Skip to main content

Backing up a standalone Windows PC

Non domain-joined Windows Workstations/Servers can't be backed up by a Veeam backup server (backup appliance) by default. You'll need to make the following registry change. This enables access to the $ADMIN share on the local network. This assumes we have already deployed an appliance with Veeam B&R installed and it is on the same LAN as the computers you want to backup.

  1. Create a user on the target machine(s) named pnsbackup. Give it a strong password and document it in the companies portal in Hudu. There is a template script in Syncro named TEMPLATE - add pnsbackup user. You should clone this script to the company in question and modify it with the unique password you've created. The end user should never have access to this account, it is strictly for service. We'll never even login to it ourselves ideally. 
  2. Using Regedit or Syncro backgrounding tools, create a DWORD string named LocalAccountTokenFilterPolicy with value 1 at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System 
  3. Reboot the target machine.
  4. Create a protection group including the target machine on the relevant backup server
  5. Use the credentials you created in step 1 to authenticate against the target machine. You should not receive any errors at this step.
  6. Once all the machines you want to backup are in the protection group, create a backup job as you would for any other deployment.