by postmaal » Thu Oct 13, 2016 8:13 pm people like this post
We currently use two factor for Office 365. If I turn two factor off I am able to use my credentials to continue setting it up. If I try and use my regular login credentials, I cannot get past Connect to EWS, If I use an app password I get past Connect to EWS but fail connecting to powershell as "App Passwords are not available for use with PowerShell access to Office 365". Any suggestions?
by postmaal » Fri Oct 14, 2016 12:51 pm people like this post
Thanks for the suggestion Mike,
We do use a non two-factor user for powershell as Microsoft, to the best of my knowledge, doesn't allow multi-factor auth with power shell sessions. Since it appears veeam leverages powershell to connect to 365 I'm going to have to use that same user for the backups. I don't like it but I can live with it and rely on a strict password. I'm beginning to realize this isn't a veeam issue but instead of Microsoft one. It does seem backwards to me that the powershell admin user (one who has access to everything) isn't allowed multi-factor authentication. I also don't like giving up such passwords to 3rd party applications.
by Mike Resseler » Fri Oct 14, 2016 7:41 pm people like this post
I can understand, but as you said yourself... This is something we can't control. Please let us know if this works. From our side, we will ask (but not for v1 anymore) Microsoft to see if this is something that can be solved. For your information, your password and user is stored encrypted in our solution.
by mcz » Thu Jun 22, 2017 12:50 pm people like this post
surprise, surprise. Switched on MFA for the admin and realized that powershell doesn't work anymore - it tells you "access denied" and using the app-password bringts you the message "app-password not allowed using powershell". I found an article about powershell & MFA - so Microsoft supports MFA & powershell:
by mcz » Mon Jun 26, 2017 7:14 am people like this post
Yeah Mike of course, I know that any promises will be difficult and maybe unrealistic. But it would be nice to hear anything from you when it has been decided if it will be implementet in future releases. Thank you!