Maintain control of your Microsoft 365 data
Post Reply
mrit
Novice
Posts: 3
Liked: never
Joined: Sep 22, 2021 5:07 pm
Full Name: Myles Taylor
Contact:

Connect to PowerShell: Connecting to remote server outlook.office365.com

Post by mrit »

I have a case open with support but I would appreciate any thoughts or assistance from the community.

Case #05038587
Veeam version: 5.0.3.1033 Community Edition

Whilst trying to add a new O365 organization I am running into issues on the last connection, PowerShell. Connecting to SharePoint and Teams was fine, EWS took some configuration changes but is now successfull but no matter what I try I can not get it to connect to PowerShell. Here is what I've done and checked so far. I'm setting up the org using modern authentication with legacy protocols.

I'm using a certificate instead of an app secret.
The Veeam O365 service account has MFA enabled.
It is excluded from the conditional access policy that disables legacy authentication.
It has an MFA app password configured
It has the following Azure roles, Global Administrator, Teams Administrator, SharePoint Administrator and Exchange Administrator.
I have created and assigned an Exchange authentication policy that permits the use of the following basic authentication methods AllowBasicAuthPowerShell, AllowBasicAuthWebServices
The Azure AD app registration has the folllowing Exchange API permissions configured, EWS.AccessAsUser.All and full_access_app
The Veeam O365 service account has is a member of the ExchangeServiceAdmins role which provides it with the necessary role permissions such as ApplicationImpersonation, View-Only Configuration and View-Only Recipients.

What am I missing?!
mrit
Novice
Posts: 3
Liked: never
Joined: Sep 22, 2021 5:07 pm
Full Name: Myles Taylor
Contact:

Re: Connect to PowerShell: Connecting to remote server outlook.office365.com

Post by mrit »

edit
I should have added, I can successfull connect to Exchange Online via PowerShell using the service account outside of Veeam but on the server it's installed on, so that isolates firewall and/or permissions I would have thought.
Polina
Veeam Software
Posts: 3136
Liked: 756 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Connect to PowerShell: Connecting to remote server outlook.office365.com

Post by Polina »

Hi Myles,

Can you also check if the LegacyAuthProtocolsEnabled is set to true?
mrit
Novice
Posts: 3
Liked: never
Joined: Sep 22, 2021 5:07 pm
Full Name: Myles Taylor
Contact:

Re: Connect to PowerShell: Connecting to remote server outlook.office365.com

Post by mrit »

Hey that's on the SharePoint side yes? Just confirmed that is enabled
LegacyAuthProtocolsEnabled : True
EarlSinclair
Lurker
Posts: 1
Liked: never
Joined: Dec 23, 2021 11:07 am
Contact:

Re: Connect to PowerShell: Connecting to remote server outlook.office365.com

Post by EarlSinclair »

Hi mrit,

have you fixed the problem? I´ve still the same problem.
Mildur
Product Manager
Posts: 9689
Liked: 2562 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Connect to PowerShell: Connecting to remote server outlook.office365.com

Post by Mildur » 2 people like this post

Hi EarlSinclair

Have a look at @regnors Blog in the community boards.
Microsoft has started to disable Basic Auth without asking the customer.

Regnor writes about a way to find out if you are affected by this change and what you can do to get back Basic Auth for Powershell.

https://community.veeam.com/blogs-and-p ... tocol-1805
Product Management Analyst @ Veeam Software
Post Reply

Who is online

Users browsing this forum: No registered users and 8 guests