Access Denied Error After Migrating Configuration from MFA-Enabled Server

Option 1: Perform Configuration Restore Using "Restore" Mode

1. Restore the configuration again, and this time select the "Restore" option on the Restore Mode tab.
2. During the Configuration Restore, a Warning will be displayed with the following message:

   Disabling multi-factor authentication, be sure to enable it back after the recovery.
   

3. After completing the Configuration Restore, sign in to the Veeam Backup & Replication Console using the local Administrator account.
4. Open the Users and Roles Security panel.
5. Remove Users associated with the old Veeam Backup Server or domain that the machine previously connected to.
6. Add accounts as needed and assign their roles.
   ^{Remember to assign at least one account the role of Veeam Backup Administrator.}
7. Enable MFA.
   Note: Each added account must perform the initial MFA setup steps on the next login.

2. Sign in to the Veeam Backup & Replication Console using the local Administrator account.
   
3. Open the Users and Roles Security panel.
4. Remove Users associated with the old Veeam Backup Server or domain that the machine previously connected to.
5. Add accounts as needed and assign their roles.
   ^{Remember to assign at least one account the role of Veeam Backup Administrator.}
6. Enable MFA.
   Note: Each added account must perform the initial MFA setup steps on the next login.

Option 3: Override MFA Requirement By Temporarily Assigning Administrator Account as Service Log On

1. Open the Services control panel (services.msc)
2. Open the properties of the Veeam Backup Service service.
3. On the Log On tab, select the option "This account:" and enter Administrator and provide the password for the local Administrator account.
4. Restart the Veeam Backup Service service.
   
   Note: If the service fails to start, review: KB4542: "SSPI authentication failed for user"
5. Sign in to the Veeam Backup & Replication Console using the local Administrator account.
6. Open the Users and Roles Security panel.
7. Remove Users associated with the old Veeam Backup Server or domain that the machine previously connected to.
8. Add accounts as needed and assign their role.
   ^{Remember to assign at least one account the role of Veeam Backup Administrator.}
9. Enable MFA.
   Note: Each added account must perform the initial MFA setup steps on the next login.
10. Return Veeam Backup Service service's Log On As setting to "Local System account," and restart the service.