Legacy Authentication

[Daithi]

Hi all,

I'm planning to block basic authentication for users here. I'll still need to allow some system accounts (including the Veeam backup account) to use basic auth at the moment.

Can someone let me know what should be allowed here for Veeam backup?

AllowBasicAuthActiveSync : False
AllowBasicAuthAutodiscover : False
AllowBasicAuthImap : False
AllowBasicAuthMapi : False
AllowBasicAuthOfflineAddressBook : False
AllowBasicAuthOutlookService : False
AllowBasicAuthPop : False
AllowBasicAuthReportingWebServices : False
AllowBasicAuthRest : False
AllowBasicAuthRpc : False
AllowBasicAuthSmtp : False
AllowBasicAuthWebServices : False
AllowBasicAuthPowershell : False

[HannesK]

Hello,
I understand your (and from others) request to reduce required permissions. Unfortunately we do not support reduced permissions today. We have that on the feature request list, but we cannot promise any timeline for implementation.

Today there is no official workaround available.

Best regards,
Hannes

[Polina]

Daithi,

To expand on this a bit, AllowBasicAuthPowershell must be enabled for Veeam backup.
And if you set AllowBasicAuthWebServices to false, make sure you use an Application certificate to connect to your organization.