image The ability to restore files directly to the source virtual machine within the Enterprise Manager Web UI is one of the key new Veeam Backup & Replication v6 features. Best done with Active Directory security groups, 1-Click File Restore allows selected files to be restored directly to a VM’s guest-operating system, without the user requiring access to:

The virtual machine guest-operating system

■ The Veeam Backup & Replication console

■ The backup repository

■ The virtualization infrastructure (Hyper-V and vSphere)

Let’s walk through an example of creating a very basic security group and provisioning the permission to perform the 1-Click File Restore. The requirement for an (Active Directory or Built-in) account using the feature is provisioning it for use in the Enterprise Manager Web UI roles section. Figure A shows an Active Directory group being added to the File Restore Operator Role.

Figure A


The SSA-Users-Helpdesk group has no membership to any other security groups and is in the Users organizational unit, which in this domain has no user permissions assigned to the location. The configuration of the group is very straightforward and is shown in Figure B.

Figure B


This group has one user, SSAHelpdesk, which has no rights in the domain except “Domain Users.” When this user logs into the Enterprise Manager Web UI, the interface is restricted to show only the file-restore operation. The role, if enabled, permits restores using 1-Click-File Restore functionality to limit by file type. The default-file types include:

  • Text documents
  • Adobe Acrobat (PDF)
  • All common Microsoft Word documents

File types can be added or removed to this list with the Enterprise Manager Web UI “Site Settings” option. In addition, the option to download the file as part of the restore process is removed. This is shown in Figure C.

Figure C


The restore capability uses the Application-aware processing credentials during the backup job; this is for both vSphere and Hyper-V virtual machines.

Have you experienced the new 1-Click File Restore capabilities of Veeam Backup & Replication v6? Does this configuration appeal to you? Share your comments below.


GD Star Rating
Configuring Active Directory security groups for 1-Click File Restore, 5.0 out of 5 based on 1 rating

Veeam Availability Suite — Download free 30-day trial

Download now
  • Hi there,

    Thank you for this post. I tried 1-click file restore and it really is a cool feature.

    It’s working great but I can’t find any documentation on how it works.

    Does it use an in-guest agent or just the administratives shares on the VM to push the restored file ?

  • Hi Tibo:

    The User Guide has information on the 1-click file restore.

    I’ll tell you however it uses the Application Aware Processing configuration from the job.

  • Thank you for your answer.

    There are actually very few information about 1-click file restore in user guide.

    I perfectly understand how to use it but I would like to know how it really works.

    It’s using application aware processing credentials but what does it do with these credentials ?

    Does it open an administrative share, run a specific in-guest agent or maybe something else ?

    Veeam B&R uses great technos but documentation falls short. Having a FAQ on a forum is not enough.
    Technical aspects should be made available through specific documentations.