To restore an Exchange mailbox/folder/item via the Veeam Explorer for Exchange, the account connecting to the Exchange server will require Full Access to the mailbox in question. To perform such a restore (without having to give your entire backup admin teams Full Access to every mailbox in your estate), we will cover the process of granting Application Impersonation to your administrative staff. This procedure applies to both on premise Exchange and Office 365 and can be easily implemented via a few simple Exchange Management Shell commands.

Veeam Exchange Explorer

Veeam Explorer for Exchange - The account does not have permission to impersonate the requested user

Implementing Exchange Application Impersonation

After connecting to your Exchange Server, launch Exchange Management Shell and run the below command. This will configure Application Impersonation for a specific user.

New-ManagementRoleAssignment –Name:"<ASSIGNMENT_NAME>" –Role:ApplicationImpersonation –User:"<USERNAME>"

Implementing Exchange Application Impersonation

View Accounts Configured for Application Impersonation

Get-ManagementRoleAssignment -Role ApplicationImpersonation

View Exchange Application Impersonation

Removing an Account Configured for Application Impersonation

Remove-ManagementRoleAssignment -Identity "<ASSIGNMENT_NAME>"

Remove Exchange Application Impersonation

Reference

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.