropertyName)

ExcludeComputers

Defines that you want to exclude some Active Directory objects from the protection scope.

Use the ExcludeEntity parameter to specify objects you want to exclude from the protection scope.

SwitchParameter

False

Named

True (ByPropertyName)

ExcludedEntity

Specifies Active Directory objects you want to exclude from the protection scope.

Note: You cannot exclude Domain Local or Universal groups.

Accepts the VBRADEntity[] object. To get this object, run the Find-VBRADEntity cmdlet.

VBRADEntity[]

False

Named

True (ByPropertyName)

ExcludeOfflineComputers

Defines that the cmdlet will exclude computers that have been offline for over 30 days.

SwitchParameter

False

Named

True (ByPropertyName)

ExcludeVMs

Defines that the cmdlet will exclude all VMs from the protection scope.

SwitchParameter

False

Named

True (ByPropertyName)

MasterCredentials

Specifies Master account credentials for authenticating with all Active Directory objects in a protection scope.

For authenticating with Active Directory objects that require different credentials, Veeam Backup & Replication uses custom credentials. If you want to use custom credentials for some Active Directory objects, set the UseCustomCredentials parameter.

CCredentials

False

Named

True (ByPropertyName)

UseCustomCredentials

Defines that you want to use custom credentials for authenticating with some Active Directory objects.

To specify custom credentials, use the CustomCredentials parameter.

SwitchParameter

False

Named

True (ByPropertyName)

UseTemporaryCertificate

Defines that the cmdlet will use a temporary certificate to connect to the Active Directory objects instead of authenticating with credentials.

Note: You cannot use this parameter together with the MasterCredentials parameter.

SwitchParameter

False

Named

True (ByPropertyName)

<CommonParameters>

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see Microsoft Docs.

Output Object

VBRADContainer

Examples

Set-VBRADContainerExample 1. Excluding VMs from Protection Group

This example shows how to exclude VMs from the existing protection group.

$group = Get-VBRProtectionGroup -Name "Support PG"

$ad = $group.Container

$newad = Set-VBRADContainer -Container $ad -ExcludeVMs

Set-VBRProtectionGroup -ProtectionGroup $group -Container $newad

Perform the following steps:

  1. Run the Get-VBRProtectionGroupReturns protection groups. cmdlet. Specify the Name parameter value. Save the result to the $group variable.
  2. Get the scope of Active Directory objects. Use the Container property of the $group variable. Save the result to the $ad variable.
  3. Run the Set-VBRADContainer cmdlet. Set the $ad variable as the Container parameter value. Provide the ExcludeVMs parameter. Save the result to the $newad variable.
  4. Run the Set-VBRProtectionGroupModifies protection groups. cmdlet. Set the $group variable as the ProtectionGroup parameter value. Set the $newad variable as the Container parameter value.

Set-VBRADContainerExample 2. Configuring Protection Group to Use Temporary Certificate

This example shows how to modify a scope of Active Directory objects so that Veeam Backup & Replication uses a temporary certificate to connect to the objects instead of authenticating with credentials.

$group = Get-VBRProtectionGroup -Name "Support PG"

$ad = $group.Container

$newad = Set-VBRADContainer -Container $ad -UseTemporaryCertificate

Set-VBRProtectionGroup -ProtectionGroup $group -Container $newad

Perform the following steps:

  1. Run the Get-VBRProtectionGroupReturns protection groups. cmdlet. Specify the Name parameter value. Save the result to the $group variable.
  2. Get the scope of Active Directory objects. Use the Container property of the $group variable. Save the result to the $ad variable.
  3. Run the Set-VBRADContainer cmdlet. Set the $ad variable as the Container parameter value. Provide the UseTemporaryCertificate parameter. Save the result to the $newad variable.
  4. Run the Set-VBRProtectionGroupModifies protection groups. cmdlet. Set the $group variable as the ProtectionGroup parameter value. Set the $newad variable as the Container parameter value.

Page updated 2026-08-19

Page content applies to build 13.1.1.18