Problem

Configuring New Mailbox Level Backups with Intronis 5.6.1

Solution

Before Intronis will allow for a new Mailbox Backup set to be created a user will need to be created and provided the appropriate access.  It is good practice to create a new user for this purpose.  e.g. Intronis@domain.com

  1. Create a user and add them to the appropriate groups

    1. Create a new user/mailbox for mailbox level backups.  This user must be visible in the GAL.   Add this user to the groups:
      2007 – Organization Administrator
      2010 – Organization Management
      2013/2016 – Organization Management, Discovery Management

  2. Assign the Application Impersonation role to the user

    1. To grant the service account user Application Impersonation rights. This can be done with the following Exchange Management Shell commands:

      1. For Exchange 2007
        Get-ExchangeServer | where {$_.IsClientAccessServer -eq $TRUE} | ForEach-Object {Add-ADPermission -Identity $_.distinguishedname -User (Get-User -Identity ServiceAccount | select-object).identity -extendedRight ms-Exch-EPI-Impersonation}
        Get-MailboxDatabase | ForEach-Object {Add-ADPermission -Identity $_.DistinguishedName -User ServiceAccount -ExtendedRights ms-Exch-EPI-May-Impersonate}

      2. For Exchange 2010 / 2013 / 2016
        New-ManagementRoleAssignment –Name:ImpersonationAssignmentName –Role:ApplicationImpersonation –User:ServiceAccount
        ...where ServiceAccount is the name of the service account you will use to perform Mailbox Level backups and ImpersonationAssignmentName is the name of the assignment you want to associate with Mailbox Level backups.

  3. Configure Powershell Remoting

    1. Enabling Powershell Remoting (as administrator)
      Enter-PSSession -ComputerName localhost
      If this fails, additionally run..
      Enable-PSRemoting -Force

    2. After the command is successfully ran, IIS will need to be configured to allow for remote Powershell access.

      1. Open IIS

      2. Click on the drill down: Domain->Sites->Default Web Site -> Powershell

      3. Click on the “Authentication” icon

      4. Right click on “Basic Authentication” and enable

      5. Close IIS
  4. Disable EWS Throttling
    1. Disable EWS Throttling
      This step is optional but is strongly recommended.  It has been shown that EWS throttling may interfere with the Mailbox Level backups from completing fully and successfully.  Also, disabling EWS throttling may allow the backups to run more quickly.  More information about client throttling can be found here.  Exchange 2007 does not have configuration options for throttling policies so there is nothing to change if using Exchange 2007.  To disable EWS throttling, use the following Exchange Management Shell commands:
    2. Create a throttling policy.
      New-ThrottlingPolicy <Policy>
      ...where <Policy> is the name you choose for the throttling policy.
    3. Specify the nature of the throttling policy.
      1. For Exchange 2010 use:
        Set-ThrottlingPolicy <Policy> -EWSFastSearchTimeoutInSeconds $null -EWSFindCountLimit $null -EWSMaxConcurrency $null -EWSMaxSubscriptions $null -EWSPercentTimeInAD $null -EWSPercentTimeInCAS $null -EWSPercentTimeInMailboxRPC $null
      2. For Exchange 2013 and 2016 use:
        Set-ThrottlingPolicy <Policy> -EWSCutoffBalance Unlimited -EWSMaxBurst Unlimited -EWSMaxConcurrency Unlimited -EWSMaxSubscriptions Unlimited -EWSRechargeRate Unlimited -IsServiceAccount:$true
    4. Apply the throttling rule
      Get-Mailbox | Set-Mailbox -ThrottlingPolicy <Policy>\
    5. Get-ThrottlingPolicyAssociation — Enables you to view the relationship between an object and its associated throttling policies. (Use to confirm policy is in place)
  5. Configure the Backup Set
    1. Open the Intronis Management Portal  - https://manage.intronis.com
    2. Choose the account you wish to create the backup set on
    3. Choose the computer/server from the list in the “Computers” tab
    4. Click the “Backup” tab
    5. Click “+ Add Backup Set”
    6. Choose “Exchange Mailbox Level”
    7. Enter EWS URL.  Default this URL is https://mail.domain.com/ews/exchange.asmx
      1. If  you are not sure this is the URL,  Open Exchange Management Shell and run the command:
        Get-WebServicesVirtualDirectory |Select name, *url* | fl
    8. Enter the username and password
    9. Click next.  
    10. Select the email accounts you need email backups for.  Try to not set backups for printers, test emails, etc.
    11. Create a schedule – Note that, if the company has a large number of email addresses backing up, the initial backup will take multiple days or longer.
    12. In the Settings section please check all the boxes (unless otherwise instructed)
    13. Finish. 

Try to schedule the first backup to start after hours on a weekend as this can be taxing to a server. Some of these steps come from a helpful article published by Intronis.  Their document is here:

https://support.intronis.com/30_Knowledge_Base/50_Backup_%2F%2F_Restore/10_Backup/10_Exchange/Preparing_For_Mailbox_Level_Backups 

Related articles

Related articles appear here based on the labels you select. Click to edit the macro and add or change labels.

Related issues