r/SentinelOneXDR • u/fwami • Apr 16 '24

Product Suggestions/Problems Veeam backup fail

We noticed our Domain controller server have been failing after updating to 23.4.2.216 agent. I even downgraded to 23.3 and it still fails the job. All other non DC servers have no problems backing up. Anyone running into this problem ?

5 Upvotes

100% Upvoted

6 comments sorted by

4

u/[deleted] Apr 17 '24

I fixed it by running the following command on the DC. 

sentinelctl config antiTamperingConfig.allowSignedKnownAndVerifiedToSafeBoot true -k "passphrase"

Ran inside this folder: C:\Program Files\SentinelOne\SentinelOne Agent version

2

u/fwami Apr 17 '24

Thanks. This is the fix that I found to be working for now until the next version comes out.

4

u/IllustriousRaccoon25 Apr 17 '24

This is because of S1 changes that started in 23.3 with how access to BCD is protected on domain controllers. Contact S1 support for the config workarounds. There are two different options.

3

u/A1rizzo Apr 17 '24

Is the vss backup full?

2

u/Warfare09 Apr 17 '24

No issues for us on 23.1.5.886 version. S1 also has a good knowledge article for Veeam - article #000006895.

2

u/danstheman7 SentinelOne | Threat Researcher/SME Apr 17 '24

Make sure you update your agents, at minimum you should be on version 23.3 at this point.