Veeam Hardening¶
Synopsis: Official Veeam script that automates applying the hardening recommendations from Veeam Backup & Replication's built-in Security & Compliance Analyzer.
Veeam Backup & Replication ships with a Security & Compliance Analyzer that checks the local server's configuration against Veeam's security best practices — covering things like deprecated SSL/TLS protocol versions, Remote Desktop Services configuration, Windows Remote Management (WinRM) settings, and various registry-based security parameters. This script (documented in Veeam KB4525) automates fixing what the Analyzer finds instead of applying each recommendation by hand: it connects to the local Veeam Backup & Replication instance, triggers a new Analyzer session, and presents an interactive menu to refresh the report, apply all recommended configurations, or remediate a single selected item.
Local machine only, not reversible
The script only affects the local machine where Veeam is installed, and changes cannot be undone once applied. Some recommendations can affect other applications or disable remote management on that server — review the suppressed/skipped recommendations in the report before applying everything.
Usage examples:
powershell -ExecutionPolicy Bypass -File "X:\path\to\script.ps1"
pwsh -ExecutionPolicy Bypass -File "X:\path\to\script.ps1"
pwsh).