Category: MS Office 365

Microsoft office 365, configuration, backups, solutions.

  • Change Frequency of Auto Recovery Files in Word 365

    Change Frequency of Auto Recovery Files in Word 365

    In this article, we will explore how to change frequency of auto recovery files in Word 365. Sometimes, individuals just want to learn new things. I am one of those individuals, and I hope you are well. This is a little bit of information that most people are not aware of. No matter what reason you may have, you can alter the frequency with which recovery files are saved in Word 365.

    Microsoft Word automatically saves your document every 5 or 10 minutes, assuming something happens to your computer while working on it. To alter the AutoRecover time option, choose your Microsoft Word version from the list below and follow the guidelines.

    Follow the steps below to learn how to change the autorecover file location:

    What is Microsoft Word AutoSave?

    Microsoft Word AutoSave is a document recovery tool that automatically saves your document in a temporary format every few seconds. It was initially introduced with Microsoft Office 365 and worked with other Office apps such as Excel and PowerPoint.

    It is enabled by default; however, you can select to enable/disable it through a single toggle switch. You should use OneDrive, OneDrive for Business, or SharePoint Online to save your Word file. If you wish to store your files locally, you can use the AutoRecover feature. It saves the files every 10 minutes, even though you don’t need an internet connection.

    Where is the Word Autosave Location, and How Can I Change It?

    You can simply locate Word AutoSave in the top pane of Word, just above the File tab. It is difficult to ignore as it is the only toggle switch in that vicinity.

    The temporary document for AutoSave is located in the exact location where you installed Word. The default Word Autosave Location is as follows:

    For Windows:

    C:\Users\user name\AppData\Roaming\Microsoft\word

    How to Change AutoRecover Files location in Word on Windows

    If you want to locate the temporary files quickly, create a custom save location for all AutoSave and AutoRecover files. Just follow the steps described below.

    Open Microsoft Word either from Microsoft 365 or through the Start Menu.
    Select the File tab and click on Options.

    Microsoft word file menu

    From your left, click on the Save tab.

    View the Save Documents section from the dialogue box. Then, type the desired path for the AutoRecover file under “AutoRecover file location.”.

    Click OK to confirm the changes.

    change frequency of auto recovery files

    How to Turn on or off Autosave in Word

    You can enable or disable the Word Autosave function by adjusting the switch in the topmost pane to On or Off. Remember, it will be reflected on every document until you turn it back on.

    Turn on or off Autosave in Word 365

    Alternatively, you can turn on or off Microsoft Word AutoSave for certain files by using the following method:

    Click on the File tab, choose Options, and then click Save.

    To enable or disable the AutoSave feature for that specific file, use the AutoSave box.

    How to Restore Unsaved Documents Using AutoSave in Word

    As noted above, you can check the Word AutoSave Location for backup files:

    C:\Users\<UserName>\AppData\Roaming\Microsoft\Word

    If you are unable to find the desired file in the location, you can follow the steps below:

    Open MS Word via the Taskbar or Microsoft 365.

    Click on the File tab, click on Info, Manage Document and then Recover Unsaved Documents.

    Recover unsaved documents in Word

    The drafts will appear in a new window. Select the Save As option to save the documents you want. It will now be stored in your computer/OneDrive account.

    Microsoft Word 2013, 2016, 2019

    In Microsoft Word, select the File tab.

    From the left navigation bar, click Options.

    In the Word Options window, select Save in the left navigation menu.

    Under the Save documents option, change the number of minutes for the Save AutoRecover information every 10 minutes. Microsoft Word should automatically save any open documents.

    Click the ok button in the top-right corner of the Word Options window to save your changes.

    Save autorecover information every

    Microsoft Word 2010
    Click File and then Options.
    Click Save.
    Increase or decrease the AutoRecover time settings.
    Microsoft Word 2007
    Click the Office button.
    Select Word Options.
    Click Save.
    Increase or decrease the AutoRecover time setting.

  • How to Use Autocorrect Entries in Word 365

    How to Use Autocorrect Entries in Word 365

    In this article, I will show you how to use autocorrect entries in Word 365. We want to introduce you to the method of adding or deleting multiple autocorrect entries in your Word. AutoCorrect is a powerful tool in Microsoft Word 365 that allows users to manage and correct their typing in real-time. It is designed to increase productivity by reducing time spent editing and correcting common mistakes.

    Word has a built-in feature called autocorrect. Many users are familiar with it. Many of us use it to correct easily misspelt words. Even though you can import as many items as you need, you must do it individually. Generally, we will need to put up with it. However, as far as macro is concerned, you can save much time by creating a list of autocorrect entries and importing them all at once with a click.

    Use Autocorrect Entries in Word

    This has been a very difficult task for people in the past. It is very easy and one of the easiest things you can learn to do in Word. So, let’s get to it, shall we?

    Do you want to add or remove autocorrect entries in Word?

    Add New AutoCorrect Entries to Word

    Open Microsoft Word and click on the File tab.

    At the bottom of the left pane, locate the Options button.

    Microsoft Word file menu

    The Word 365 Options window will appear. Here, click on the Proofing tab from the list of options in the left pane.

    Now, click on the AutoCorrect Options button under AutoCorrect Options.

    use autocorrect entries in Word

    The AutoCorrect window will pop up for the language used with your version of Word.

    In the Replace box, type the word or phrase you want to replace. In the With box, enter the alternative word or phrase. Select Add when you are ready.

    You will see your new entry in the list. Repeat these steps for as many words as you would like to add, and then select the ok button when you’re done.

    autocorrect entries in Microsoft Word

    When you type the word or phrase in your document, autocorrect will occur.

    It doesn’t become much easier than this, and now you no longer have to worry about spelling words!

    Please also read Exploring the Potential of MS Office 365 for Remote Learning.

    Please visit Microsoft to learn more about adding or removing AutoCorrect entries in Word.

  • Exploring the Potential of MS Office 365 for Remote Learning

    Exploring the Potential of MS Office 365 for Remote Learning

    In today’s fast-paced digital world, remote learning has become vital to education. As traditional classroom boundaries blur, students and educators embrace the flexibility and convenience of distance learning. Let’s dive into the exciting realm of remote knowledge and discover how Microsoft Office 365 (MS Office 365) revolutionizes our learning and teaching.

    What is Remote Learning?

    Remote learning, often called online or virtual learning, is acquiring knowledge and skills through digital platforms outside a traditional classroom setting. The technology in college empowers learners to access educational content, collaborate with peers, and engage with instructors from the comfort of their own spaces. Whether you’re a student aiming to master a new language or a professional seeking to enhance your skillset, remote learning opens doors to opportunities.

    Benefits of Remote Learning

    Remote learning is not just a trend; it’s a powerful educational paradigm shift here to stay. Embracing the digital realm, remote learning benefits learners of all ages and backgrounds. Let’s look at how this modern approach to education, combined with the prowess of MS Office 365, is redefining how we learn and grow.

    Flexibility Redefined 

    One of the most captivating advantages of remote learning is its unparalleled flexibility. Say goodbye to rigid schedules and hello to learning at your own pace. With MS Office 365, students can access lectures, assignments, and resources at the secret academy whenever it suits them best. Late-night owl or early-morning riser, you’re in charge of your learning journey.

    Global Learning Community 

    Remote learning erases geographical boundaries, connecting learners and educators from across the globe. Collaborative projects become exciting cross-cultural experiences. MS Office 365’s collaborative tools like OneDrive and Teams facilitate seamless teamwork, allowing students to brainstorm ideas, share documents, and work on assignments together, transcending physical distances.

    Personalized Learning Experience 

    Gone are the days of one-size-fits-all education. With MS Office 365’s adaptive features, each learner can tailor their learning experience. Customizable interfaces, interactive quizzes, and multimedia-rich content keep learning engaging and captivating. Whether you’re an auditory learner or a visual enthusiast, MS Office 365 has you covered.

    Tips to Use MS Office 365 for Remote Learning

    Navigating the digital landscape of remote learning becomes a breeze when you have the right tools in your arsenal. MS Office 365 isn’t just a suite of applications; it’s your companion in the journey of virtual education. Let’s unravel some ingenious tips to harness the full potential of MS Office 365 and make your remote learning experience truly exceptional.

    1. Master OneDrive Organization 

    Stay organized like a pro by using OneDrive, your virtual storage companion. Create folders for each subject or topic, upload lecture notes, and share them effortlessly with peers or instructors. The cloud-based convenience ensures your study materials are at your fingertips, even if your laptop decides to take an unexpected vacation.

    1. Embrace the Collaborative Power of Teams 

    Virtual classrooms come alive with MS Teams. Schedule discussions, share insights, and engage in real-time conversations with classmates and instructors. The power of face-to-face interaction, minus the commute—your ideas flow, connections grow, and knowledge thrives.

    1. Unleash the Potential of OneNote 

    Replace your traditional notebook with OneNote, a digital canvas for note-taking and organizing thoughts. Jot down lecture highlights, add audio recordings, and tag notes for easy retrieval. With MS Office 365, your messages are no longer confined to the margins of a page—they’re a dynamic, evolving resource.

    Conclusion

    The partnership between remote learning and MS Office 365 is a game-changer, breathing fresh air into the world of education. The benefits are tangible, the tools are empowering, and the possibilities are limitless. Whether you’re a student, educator, or lifelong learner, harness the potential of MS Office 365 to embark on a journey of knowledge, collaboration, and growth.

    So there you have it—a glimpse into the dynamic fusion of remote learning and MS Office 365. The world of education is evolving, and you’re at the forefront of this exciting transformation. Ready to take the plunge? Dive into the world of remote learning with MS Office 365 and unleash your full potential!

    BIO

    Elaine Bailey is a dedicated educational enthusiast who has passionately explored the intersection of technology and learning for years. With a background in instructional design, Elaine’s writing effortlessly weaves together the dynamic world of remote education and the practical applications of tools like MS Office 365. Her articles delve into innovative learning methodologies, aiming to inspire students and educators alike to embrace the boundless opportunities that modern digital platforms offer. Through her work, Elaine strives to empower learners to navigate the ever-evolving landscape of remote learning with confidence and creativity.

    Read more: How to Use Autocorrect Entries in Word 365.

  • What is Exchange Admin Center and how to login it?

    What is Exchange Admin Center and how to login it?


    The Exchange Admin Center (EAC) is a web-based management console for managing Exchange Online, Exchange Server, and hybrid Exchange deployments. It replaces the Exchange Control Panel (ECP) and the Exchange Management Console (EMC), which were the previous management interfaces for Exchange.

    The EAC allows you to perform various tasks, such as:

    • Manage recipients, groups, mailboxes, contacts, and resources.
    • Configure mail flow settings like connectors, transport rules, and delivery reports.
    • Manage organization settings, such as sharing policies, address lists, and retention policies.
    • Monitor the health and performance of your Exchange environment, such as queues, databases, and servers.
    • Perform migration tasks, such as moving mailboxes, public folders, and data from other sources.
    • Access other admin centres, such as Security & Compliance Center, Azure Active Directory, and Microsoft 365 admin centre.

    To access the EAC, you need to have an administrator account that has the appropriate role assignments. For more information on role-based access control in Exchange, see Role-based access control (RBAC) in Exchange Online.

    There are two ways to access the EAC for Exchange Online:

    • Sign in to your Microsoft 365 or Office 365 account > Admin Centers > Exchange. This will take you to the new EAC, a modern and streamlined interface that offers most of the features of the classic EAC. See the New Exchange admin centre for more information on the new EAC.
    • Directly visit the link outlook and sign in using your credentials. This will take you to the classic EAC, the original interface offering all the features of Exchange Online management. See the Classic Exchange admin centre for more information on the classic EAC.

    To access the EAC for Exchange Server or hybrid Exchange deployments, you need to use the URL of the EAC virtual directory on your Mailbox server. The URL is controll by the Internet Information Services (IIS) virtual directory named ECP. You can modify these URLs according to your needs. For more information on configuring the EAC virtual directory settings, see Configure mail flow and client access on Exchange servers.

    You need to use a supported browser to access the EAC from a web browser on your local computer or a remote computer. The supported browsers for the new EAC are:

    • Microsoft Edge
    • Microsoft Edge
    • Mozilla Firefox
    • Apple Safari

    For more information on Exchange Online and Exchange Server browser support, see Microsoft 365 and Office resources.

    The EAC is a powerful tool that helps you manage your Exchange environment with ease and efficiency. Whether you are using Exchange Online or Exchange Server, or a hybrid of both, you can use the EAC to perform various tasks and monitor your organization’s health and performance.

    Read more: How to Configure Database Copies in Exchange Server 2019

    FAQs

    What is the Classic Exchange Admin Center?

    To monitor and administer Microsoft Exchange Server efficiently, administrators can use the web-based Classic Exchange Admin Centre (EAC), a program created by Microsoft. It functioned as the main management interface for Exchange Server versions 2013 and prior. Administrators could perform various operations with the help of the Classic EAC’s graphical user interface (GUI), including managing mailboxes, creating distribution groups, configuring mail flows, and keeping track of the Exchange environment’s general health. However, with the introduction of Exchange Server 2016, the Classic EAC was replaced by the Exchange Admin Centre (EAC), which offers improved capabilities and a more contemporary UI.

    Why is the Exchange Admin Center not loading?

    Various possible causes exist for the Exchange Admin Centre (EAC) failing to load. Here are some potential reasons and solutions:


    Problems with connectivity:

    Check your internet connection and try visiting the EAC from a different browser or device. Check for any network or firewall limitations that may prevent EAC access.


    Server or service problems:

    The EAC uses the Exchange Server infrastructure. If server issues or Exchange services are not working, the EAC may not load. Ensure all relevant Exchange services are up and functioning, and restart them if necessary.


    Browser compatibility:

    The EAC may not be compatible with all browsers. Check that you’re using a compatible browser version, and try emptying your cache and cookies. Disabling browser extensions or add-ons that interfere with the EAC may also be beneficial.

    Incorrect URL or virtual directory setup:

    Check the URL you’re using to go to the EAC. Depending on your Exchange version, it should be “https:///ecp” or “https:///owa/ecp”. Furthermore, confirm that the virtual directory settings in Internet Information Services (IIS) are appropriately establish.


    Permissions and authentication:

    Check that your user account has the appropriate permissions to access the EAC. Examine your account and group memberships for changes that may have affected EAC access. Additionally, ensure that the authentication settings in IIS are correctly established.

    If the problem persists after these troubleshooting steps, you may need to contact your Exchange Server administrator or Microsoft support for more assistance.

    Why is the Global Address List not loading in the Exchange Admin Center?

    If the Global Address List (GAL) is not loading in the Exchange Admin Center (EAC), several potential causes could exist. Here are some common reasons and their possible solutions:

    Replication delays:

    The GAL is distributed across multiple Exchange servers in an organization. If there are replication delays between these servers, it can result in the GAL not being updated or not loading in the EAC. Allow some time for replication, or manually force replication using Exchange Management Shell commands like “Update-GlobalAddressList” or “Update-OfflineAddressBook”.

    Incorrect GAL configuration:

    Verify that the GAL is properly configured in the Exchange organization. Check if the GAL is assigned to the correct mailbox databases and if the appropriate permissions are set. Use the Exchange Management Shell to review the GAL configuration and make any necessary adjustments.

    Exchange server issues:

    Ensure that the Exchange servers responsible for hosting the GAL are functioning correctly. Check if the Exchange services related to address book generation and distribution are running. Restarting these services or the affected Exchange servers may help resolve the issue.

    Network connectivity problems:

    Confirm that there are no network connectivity issues between the server hosting the EAC and the Exchange servers hosting the GAL. Troubleshoot any network problems, such as DNS resolution issues or firewall restrictions, that might prevent the EAC from accessing the GAL.

    Browser cache and settings:

    Clear the browser cache and cookies, or try accessing the EAC from a different browser. Sometimes, outdated or conflicting browser cache or settings can cause issues loading the GAL. Additionally, ensure that JavaScript is enabled in the browser, as it is required for the EAC to function properly.

    If the GAL still doesn’t load in the EAC after attempting these steps, it may be necessary to involve your Exchange Server administrator or seek assistance from Microsoft support to diagnose and resolve the specific issue affecting your environment.

    Read more: How do I log into my Microsoft Exchange account?

  • Adding an organization fails 401: Unauthorized

    Adding an organization fails 401: Unauthorized

    Adding an organization fails within the 401: Unauthorized and Connect to PowerShell Access Denied errors in Office 365 tenants with enabled Security Defaults

    Require MFA (Multi-Factor Authentication) for all users, including administrators & Azure management. Require Azure MFA (Multi-Factor Authentication) registration
    Block legacy authentication

    Conditional Access: Require MFA for all users
    Create a Conditional Access policy

    The below steps will help you to create a Conditional Access policy to require All users to perform multi-factor authentication.

    Adding an organization fails 401:

    1- Signin Microsoft Azure as a security administrator, global administrator, or Conditional Access administrator. Select the Azure Active Directory

    azure active directory admin center

    2- Select Security under manage tab.

    azure active directory dashboard security

    3- Under protect tab select Conditional Access.

    azure security conditional access

    4- Click on + New policy.

    azure conditional access policy

    5- Type your policy a name. We recommend that institutional create a meaningful standard for the names of their policies.
    Select Users and groups Under Assignments

    azure conditional create access policy

    6- Select Include tab, and then select All users.

    azure conditional access new policy

    7- Select Exclude tab and then select Users and groups.

    azure new policy assignment

    8- Select your organization’s emergency access or break-glass accounts and then choose the select button.

    azure new policy assignment exclude

    9- Select Cloud apps or actions, select Include and select All cloud apps.

    azure new policy cloud apps

    10- Select the Exclude tab, select excluded cloud apps, choose any applications that do not require multi-factor authentication, and click on the create button.

    azure new policy cloud apps exclude

    11- Choose the Conditions tab, select Client apps (Preview), and then select Configure to Yes. Under Select the client apps this policy will apply to leave all defaults selected and then select Done.

    azure new policy conditions

    12- Under Access controls option select Grant, choose Grant access, select Require multi-factor authentication checkbox and select Select.

    azure new policy access control

    13- Confirm your settings and choose Enable policy to On. Select Save to create to enable your policy.

    azure new policy

    Modern Authentication with Veeam for office 365

    For more details adding an organization denied errors in Office 365 tenants, visit Veeam

  • How to Backup Office 365 Emails with Veeam Backup

    How to Backup Office 365 Emails with Veeam Backup

    Backup Office 365 Emails, In this article I am going to create a new backup job for Microsoft Office 365 emails with Veeam Backup.

    Download Veeam for Office 365

    1- Connect Veeam Backup for Microsoft Office 365 console, select the Organizations view.
    On the Home tab, click Backup on the ribbon.

    veeam backup for office 365 console

    2- Backup Office 365 Email, Specify job name and description page, enter a name for your backup job, and then click Next.

    veeam new backup job

    3- Veeam new backup job wizard, select objects to back up window, select Back up entire organization if you have enough users license for the entire organization if not, you need to select Back up the following objects. You can add by users, groups, sites, and organizations. Click the Add button.

    veeam select object to backup

    4- I am going to add a user for backup and then click add.

    veeam select object to backup

    5- After adding a user for backup click the next button.

    veeam select object to backup

    6- Select objects to exclude page, we can add by users, groups, sites & Organization. Click next after you add them.

    veeam select object to backup

    7- New Veeam Backup job wizard, specify backup proxy and repository window, select backup proxy and Azure Blob backup repository and then click next.

    veeam specify backup proxy and repository

    8- Select scheduling options page, enter your schedule information, and then click Create.

    veeam select scheduling options

    9- Select the new created office 365 email backup job and then click Start.

    veeam backup for office 365 console

    10- Now you can see the office 365 email job in progress.

    veeam job for office 365 in progress

    Create Storage account in Azure

    Add Object Storage Repository

    Add Azure Blob Storage Repository

    Modern Authentication Veeam for Office 365

    Watch Video: How to Backup Office 365 Emails with Veeam Backup

  • How to Add Office 365 Organization using Modern Authentication

    How to Add Office 365 Organization using Modern Authentication

    Add Office 365 Organization using modern authentication, after successfully configuring modern authentication now I am going to add organizations with veeam backup for office 365.

    How to add to the Veeam Backup for Microsoft Office 365 scope, an Office 365 organization using modern authentication

    Now I am ready to add our tenant to Veeam backup for Microsoft Office 365.

    1- Open Veeam Backup for Office 365 console, select organization and then Add Org.

    veeam backup office 365 console

    2- Select the Organizations deployment type, select the services you want to protect and then click next.

    veeam select organization deployment kit

    3- Select region of your tenant and which authentication you need to use. Of course we are going for the modern authentication now (allow for using legacy authentication protocols) and then click next.

    veeam office 365 connection settings

    4- Exchange Online Credentials setup we need to provide all our collected information. Meaning the application ID, the application secret, our username, the app password and then click next.

    veeam exchange online credentials

    5- Click the close button after verifying connection and organization parameters. The tenant will be added to your Veeam console successfully.

    veeam organization verifying connection

    6- Now you can see an Organization successfully added.

    veeam backup office 365 console

    For more details please visit Veeam

    Create Storage account in Azure

    Add Object Storage Repository

    Add Azure Blob Storage Repository

    Modern Authentication Veeam for Office 365

  • Modern Authentication with Veeam Backup for Office 365

    Modern Authentication with Veeam Backup for Office 365

    Modern Authentication with Veeam, In this article I will explain how to configure the modern authentication with Veeam Backup for Office 365.

    What is Modern Authentication visit Microsoft

    Veeam Office 365 Modern Authentication

    The release of version 4 of Veeam Backup for Office 365, now we are able to use the so-called modern authentication. This means using service accounts enabled for MFA (multi-factor authentication).

    We need an Azure Active Directory custom application and a service account that has MFA (Multi-Facture Authentication) enabled. The custom application (App application) registered in Azure Active Directory will allow Veeam Backup for Office 365 to access the Microsoft Graph API. With this access, we can pick up the data from the “Microsoft Office 365 organization tenant”.

    In this strategy, the service account will be used to connect to the EWS and PowerShell services.

    Preparation

    In instance, we want to use modern authentication with Veeam Backup for Office 365.

    The below steps should be done for using the modern authentication.

    Register a custom application in Azure Active Directory
    Collect your Application ID and Secret
    Create a new client secret
    Create a new service account in Azure Active Directory
    Enable Multi-Factor Authentication (MFA) on this service account
    Assign roles to the service account
    Grant a service account required roles and permissions
    Get App password for an MFA-enabled service account
    Add tenant to Veeam with the service account

    Create Storage account in Azure

    Add Object Storage Repository

    Add Azure Blob Storage Repository

    Create backup job

    Register a custom application in Azure Active Directory

    1- Open your Azure Active Directory admin center under the Manage tab and then select App registration.

    azure active directory admin center

    2- Click on + new registration Under App registrations tab.

    azure active directory app registration

    3- Enter new custom application a name; select the supported account type and then click on the register button.

    azure active directory register an app

    4- After creating a new custom application, we need to provide it with some permission. For that go to your newly created app application and then select the + API Permissions button.

    azure active directory app permissions

    5- Now we need to add Microsoft Graph permissions to our custom app application.
    In the request API permissions wizard and then select Microsoft Graph.

    azure active directory request api permissions

    6- Select Application permissions.

    azure active directory application permissions

    7- Expand Director Option and select Directory.Read.All. Expand Group option and select Group.Read.All from the list of available permissions, and then click Add permissions
    1- Directory.Read.All
    2- Group.Read.All

    These two permissions are needed to access the organization tenant.

    azure application permissions directory
    azure request api permissions group

    8- This type of permission requires administrator consent. To grant administrator consent, click on Grant admin consent for (tenant name).

    azure api permissions

    9- Click Yes to confirm granting permissions

    azure api permissions grant

    10- Successfully granted admin consent for the request permission, Click + Add a permission button.

    azure api permissions granted

    11- Scroll down and then select SharePoint.

    azure request api permissions

    12- Select Application permission and expand sites, select Sites.FullControll.all and then click on add permission.

    azure request api permissions sites

    13- Click on Grant admin consent for (tenant name)

    azure api permissions grant

    14- Click Yes to confirm granting permissions

    azure api permissions grant yes

    15- Successfully configured permissions click on + Add a Permission button.

    azure api permissions granted

    16- Scroll down and then select exchange options

    azure request api permissions

    17- Choose Application permissions.

    azure request api permissions access

    18- Click on Grant admin consent for (tenant name)

    azure api permissions grant

    19- Click Yes to confirm granting permissions

    azure api permissions yes

    20- We have successfully registered a custom application in your Azure Active Directory and you have successfully set the required permissions.

    azure api permissions granted

    How to get your Application secret

    Create a new client secret

    1- To create a new client secret for our newly created custom application. Under Manage select Certificates & secrets and then click on + New client secret button under client secrets.

    azure active directory client secret

    2- Add a New client secret wizard, specify a description, an expiration date, and then click Add button.

    azure active directory certificates & secrets

    We have successfully created your application secret. The secret can be reviewed in the main settings area of your custom application under the Certificates & secrets options.

    Collect Application Secret

    3- To collect application secrets, go to the Certificates & secrets settings within your custom application and copy and then save it in note pad the value of it.

    azure active directory certificates & secrets

    Collect Application ID

    4- The first thing you need to collect the application ID. If you go back to the main site of the app registrations, copy application (client) ID and then save it in a note pad.

    azure active directory app registration overview

    How to create a new service account in Azure Active Directory

    1- Now we need to create the service user, which will connect from Veeam Backup for Office 365 to your tenant. In the Office 365 admin center, click on + new user to create a user without a product license.

    azure active directory all users

    2- The user which we are going to create will be our service user for MFA (Multi-Factor Authentication). Type a name, initial password and then click on create

    azure active directory create new user

    How to configure an MFA-enabled service account

    After successfully created a service user, now we can proceed with activating MFA for it. Go back to the all users overview within your azure active directory admin center.

    3- Select your newly created service user. Select On the top right of the ribbon, and then select Multi-Factor Authentication.

    azure user multi-factor authentication

    4- Select your service user on the left side and then click enable (MFA) on the right side under quick steps.

    multi-factor authentication users

    5- Click on enable multi-factor auth button.

    about enabling multi-factor auth

    6- The account is successfully enabled for MFA. Click close.

    multi-factor auth in enabled

    7- Now you can review your user which is now enabled for MFA.

    multi-factor authentication users

    Assign roles to the service account

    The user needs the correct permissions and roles to backup Exchange Online and SharePoint Online. We have the choice to do this via the Exchange Admin Center.

    For Exchange Online (Global Administrator or Exchange Administrator) role. Additionally, you need the ApplicationImpersonation role.

    For SharePoint Online (Global Administrator or SharePoint Administrator) role.

    I have this as testing purposes and for this blog post. I would not recommend assigning the Global Administrator in a production environment. Either uses the Exchange Administrator and the SharePoint Administrator role.

    1- Select user account (veeam_vbo).

    azure active directory domain center

    2- Click on Assigned roles under manage and then click on + Add assignments.

    azure active directory assigned roles

    3- Select the role in the Directory role wizard on the left hand side and then click add.

    azure active directory directory roles

    4- Successfully assigned the roles.

    azure active directory assigned roles

    SharePoint Admin Center

    1- Login with SharePoint Admin Center, select access control, and then Apps that don’t use modern authentication.

    sharepoint admin center access control

    2- Verify allow access is selected.

    apps that don't use modern authentication

    How to grant a service account required roles and permissions

    1- Add ApplicationImpersonation role via the Exchange Admin Center. Select the permission tab on the left-hand side. Under admin, roles click the + button to add a new role.

    exchange admin center permissions

    2- Type a role group name and description. Select the Write Scope to default and then click the + button.

    exchange admin center add permissions

    3- Under Roles to add the ApplicationImpersonation, Mail Recipient, Mail Search, View only configuration, View only recipient role from the list, and then click ok.

    office 365 add permissions roles

    5- Add a member, it means our service account for this new role group. For that click on the + button under Members.

    exchange admin center add permissions

    6- Select your newly created service user, click on add button and then click OK.

    office 365 add permissions roles

    7- Click on save button.

    exchange admin center add permissions

    8- The user has been granted the ApplicationImpersonation role.

    exchange admin center permissions

    To get an app password for an MFA-enabled service account

    1- The last thing we need to do before adding our tenant to Veeam Backup for Microsoft Office 365 is to collect your app password. Login with new user account & go through the additional security verification methods for this new account.

    microsoft login

    2- Now we need to select if we would like to receive text messages or if Microsoft calls you within the configuration of the phone verification. I am going to select an Authentication phone option (country code phone number) and select send me a code by text message and then click Next.

    microsoft additional security verification

    3- Type the verification code and then click on verify button.

    microsoft additional security verification

    4- This app password is wanted within the Tenant configuration in Veeam Backup for Office 365. Copy it in notepad or save it for our later use. Click on the done button.

    microsoft additional security verification

    5- After login to user office 365 account, click on my account icon and then click my account

    office 365 login account

    6- You will be redirected to https://portal.office.com/account. Under my account select the Security & Privacy tab to create and manage your passwords. Click on create and manage passwords.

    office 365 security and privacy

    7- Additional security verification (app passwords) click on create button.

    microsoft additional security verification

    8- Enter a name and then click next.

    microsoft create app password

    9- Copy your password and save it in notepad and then click close.

    microsoft your app password

    10- You will need to sign in with this user if you have an existing service account. In the right-hand upper corner, select the settings and then your app settings (Office 365).

    office 365 security and privacy

    I have created a new user, so I don’t want to do that here.

    Add Office 365 organization using modern authentication

    Create Storage account in Azure

    Add Object Storage Repository

    Add Azure Blob Storage Repository

    For more details please visit Veeam

    Related: Adding an organization fails 401: Unauthorized.