Maintain control of your Microsoft Office 365 email data
Post Reply
agrob
Expert
Posts: 190
Liked: 20 times
Joined: Sep 05, 2011 1:31 pm
Full Name: Andre
Contact:

Public Folder Backup required permission

Post by agrob » Aug 02, 2018 8:16 am

Good Day

VBO365 V2, Exchange Online (all Mailboxes and Public Folder). I can backup all User mailboxes.
I can also see the Root Public Folder Mailbox but backup is not able to protector the Public Folder. The error i get:

Processing mailbox PF-MBX-Root_58e125fa@xxxxxxxx.onmicrosoft.com failed with error: Failed to synchronize item changes in folder: FOLDERNAME.. Access is denied. Check credentials and try again., ICS synchronization failed. :

-> Does the account need ab mailbox (mail enabled) which is used for Backup to protect Public Folder Date? If not, any other special permissions beside the one described in the manual?

Thanks

Polina
Veeam Software
Posts: 1009
Liked: 170 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Public Folder Backup required permission

Post by Polina » Aug 02, 2018 8:38 am

Hi Andre,

All the required permissions are covered in the user guide.
Can you check if this specific folder from the error message has any custom access rights? And also ensure that this folder is located under IPM_SUBTREE (if not, it cannot be processed).

agrob
Expert
Posts: 190
Liked: 20 times
Joined: Sep 05, 2011 1:31 pm
Full Name: Andre
Contact:

Re: Public Folder Backup required permission

Post by agrob » Aug 02, 2018 8:57 am

Hi Polina
Thanks for your answer. Public Folder is located under the IPM_SUBTREE. But we have different permissions set on different Publicfolders. So not all User have access on all PublicFolder
-> I Guess in that case i have to assign at least reader rights to the account which is backing up the PF database right? In that case, i need to mail enalbe this user to grant the required permissions because without Mailbox, i cant set permission for this user on the public folder.

Regards

Polina
Veeam Software
Posts: 1009
Liked: 170 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Public Folder Backup required permission

Post by Polina » Aug 02, 2018 9:09 am

Right, give VBO at least Reviewer access to this folder.
Thanks!

agrob
Expert
Posts: 190
Liked: 20 times
Joined: Sep 05, 2011 1:31 pm
Full Name: Andre
Contact:

Re: Public Folder Backup required permission

Post by agrob » Aug 03, 2018 7:30 am

configured reviewer rights for all public folders for the backup account. still get an "access denied" message.
if i configure outlook with the backup account, i can access and browse all public folder successfully. also the "access denied" message is not always reported on the same folder... i have opened a case

Polina
Veeam Software
Posts: 1009
Liked: 170 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Public Folder Backup required permission

Post by Polina » Aug 03, 2018 10:03 am

Thanks for letting me know, Andre. And please post your case ID here, so that I could track the investigation.

agrob
Expert
Posts: 190
Liked: 20 times
Joined: Sep 05, 2011 1:31 pm
Full Name: Andre
Contact:

Re: Public Folder Backup required permission

Post by agrob » Aug 03, 2018 10:41 am

Sure, the Case ID is 03131049
Thanks

agrob
Expert
Posts: 190
Liked: 20 times
Joined: Sep 05, 2011 1:31 pm
Full Name: Andre
Contact:

Re: Public Folder Backup required permission

Post by agrob » Aug 06, 2018 2:36 pm

Solution:
Veeam Uses inpersonation, so in fact the default "user" is issued to access PF Data. Because Default has not required rights, impersonation needs to be disabled.

1. Stop Veeam Backup for O365 Services
2. Edit proxy.xml file located in c:\programdata\veeam\backup365
3. Add the following line under <Archiver>
<Source EwsImpersonatePublics="False" />
4. Restart Veeam Backup for O365 Services

Now the backup should run successful.
(Note: User configured for Backup in Veeam O365 needs reviewer rights on all Public folders)

Many Thanks to Veeam Support for solving this!

Best Regards

Mike Resseler
Product Manager
Posts: 5844
Liked: 640 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Public Folder Backup required permission

Post by Mike Resseler » Aug 07, 2018 5:05 am

Andre,

Thanks for coming back to us with the solution! I am sure others will benefit from this also. I will also put this up as a candidate for a KB!

final
Enthusiast
Posts: 32
Liked: 11 times
Joined: Aug 14, 2016 7:19 pm
Contact:

Re: Public Folder Backup required permission

Post by final » Aug 12, 2018 9:44 am

Note that EwsImpersonatePublics is only available in v2. However, Veeam has a patch for 1.5 which provides this funcionality. I was given this patch about 8 months ago when I had the same problem.

Mike Resseler
Product Manager
Posts: 5844
Liked: 640 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Public Folder Backup required permission

Post by Mike Resseler » Aug 13, 2018 5:04 am

Final,

Thanks also for this! Again something which can help other people here on the forums!
Good stuff
M/

danc
Influencer
Posts: 21
Liked: never
Joined: Apr 15, 2015 7:19 am
Full Name: Dan
Contact:

Re: Public Folder Backup required permission

Post by danc » Jun 20, 2019 1:49 am

agrob wrote:
Aug 06, 2018 2:36 pm
Solution:
Veeam Uses inpersonation, so in fact the default "user" is issued to access PF Data. Because Default has not required rights, impersonation needs to be disabled.

1. Stop Veeam Backup for O365 Services
2. Edit proxy.xml file located in c:\programdata\veeam\backup365
3. Add the following line under <Archiver>
<Source EwsImpersonatePublics="False" />
4. Restart Veeam Backup for O365 Services

Now the backup should run successful.
(Note: User configured for Backup in Veeam O365 needs reviewer rights on all Public folders)

Many Thanks to Veeam Support for solving this!

Best Regards
I have tried the above fix and still getting the same error:
20/06/2019 11:38:33 AM :: Processing mailbox Mailbox1_8360xxxxxx@ABC.onmicrosoft.com failed with error: Failed to synchronize item changes in folder: XXXXXX.. Access is denied. Check credentials and try again., ICS synchronization failed. :: 0:10:32

I am running VBO365 version 3

Thanks
Dan

Polina
Veeam Software
Posts: 1009
Liked: 170 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Public Folder Backup required permission

Post by Polina » Jun 20, 2019 9:12 am

Dan,

Which type of authentication are you using? how is your service account configured? are there any specific permissions configured for your public folders?

Regnor
Service Provider
Posts: 338
Liked: 67 times
Joined: Jan 31, 2011 11:17 am
Full Name: Max
Contact:

Re: Public Folder Backup required permission

Post by Regnor » Dec 03, 2019 12:15 pm

With "<Source EwsImpersonatePublics="False" />" is it necessary for the backup user to have a mailbox? And what permission does the user need on the PFs?

Polina
Veeam Software
Posts: 1009
Liked: 170 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Public Folder Backup required permission

Post by Polina » Dec 03, 2019 3:32 pm

Hi Max,

Yes, having a mailbox and the Reviewer access rights are required.

Thanks!

Regnor
Service Provider
Posts: 338
Liked: 67 times
Joined: Jan 31, 2011 11:17 am
Full Name: Max
Contact:

Re: Public Folder Backup required permission

Post by Regnor » Dec 04, 2019 2:12 pm

Hi Polina,
thanks for confirming.
We've also had the problem that the permissions wern't applied to all publicfolders, when set via the Exchange Admin Center; we had to apply them via powershell.

Polina
Veeam Software
Posts: 1009
Liked: 170 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Public Folder Backup required permission

Post by Polina » Dec 04, 2019 2:32 pm

When working via the Admin Center it happens quite often - it needs some time for synchronization; so you might have had to wait a bit longer for those changes to be applied.

Regnor
Service Provider
Posts: 338
Liked: 67 times
Joined: Jan 31, 2011 11:17 am
Full Name: Max
Contact:

Re: Public Folder Backup required permission

Post by Regnor » Dec 05, 2019 9:09 am

This is the case for anything you do in Office365 ;)

Post Reply

Who is online

Users browsing this forum: No registered users and 10 guests