We are in the process of addressing an audit finding to secure accounts that are members of the domain admins group. The options were to either enable the “account is sensitive and cannot be delegated” on the account or make the account a member of the “Protected Users Security Group in Windows Server | Microsoft Learn” which both will cause backup issues. This account is used to backup both AD and VMs in the environment. Has anyone run into this? If so, how did you resolve it?
+12- Vaulter
Hi
Good day!
CV rely on Kerberos delegation for operations
So setting the user sensitve or protected users security group will affected the backups
Create one separate account for CV with customer roles/permissions and use for backup.
Regards,
Sureshkumar S
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.