Hello,
We have just confirmed that the Best practice "Backup services should be running under the LocalSystem account" has Not implemented status. it is a bug and it will be fixed in v13.0.1
For the rest of the alarms, it is recommended to have them implemented. For example the MFA one, that appears because you have users inside Veeam Backup & Replication Console, not Host Management, that have MFA disabled.
For Password loss protection, totally recommended, but in any case any of these alarms can be suppressed on the Veeam Backup & Replication Console to avoid Veeam ONE Alarms, and to improve Veeam ONE Threat Center score, etc.
Thank you!
We have just confirmed that the Best practice "Backup services should be running under the LocalSystem account" has Not implemented status. it is a bug and it will be fixed in v13.0.1
For the rest of the alarms, it is recommended to have them implemented. For example the MFA one, that appears because you have users inside Veeam Backup & Replication Console, not Host Management, that have MFA disabled.
For Password loss protection, totally recommended, but in any case any of these alarms can be suppressed on the Veeam Backup & Replication Console to avoid Veeam ONE Alarms, and to improve Veeam ONE Threat Center score, etc.
Thank you!
Statistics: Posted by jorgedlcruz — Oct 08, 2025 10:58 am






