=============== LIBRARY RULES =============== From library maintainers: - This is unofficial documentation - always verify against official Veeam Help Center # Veeam Agent for Microsoft Windows Veeam Agent for Microsoft Windows is a comprehensive backup and recovery solution designed to protect Windows-based computers including servers, desktops, laptops, and tablets. The agent operates as a Windows service that runs in the background, using a SQLite database for configuration storage and providing both GUI and command-line interfaces for backup operations. It supports multiple backup destinations including local storage, network shares, object storage (Amazon S3, Azure Blob, Google Cloud), Veeam backup repositories, and Veeam Cloud Connect repositories. The solution offers volume-level and file-level backup modes, with features including Changed Block Tracking (CBT) for efficient incremental backups, data encryption, backup immutability for ransomware protection, application-aware processing for Microsoft SQL Server, Exchange, SharePoint, and Oracle databases, and comprehensive restore options including bare metal recovery. Veeam Agent integrates with Veeam Backup & Replication for enterprise management and supports automated scheduling, retention policies, and GFS (Grandfather-Father-Son) archival schemes. ## Command Line Interface - Backup Operations The Veeam Agent command-line interface enables automated backup operations through scripts and scheduled tasks, supporting incremental, active full, and standalone full backup types with exit code reporting for job status verification. ```batch REM Basic incremental backup (single job configured) "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /backup REM Incremental backup with specific job ID (multiple jobs configured) "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /backup "a1b2c3d4-e5f6-7890-abcd-ef1234567890" REM Active full backup - creates new full backup in existing chain "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /activefull REM Active full backup with job ID "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /activefull "a1b2c3d4-e5f6-7890-abcd-ef1234567890" REM Standalone full backup - independent backup not part of chain "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /standalone REM Standalone full backup to custom location "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /standalone "D:\Backups\Standalone" REM Standalone full backup with job ID to custom location "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /standalone "E:\CustomBackup" "a1b2c3d4-e5f6-7890-abcd-ef1234567890" REM Check exit code after backup "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /backup echo Exit Code: %ERRORLEVEL% REM Exit codes: 0=success, -1=failed, 5=job already running ``` ## Unattended Installation Veeam Agent supports silent installation for automated deployments in enterprise environments, automatically installing prerequisites including SQLite, OpenSSL, ASP.NET Core Runtime, and .NET Desktop Runtime. ```batch REM Silent installation with all required acceptances VeeamAgentWindows_6.0.0.1009.exe /silent /accepteula /acceptthirdpartylicenses /acceptlicensingpolicy /acceptrequiredsoftware REM Example deployment script with error handling @echo off set INSTALLER=\\server\share\VeeamAgentWindows_6.0.0.1009.exe %INSTALLER% /silent /accepteula /acceptthirdpartylicenses /acceptlicensingpolicy /acceptrequiredsoftware if %ERRORLEVEL%==1000 ( echo Installation successful ) else if %ERRORLEVEL%==1001 ( echo Prerequisites installed - reboot required shutdown /r /t 60 /c "Rebooting for Veeam Agent installation" ) else if %ERRORLEVEL%==1101 ( echo Installation complete - reboot required shutdown /r /t 60 /c "Rebooting to complete Veeam Agent installation" ) else if %ERRORLEVEL%==1002 ( echo Installation failed exit /b 1 ) ``` ## Creating Recovery Media via Command Line The recovery media creation command generates a bootable ISO image containing Windows Recovery Environment with Veeam tools for bare metal restore operations. ```batch REM Create recovery media ISO to specific location "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /createrecoverymediaiso /f:E:\Veeam\RecoveryImage\VeeamRE.iso REM Create recovery media to default location (Documents folder) "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /createrecoverymediaiso REM Example script with verification @echo off set OUTPUT_PATH=D:\Recovery\VeeamRecoveryMedia.iso mkdir D:\Recovery 2>nul "C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /createrecoverymediaiso /f:%OUTPUT_PATH% if %ERRORLEVEL%==0 ( echo Recovery media created successfully: %OUTPUT_PATH% dir %OUTPUT_PATH% ) else ( echo Failed to create recovery media exit /b 1 ) ``` ## Backup Job Configuration - Backup Modes Veeam Agent supports three backup modes: entire computer image backup for complete system protection, volume-level backup for specific partitions, and file-level backup for individual folders and documents. ``` Backup Mode Selection (New Backup Job Wizard): 1. ENTIRE COMPUTER - Backs up all computer volumes including system, boot, and data volumes - Recommended for full disaster recovery capability - Creates volume-level backup supporting bare metal restore 2. VOLUME LEVEL BACKUP - Select specific volumes: System (C:), Data (D:), etc. - Options: * System volume only - Operating system and boot data * Selected volumes - Choose specific partitions - Supports bare metal restore for selected volumes 3. FILE LEVEL BACKUP - Specify individual folders: C:\Users\Documents, C:\Projects - Personal data shortcuts: * Documents folder * Pictures folder * Desktop * Custom folders - Smaller backup size, faster operations - Cannot be used for bare metal restore ``` ## Backup Destination Configuration Veeam Agent supports multiple backup target locations with specific configuration options for each storage type, enabling flexible data protection strategies. ``` Backup Destination Options: 1. LOCAL STORAGE - Removable devices: USB drives, external HDDs - Local drives: Secondary internal drives (not system volume) - Path example: D:\VeeamBackups\ 2. OBJECT STORAGE (Amazon S3 example) Settings required: - Access Key ID: AKIAIOSFODNN7EXAMPLE - Secret Access Key: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY - AWS Region: us-east-1, eu-west-1, etc. - Bucket: my-backup-bucket - Folder: /veeam-agent-backups/server01/ Immutability settings (optional): - Enable S3 Object Lock on bucket - Immutability period: 30 days (default) or retention-based 3. SHARED FOLDER (SMB/CIFS) - Path: \\fileserver\backups\ - Credentials: domain\username + password - UNC paths supported 4. VEEAM BACKUP REPOSITORY - Server: vbr-server.domain.com - Port: 10006 (default) - Credentials: Backup administrator account - Repository selection from available repositories 5. VEEAM CLOUD CONNECT - Service provider URL: https://sp.cloudprovider.com - Tenant credentials provided by service provider - Cloud repository allocated by provider ``` ## Backup Schedule Configuration The Server Edition provides comprehensive scheduling options including daily, monthly, periodic, and continuous backup modes with automatic retry and backup window controls. ``` Schedule Configuration Options: DAILY SCHEDULE - Time: 10:00 PM - Days: Monday, Tuesday, Wednesday, Thursday, Friday - Automatic retry: 3 attempts, 10 minutes apart MONTHLY SCHEDULE - Day of month: 1st, 15th - Time: 2:00 AM PERIODIC SCHEDULE - Interval: Every 4 hours - Permitted window: 6:00 PM - 8:00 AM (outside business hours) - Start time within hour: :00 (on the hour) CONTINUOUS BACKUP - New session starts immediately after previous completes - Maximum protection with minimal data loss BACKUP WINDOW SETTINGS - Enable: "Terminate job if it exceeds allowed backup window" - Allowed: 6:00 PM - 6:00 AM (weekdays) - Allowed: All day (weekends) - Jobs exceeding window are automatically terminated RETENTION POLICY - Short-term: Keep backups for 14 days - GFS (long-term): * Weekly: Keep 4 weekly full backups * Monthly: Keep 12 monthly full backups * Yearly: Keep 3 yearly full backups ``` ## Application-Aware Processing Configuration Application-aware processing ensures transactionally consistent backups of Microsoft SQL Server, Exchange, SharePoint, Oracle, and Active Directory through VSS integration. ``` Supported Applications and Settings: MICROSOFT SQL SERVER - Versions: SQL Server 2012-2025 (all editions except LocalDB) - Options: * Transaction log handling: Truncate logs / Backup logs * Log backup interval: Every 15 minutes * Credentials: SQL Server authentication or Windows auth MICROSOFT EXCHANGE - Versions: Exchange 2016, 2019, Subscription Edition - Options: * Transaction log truncation after backup * VSS full backup mode MICROSOFT SHAREPOINT - Versions: SharePoint 2016, 2019, Subscription Edition - All editions: Foundation, Standard, Enterprise - VSS-consistent backup of content databases ORACLE DATABASE - Versions: 11g through 21c - Options: * Archive log handling: Delete / Do not delete * Archive log backup with image-level backup * SYSDBA credentials required - Limitations: ASM, RAC, Data Guard not supported ACTIVE DIRECTORY - Domain controllers: Windows Server 2012 R2 - 2025 - Minimum functional level: Windows Server 2003 - VSS-aware backup of AD database ``` ## Volume-Level Restore Process Volume-level restore recovers entire disk volumes from backup, supporting restoration to original or new locations with optional volume resizing capabilities. ``` Volume Restore Wizard Steps: 1. LAUNCH WIZARD - Control Panel > Restore > Volume Restore - Or: Veeam Agent Tray > Restore > Volume Level Restore 2. SPECIFY BACKUP LOCATION - Local: Browse to VBK/VIB files - Network share: \\server\backups\ - Object storage: Provide credentials and bucket info - Veeam repository: Connect to backup server 3. SELECT BACKUP - Choose from available backup jobs - Only volume-level backups shown (not file-level) 4. SELECT RESTORE POINT - Date/time of restore point - View restore point details and size 5. DISK MAPPING - Original location: Overwrite existing volume - New location: Select target disk/partition - Options: * Restore volume data only * Restore volume with partition table 6. VOLUME RESIZE (optional) - Shrink: Reduce volume if target is smaller - Extend: Expand volume if target is larger - Automatic: Fit to available space 7. COMPLETE RESTORE - Review settings - Start restore process - Monitor progress in Control Panel LIMITATIONS: - Cannot restore system volume to original location (use Recovery Media) - Cannot restore to volume hosting swap file - Cannot restore to volume containing backup file ``` ## File-Level Restore Process File-level restore enables granular recovery of individual files and folders by mounting backup contents directly to the file system for browsing and selective restoration. ``` File Restore Wizard Steps: 1. LAUNCH WIZARD - Control Panel > Restore > File Level Restore - Veeam Agent Tray > Restore > File Level Restore 2. SPECIFY BACKUP LOCATION - Local storage path - Network shared folder - Object storage (S3, Azure, Google Cloud) - Veeam backup repository 3. SELECT BACKUP AND RESTORE POINT - Choose backup job - Select specific restore point (date/time) 4. MOUNT AND BROWSE - Backup content mounted to: C:\VeeamFLR\\ - Browse using: * Veeam Backup Browser (built-in) * Windows Explorer 5. RESTORE OPTIONS - Restore to original location (overwrite) - Copy to new location - Keep original permissions or apply new ones EXAMPLE RESTORE PATHS: Original file: C:\Users\John\Documents\report.docx Mounted at: C:\VeeamFLR\Volume0\Users\John\Documents\report.docx Restore actions: - Right-click > Restore (to original location) - Right-click > Copy To... (specify destination) - Drag and drop to any location ``` ## Backup Immutability Configuration Backup immutability protects data from deletion or modification by leveraging object storage native capabilities like S3 Object Lock, Azure immutable storage, and Google Cloud Object Retention. ``` Immutability Setup Requirements: AMAZON S3 / S3-COMPATIBLE Prerequisites: 1. Create bucket with S3 Versioning enabled 2. Enable S3 Object Lock during bucket creation 3. Disable default retention (important!) AWS CLI example: aws s3api create-bucket --bucket my-immutable-backup --region us-east-1 \ --object-lock-enabled-for-bucket aws s3api put-bucket-versioning --bucket my-immutable-backup \ --versioning-configuration Status=Enabled MICROSOFT AZURE BLOB Prerequisites: 1. Enable blob versioning on storage account 2. Enable version-level immutability support 3. Do NOT enable immutability on existing containers GOOGLE CLOUD STORAGE Prerequisites: 1. Create bucket with Object Versioning 2. Enable Object Retention Lock VEEAM AGENT CONFIGURATION Backup Job > Object Storage Settings: - Select "Make backups immutable" - Option 1: "For the entire duration of their retention policy" - Option 2: "For the minimum immutability period only" (specify days) - Default minimum period: 30 days SUPPORTED STORAGE TYPES: - Veeam Data Cloud Vault - Amazon S3 - S3 compatible (including Wasabi) - Microsoft Azure Blob Storage - Google Cloud Storage ``` ## Data Encryption Configuration Data encryption protects backup data using AES-256 encryption, with encryption performed on the source side for most targets and on the target side for Veeam backup repositories. ``` Encryption Configuration: ENABLE ENCRYPTION IN BACKUP JOB Location: Backup Job Wizard > Advanced Settings > Storage Settings: - Enable backup file encryption: Yes - Password: Strong password (store securely!) - Hint: Optional password hint ENCRYPTION BEHAVIOR BY TARGET: 1. Local storage: Encrypted on source (Veeam Agent computer) 2. Network share: Encrypted on source 3. Object storage: Encrypted on source 4. Veeam repository: Encrypted on target (managed by VBR) 5. Cloud Connect: Encrypted on source RESTORE FROM ENCRYPTED BACKUP - Password required during restore - If using Recovery Media: Include encryption keys in media - Or: Enter password when prompted IMPORTANT NOTES: - Store password securely - cannot recover data without it - For Veeam repository targets, encryption managed by VBR admin - Encryption keys can be included in Recovery Media for automated restore ``` ## Backup Chain and Retention Management Veeam Agent creates backup chains consisting of full (VBK) and incremental (VIB) backup files, managed through configurable short-term and long-term (GFS) retention policies. ``` BACKUP CHAIN STRUCTURE: Day 1: [VBK] Full backup (complete data copy) Day 2: [VIB] Incremental (changes since Day 1) Day 3: [VIB] Incremental (changes since Day 2) Day 4: [VIB] Incremental (changes since Day 3) ... Day 8: [VBK] Active full (new full, starts new chain) Day 9: [VIB] Incremental (changes since Day 8) FILE TYPES: - .VBK - Full backup file - .VIB - Incremental backup file - .VBM - Backup metadata file SHORT-TERM RETENTION: - Keep backups for N days (default: 7) - Oldest restore points removed after retention period - Chain integrity maintained automatically GFS (GRANDFATHER-FATHER-SON) RETENTION: Weekly backups: - Keep: 4 weekly full backups - Marked: Last full backup of each week Monthly backups: - Keep: 12 monthly full backups - Marked: Last full backup of each month Yearly backups: - Keep: 5 yearly full backups - Marked: Last full backup of each year ACTIVE FULL BACKUP SCHEDULE: - Weekly: Every Saturday - Monthly: First day of month - Creates new full backup in chain - Helps limit incremental chain length ``` ## Summary Veeam Agent for Microsoft Windows provides enterprise-grade data protection for Windows systems through its comprehensive backup and recovery capabilities. The primary use cases include protecting physical servers and workstations from data loss, enabling bare metal recovery for disaster scenarios, maintaining application-consistent backups of business-critical databases, and implementing ransomware protection through backup immutability. Organizations can deploy Veeam Agent as a standalone solution or integrate it with Veeam Backup & Replication for centralized management of hybrid environments spanning physical and virtual infrastructure. Integration patterns typically involve silent installation across multiple endpoints using deployment tools, automated backup scheduling through the GUI or command-line interface for scripted operations, and centralized management through Veeam Backup & Replication servers. The agent supports flexible storage targets enabling tiered backup strategies with local storage for fast recovery and cloud object storage for offsite protection. Recovery workflows range from granular file-level restore for accidental deletions to complete bare metal recovery using bootable recovery media, with support for encrypted backups and cross-platform restore scenarios including recovery to cloud platforms like AWS, Azure, and Google Cloud.