Hi EvilLin,
I think the community post you found introduced a slight confusion, as from our User Guide on gMSA:
I think the community post you found introduced a slight confusion, as from our User Guide on gMSA:
Reviewing the community post, I think what the author meant was that of the Veeam infrastructure, only the Guest Interaction Proxy must be in domain, the rest of the VBR infrastructure does not (and best practice is to NOT join the backup infrastructure to domain)If you back up a machine using a gMSA, both the guest interaction proxy and the target machine must have network access to the domain controllers and be in the same domain to obtain the gMSA password. On the target machine the gMSA must be added to the Administrators group (local or domain). Domain Administrator permissions are only required for Microsoft Active Directory backups, for other supported applications local Administrator permissions are sufficient.
Statistics: Posted by david.domask — Jul 01, 2025 8:43 am
