-
- Novice
- Posts: 3
- Liked: never
- Joined: Sep 22, 2021 5:07 pm
- Full Name: Myles Taylor
- Contact:
Connect to PowerShell: Connecting to remote server outlook.office365.com
I have a case open with support but I would appreciate any thoughts or assistance from the community.
Case #05038587
Veeam version: 5.0.3.1033 Community Edition
Whilst trying to add a new O365 organization I am running into issues on the last connection, PowerShell. Connecting to SharePoint and Teams was fine, EWS took some configuration changes but is now successfull but no matter what I try I can not get it to connect to PowerShell. Here is what I've done and checked so far. I'm setting up the org using modern authentication with legacy protocols.
I'm using a certificate instead of an app secret.
The Veeam O365 service account has MFA enabled.
It is excluded from the conditional access policy that disables legacy authentication.
It has an MFA app password configured
It has the following Azure roles, Global Administrator, Teams Administrator, SharePoint Administrator and Exchange Administrator.
I have created and assigned an Exchange authentication policy that permits the use of the following basic authentication methods AllowBasicAuthPowerShell, AllowBasicAuthWebServices
The Azure AD app registration has the folllowing Exchange API permissions configured, EWS.AccessAsUser.All and full_access_app
The Veeam O365 service account has is a member of the ExchangeServiceAdmins role which provides it with the necessary role permissions such as ApplicationImpersonation, View-Only Configuration and View-Only Recipients.
What am I missing?!
Case #05038587
Veeam version: 5.0.3.1033 Community Edition
Whilst trying to add a new O365 organization I am running into issues on the last connection, PowerShell. Connecting to SharePoint and Teams was fine, EWS took some configuration changes but is now successfull but no matter what I try I can not get it to connect to PowerShell. Here is what I've done and checked so far. I'm setting up the org using modern authentication with legacy protocols.
I'm using a certificate instead of an app secret.
The Veeam O365 service account has MFA enabled.
It is excluded from the conditional access policy that disables legacy authentication.
It has an MFA app password configured
It has the following Azure roles, Global Administrator, Teams Administrator, SharePoint Administrator and Exchange Administrator.
I have created and assigned an Exchange authentication policy that permits the use of the following basic authentication methods AllowBasicAuthPowerShell, AllowBasicAuthWebServices
The Azure AD app registration has the folllowing Exchange API permissions configured, EWS.AccessAsUser.All and full_access_app
The Veeam O365 service account has is a member of the ExchangeServiceAdmins role which provides it with the necessary role permissions such as ApplicationImpersonation, View-Only Configuration and View-Only Recipients.
What am I missing?!
-
- Novice
- Posts: 3
- Liked: never
- Joined: Sep 22, 2021 5:07 pm
- Full Name: Myles Taylor
- Contact:
Re: Connect to PowerShell: Connecting to remote server outlook.office365.com
edit
I should have added, I can successfull connect to Exchange Online via PowerShell using the service account outside of Veeam but on the server it's installed on, so that isolates firewall and/or permissions I would have thought.
I should have added, I can successfull connect to Exchange Online via PowerShell using the service account outside of Veeam but on the server it's installed on, so that isolates firewall and/or permissions I would have thought.
-
- Veeam Software
- Posts: 3136
- Liked: 756 times
- Joined: Oct 21, 2011 11:22 am
- Full Name: Polina Vasileva
- Contact:
Re: Connect to PowerShell: Connecting to remote server outlook.office365.com
Hi Myles,
Can you also check if the LegacyAuthProtocolsEnabled is set to true?
Can you also check if the LegacyAuthProtocolsEnabled is set to true?
-
- Novice
- Posts: 3
- Liked: never
- Joined: Sep 22, 2021 5:07 pm
- Full Name: Myles Taylor
- Contact:
Re: Connect to PowerShell: Connecting to remote server outlook.office365.com
Hey that's on the SharePoint side yes? Just confirmed that is enabled
LegacyAuthProtocolsEnabled : True
LegacyAuthProtocolsEnabled : True
-
- Lurker
- Posts: 1
- Liked: never
- Joined: Dec 23, 2021 11:07 am
- Contact:
Re: Connect to PowerShell: Connecting to remote server outlook.office365.com
Hi mrit,
have you fixed the problem? I´ve still the same problem.
have you fixed the problem? I´ve still the same problem.
-
- Product Manager
- Posts: 9689
- Liked: 2562 times
- Joined: May 13, 2017 4:51 pm
- Full Name: Fabian K.
- Location: Switzerland
- Contact:
Re: Connect to PowerShell: Connecting to remote server outlook.office365.com
Hi EarlSinclair
Have a look at @regnors Blog in the community boards.
Microsoft has started to disable Basic Auth without asking the customer.
Regnor writes about a way to find out if you are affected by this change and what you can do to get back Basic Auth for Powershell.
https://community.veeam.com/blogs-and-p ... tocol-1805
Have a look at @regnors Blog in the community boards.
Microsoft has started to disable Basic Auth without asking the customer.
Regnor writes about a way to find out if you are affected by this change and what you can do to get back Basic Auth for Powershell.
https://community.veeam.com/blogs-and-p ... tocol-1805
Product Management Analyst @ Veeam Software
Who is online
Users browsing this forum: No registered users and 8 guests