This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
public:module:office365-v4:pro:preparation [2021/03/04 11:32] ronnie.chan |
public:module:office365-v4:pro:preparation [2021/04/13 11:31] (current) ronnie.chan |
||
---|---|---|---|
Line 19: | Line 19: | ||
===== 2.4 Antivirus Exclusion Requirement ===== | ===== 2.4 Antivirus Exclusion Requirement ===== | ||
- | To optimize performance of CloudBacko Pro on Windows, you need to avoid conflict with your antivirus software. | + | To optimize performance of CloudBacko Pro on Windows, you need to avoid conflict with your antivirus software. Refer to [[public:faq:antivirus_exclusion]] for details. |
===== 2.5 Upgrade VMware Tools Requirement ===== | ===== 2.5 Upgrade VMware Tools Requirement ===== | ||
Line 27: | Line 27: | ||
Below is the warning message that will be displayed if the version of the VMware Tools is less than 10.0.5. | Below is the warning message that will be displayed if the version of the VMware Tools is less than 10.0.5. | ||
- | {{public:module:office365-v4:image033.png?800}} | + | {{public:module:office365-v4:image033.png}} |
===== 2.6 CloudBacko Pro License Requirements ===== | ===== 2.6 CloudBacko Pro License Requirements ===== | ||
Line 130: | Line 130: | ||
| {{public:module:office365-v4:permission-01.png}} | | | {{public:module:office365-v4:permission-01.png}} | | ||
- | | {{public:module:office365-v4:permission-02.png?800}} | | + | | {{public:module:office365-v4:permission-02.png}} | |
ii. In the Microsoft 365 admin center, on the left panel click Users. Find the user you want to assign the Global Admin role and select Manage roles. | ii. In the Microsoft 365 admin center, on the left panel click Users. Find the user you want to assign the Global Admin role and select Manage roles. | ||
- | | {{public:module:office365-v4:permission-03.png?800}} | | + | | {{public:module:office365-v4:permission-03.png}} | |
- | | {{public:module:office365-v4:permission-04.png?800}} | | + | | {{public:module:office365-v4:permission-04.png}} | |
iii. In the Manage roles window, select **Admin center access** then check the box beside Global admin. Click **Save Changes** to save the role you assigned. | iii. In the Manage roles window, select **Admin center access** then check the box beside Global admin. Click **Save Changes** to save the role you assigned. | ||
- | | {{public:module:office365-v4:permission-05.png?800}} | | + | | {{public:module:office365-v4:permission-05.png}} | |
==== 2.12.2 Granting Term Store Administrator Role ==== | ==== 2.12.2 Granting Term Store Administrator Role ==== | ||
Line 148: | Line 148: | ||
i. In the SharePoint admin center, under Content services, click Term store. | i. In the SharePoint admin center, under Content services, click Term store. | ||
- | | {{public:module:office365-v4:permission-06.png?800}} | | + | | {{public:module:office365-v4:permission-06.png}} | |
ii. In the tree view pane on the left, select the Taxonomy. | ii. In the tree view pane on the left, select the Taxonomy. | ||
- | | {{public:module:office365-v4:permission-07.png?800}} | | + | | {{public:module:office365-v4:permission-07.png}} | |
iii. In the Term store page, for Admins, select Edit. The Edit term store admins panel appears. | iii. In the Term store page, for Admins, select Edit. The Edit term store admins panel appears. | ||
- | | {{public:module:office365-v4:permission-08.png?800}} | | + | | {{public:module:office365-v4:permission-08.png}} | |
iv. Enter the names or email addresses of the Office 365 user who you want to add as term store admins. Select Save. | iv. Enter the names or email addresses of the Office 365 user who you want to add as term store admins. Select Save. | ||
Line 168: | Line 168: | ||
ii. Log in to the **Office 365** as an account administrator. | ii. Log in to the **Office 365** as an account administrator. | ||
- | | {{public:module:office365-v4:permission-09.png?800}} | | + | | {{public:module:office365-v4:permission-09.png}} | |
- | | {{public:module:office365-v4:permission-10.png?800}} | | + | | {{public:module:office365-v4:permission-10.png}} | |
iii. Select the permissions menu on the left, then double click on Discovery Management on the right. | iii. Select the permissions menu on the left, then double click on Discovery Management on the right. | ||
- | | {{public:module:office365-v4:permission-11.png?800}} | | + | | {{public:module:office365-v4:permission-11.png}} | |
iv. Click the + icon under the Roles section. These are the following roles: | iv. Click the + icon under the Roles section. These are the following roles: | ||
Line 184: | Line 184: | ||
* Public Folders | * Public Folders | ||
- | | {{public:module:office365-v4:permission-12.png?800}} | | + | | {{public:module:office365-v4:permission-12.png}} | |
v. Click Save to confirm and exit the setting. | v. Click Save to confirm and exit the setting. | ||
Line 194: | Line 194: | ||
ii. Log in to the Office 365 as an account administrator. | ii. Log in to the Office 365 as an account administrator. | ||
- | | {{public:module:office365-v4:permission-13.png?800}} | | + | | {{public:module:office365-v4:permission-13.png}} | |
- | | {{public:module:office365-v4:permission-14.png?800}} | | + | | {{public:module:office365-v4:permission-14.png}} | |
iii. Select the permissions menu on the left, then double click on Discovery Management on the right. | iii. Select the permissions menu on the left, then double click on Discovery Management on the right. | ||
- | | {{public:module:office365-v4:permission-15.png?800}} | | + | | {{public:module:office365-v4:permission-15.png}} | |
iv. You can now add users to this group. Click the + icon under the Members section. | iv. You can now add users to this group. Click the + icon under the Members section. | ||
- | | {{public:module:office365-v4:permission-16.png?800}} | | + | | {{public:module:office365-v4:permission-16.png}} | |
v. Look for the username(s) of the account that you would like to add permission for, then click add > OK to add the corresponding user(s) to the permission group. | v. Look for the username(s) of the account that you would like to add permission for, then click add > OK to add the corresponding user(s) to the permission group. | ||
- | | {{public:module:office365-v4:permission-17.png?800}} | | + | | {{public:module:office365-v4:permission-17.png}} | |
vi. Click Save to confirm and exit the setting. | vi. Click Save to confirm and exit the setting. | ||
Line 221: | Line 221: | ||
i. Go to the alternate Site > in the left pane, select Site Contents > Site Settings | i. Go to the alternate Site > in the left pane, select Site Contents > Site Settings | ||
- | | {{public:module:office365-v4:permission-18.png?800}} | | + | | {{public:module:office365-v4:permission-18.png}} | |
ii. Go to Site Collection features | ii. Go to Site Collection features | ||
- | | {{public:module:office365-v4:permission-19.png?800}} | | + | | {{public:module:office365-v4:permission-19.png}} | |
iii. Deactivate “Limited-Access user permission lockdown mode” feature | iii. Deactivate “Limited-Access user permission lockdown mode” feature | ||
- | | {{public:module:office365-v4:permission-20.png?800}} | | + | | {{public:module:office365-v4:permission-20.png}} | |
=== 2.12.5.2 Allowing sharing to external users === | === 2.12.5.2 Allowing sharing to external users === | ||
Line 235: | Line 235: | ||
i. Go to your Microsoft 365 Admin Center > All admin centers > in the right pane select SharePoint | i. Go to your Microsoft 365 Admin Center > All admin centers > in the right pane select SharePoint | ||
- | | {{public:module:office365-v4:permission-21.png?800}} | | + | | {{public:module:office365-v4:permission-21.png}} | |
ii. Go to Sharing | ii. Go to Sharing | ||
- | | {{public:module:office365-v4:permission-22.png?800}} | | + | | {{public:module:office365-v4:permission-22.png}} | |
If using Classic sites view, go to Policies > Sharing. | If using Classic sites view, go to Policies > Sharing. | ||
- | | {{public:module:office365-v4:permission-23.png?800}} | | + | | {{public:module:office365-v4:permission-23.png}} | |
iii. Under Sharing outside your organization, select “Allow sharing only with the external users that already exist in your organization’s directory” and click OK. | iii. Under Sharing outside your organization, select “Allow sharing only with the external users that already exist in your organization’s directory” and click OK. | ||
- | | {{public:module:office365-v4:permission-24.png?800}} | | + | | {{public:module:office365-v4:permission-24.png}} | |
If using Classic sites view, under External sharing the button must be in line with “Existing guests” and click Save. | If using Classic sites view, under External sharing the button must be in line with “Existing guests” and click Save. | ||
- | | {{public:module:office365-v4:permission-26.png?800}} | | + | | {{public:module:office365-v4:permission-25.png}} | |
</WRAP> | </WRAP> | ||
+ | ===== 2.13 Data Synchronization Check (DSC) Setup ===== | ||
+ | |||
+ | To compensate for the significant backup performance increase, there is a tradeoff made by the Change Key API, which skips the checking of de-selected files in the backup source, which over time can result in a discrepancy between the items or files/folders selected in the backup sources and the those in the backup destination(s). However, the Change Key API will continue to check for de-selected Office 365 user accounts or Site Collections. Un-selected individual Office 365 user accounts or Site Collections detected during a backup job and will be automatically moved to retention area. | ||
+ | |||
+ | To overcome this, it is necessary in some cases to run a Data Synchronization Check (DSC) periodically. The DSC is similar to a regular Office 365 Change Key API backup job but with the additional checking and handling of de-selected files and/or folders in the backup source. So that it will synchronize the data in the backup source and backup destination(s) to avoid data build-up and the freeing up of storage quota. | ||
+ | |||
+ | Here are the pros and cons of performing the data synchronization check. | ||
+ | |||
+ | ^ ^ Enabled ^ Disabled ^ | ||
+ | ^ Backup time | Since data synchronization check is enabled, it will only run on the set interval. For example, the default number of interval is 60 days. \\ The backup time for the data synchronization job will take longer than the usual backup as it is checking the de-selected files and/or folders in the backup source and data in backup destination(s). | As data synchronization check is disabled, the backup time will be not be affected. | | ||
+ | ^ Storage | Management of storage quota will be more efficient as it will detect items that are de-selected and moved it to retention and will be removed after it exceeds the retention policy freeing up the storage quota. | Management of storage quota will be less efficient even though files and/or folders are already de-selected from the backup source, these files will remain in the data area of backup destination(s). | | ||
+ | |||
+ | | {{public:module:office365-v4:permission-26.png}} | | ||
+ | |||
+ | <WRAP indent> | ||
+ | ===== 2.13.1 Setting the Data Synchronization Check (DSC) ===== | ||
+ | |||
+ | Data Synchronization Check (DSC) is enabled by default and will run every 60 days. | ||
+ | |||
+ | Assumption: AhsayOBM Installation path is C:\Program Files\AhsayOBM | ||
+ | |||
+ | To disable the data synchronization check, follow the instructions below: | ||
+ | |||
+ | 1. Make sure there are no active backup or restore job running. | ||
+ | |||
+ | 2. Close AhsayOBM UI. | ||
+ | |||
+ | 3. Stop the Ahsay Online Backup Manager services | ||
+ | |||
+ | 4. Go to C:\Program Files\AhsayOBM\ folder. | ||
+ | |||
+ | 5. Open cb.opt file using a text editor such as Notepad or Notepad++. | ||
+ | |||
+ | 6. Add this line, Office365.DSCInterval=-1 | ||
+ | A value of -1 indicates data synchronization check is disabled. | ||
+ | |||
+ | 7. Start the Ahsay Online Backup Manager services | ||
+ | |||
+ | To check if the data synchronization check is enabled, follow the instructions below: | ||
+ | |||
+ | 1. Go to C:\Program Files\AhsayOBM\ folder. | ||
+ | |||
+ | 2. Open cb.opt file using a text editor such as Notepad or Notepad++. | ||
+ | |||
+ | 3. Look for this line, //Office365.DSCInterval=xx//. | ||
+ | |||
+ | Note: | ||
+ | If xx is a positive value this indicates the data synchronization check is enabled and represents the interval number of days until the next run of data synchronization check. | ||
+ | -OR- | ||
+ | If the interval value is not -1. | ||
+ | |||
+ | To adjust the interval number of days, follow the instructions below: | ||
+ | |||
+ | 1. Make sure there are no active backup/restore job running. | ||
+ | |||
+ | 2. Close AhsayOBM UI. | ||
+ | |||
+ | 3. Stop the Ahsay Online Backup Manager services | ||
+ | |||
+ | 4. Go to C:\Program Files\AhsayOBM\ folder. | ||
+ | |||
+ | 5. Open cb.opt file using a text editor such as Notepad or Notepad++. | ||
+ | |||
+ | 6. Change the interval number. | ||
+ | |||
+ | For example: | ||
+ | Current interval: Office365.DSCInterval=60 | ||
+ | Updated interval: Office365.DSCInterval=10 | ||
+ | |||
+ | Explanation: | ||
+ | On the current interval, the number of days is 60. While, the updated interval, the number of days is reduced to 10. | ||
+ | |||
+ | WARNING! | ||
+ | If the interval value is 0, Office365.DSCInterval=0, then the Data Synchronization Check (DSC) will run for every backup job. | ||
+ | |||
+ | 7. Start the Ahsay Online Backup Manager services | ||
+ | </WRAP> | ||
+ | |||
+ | ===== 2.14 Authentication ===== | ||
+ | To comply with Microsoft’s product roadmap for Office 365, in the latest CloudBacko Pro, Basic Authentication (Authentication using Office 365 login credentials) will no longer be utilized. Instead all new Office 365 backup sets created will use either Modern Authentication or Hybrid Authentication. | ||
+ | |||
+ | By second half of 2021, it will be a mandatory requirement for organizations still using Basic Authentication or Hybrid Authentication to migrate to Modern Authentication. | ||
+ | |||
+ | Modern Authentication provides a more secure user authentication by using app token for authentication aside from using the Office 365 login credentials. In order to use Modern Authentication, the Office 365 account is registered under Global region and the Office 365 backup is configured to use Global region. As both Germany and China region do not support Modern Authentication. | ||
+ | |||
+ | Existing backup sets using Basic Authentication created prior to AhsayOBM v8.3.6.0 can be migrated to Hybrid Authentication or Modern Authentication. However, once the authentication process is completed, the authentication can never be reverted back to Basic Authentication. For more information on how to migrate to Hybrid Authentication or Modern Authentication please refer to Appendix J: Migrating Authentication of Office 365 Backup Set. After the upgrade to AhsayOBM v8.3.6.0 or above, the backup and restore process of existing Office 365 backup sets still using Basic Authentication will not be affected during this transition period since Modern Authentication is not yet enforced by Microsoft. | ||
+ | |||
+ | In order to migrate existing backup sets to Hybrid Authentication or Modern Authentication there are two (2) methods: | ||
+ | * The first method is the Office 365 account used for the backup set is assigned the Global Admin role. | ||
+ | * The second method is the Office 365 account used for the backup set is an ordinary account. When changing the settings of the backup set, the user can ask an Office 365 Global Admin account to login their credentials first to authorize the migration of authentication. This is only required in migrating from Basic Authentication to Modern Authentication. This only needs to be done once per backup set. | ||
+ | |||
+ | <WRAP info> | ||
+ | Please note that Modern Authentication with enabled security in Azure Active Directory (AD) will be made default if there is zero-usage on any Office 365 organization by October 2020. | ||
+ | </WRAP> | ||
+ | |||
+ | To check the current authentication being used in your Office 365 backup set, see criteria below: | ||
+ | |||
+ | ==== Basic Authentication ==== | ||
+ | If you click on the backup set and the following pop up message is displayed, then the backup set is using Basic Authentication. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-27.png}} | | ||
+ | |||
+ | ==== Modern Authentication ==== | ||
+ | Go to Backup Sets > backup set name > General > Change settings. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-28.png}} | | ||
+ | | ||
+ | In the Office 365 credentials page, the region is Global and the Username exists but has no password, then the backup set is using Modern Authentication. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-29.png}} | | ||
+ | |||
+ | ==== Hybrid Authentication ==== | ||
+ | 1. There is no pop up authentication alert. | ||
+ | |||
+ | 2. In the Office 365 credentials page, the region is Global and there is a Username and Account password then the backup set is using Hybrid Authentication. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-30.png}} | | ||
+ | |||
+ | ===== 2.15 Supported Services ===== | ||
+ | Below are the supported services of Office 365 Backup module. It is also specified in the table some services that are currently not yet supported by the Office 365 Backup module. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-31.png}} | | ||
+ | |||
+ | Below are the supported Outlook Mailbox types of Office 365 Backup. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-32.png}} | | ||
+ | |||
+ | | {{public:module:office365-v4:permission-33.png}} | | ||
+ | | ||
+ | Below are the items that you can back up or restore from an Outlook mailbox. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-34.png}} | | ||
+ | |||
+ | Below are the items that you can back up or restore from OneDrive. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-35.png}} | | ||
+ | |||
+ | Below are the Site Collections/Personal Site items that you can back up or restore from an Office 365 backup set. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-36.png}} | | ||
+ | |||
+ | Below are the SharePoint Site Collections template that you can back up or restore from an Office 365 backup set. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-37.png}} | | ||
+ | |||
+ | Below is the Site Column Type that you can back up or restore from an Office 365 backup set. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-38.png}} | | ||
+ | |||
+ | Below are the items from the Public Folder that you can backup and restore from an Office 365 backup set. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-39.png}} | | ||
+ | |||
+ | ===== 2.16 Maximum Supported File Size ===== | ||
+ | |||
+ | The following table shows the maximum supported file size per item for backup and restore of each service. | ||
+ | |||
+ | | {{public:module:office365-v4:permission-40.png}} | | ||
+ | |||
+ | ===== 2.17 Limitations ===== | ||
+ | |||
+ | ==== CloudBacko's Limitations ===== | ||
+ | |||
+ | === Modern Authentication === | ||
+ | |||
+ | * Modern Authentication is only supported for Office 365 account that is registered in Global region and the Office 365 backup is configured to use Global region. | ||
+ | * Migration to Modern Authentication is not supported on an Office 365 account without a Global Admin role; or during the migration process, the Office 365 account used to authenticate the migration does not have Global Admin role. | ||
+ | * Backup and restore of the site features setting for SharePoint Site Collection and/or Personal Site using Modern Authentication is not supported. | ||
+ | * Due to limitations in Microsoft API, when using Modern Authentication, backup and restore of SharePoint Web Parts and Metadata are not fully supported. | ||
+ | * Backup sets using Modern Authentication do not support backup of external content types (through the linkage from selected lists). | ||
+ | * Backup sets using Modern Authentication do not support backup and restore of the following: | ||
+ | <WRAP indent> | ||
+ | * Some list settings, currently known as Survey Options on survey list. | ||
+ | * Feature setting for SharePoint Site and Personal Site. | ||
+ | </WRAP> | ||
+ | |||
+ | === SharePoint === | ||
+ | * Document Libraries, List Items and their default Column Types will be supported, excluding customized Apps and SharePoint App Store applications. | ||
+ | * Most of site lists will be supported, except for certain list types that will be skipped to restore due to API limitation, for example is Microfeed in Classic Team Site. | ||
+ | * Site logos will NOT be restored, it is suggested revisiting the site setting page and manually add the missing images if necessary. | ||
+ | * User-defined workflow templates will NOT be supported for backup and restore. | ||
+ | * Recycle Bin will NOT be supported for backup and restore. | ||
+ | * Most of Site level settings will NOT be restored, except for those essential to support the successful restore of the backup items e.g. Manage Site Feature / Site Collection Feature. | ||
+ | * Most of List level settings (including List view) will NOT be restored, except for those essential to support the successful restore of backup items, e.g. item checkout settings. Following restore, it is suggested revisiting the relevant settings if necessary. This may affect list column ordering and visibility after restoring. | ||
+ | * Restoring External Data column is NOT supported if external content type has been deleted via SharePoint Designer. | ||
+ | * Restoring of multiple Value of managed metadata column when the key name (column name) contains space is NOT supported. | ||
+ | * Restoring of list with local managed metadata column to alternate location is NOT supported. | ||
+ | * The restore of SharePoint documents or folders with the following characters: / \ | * : “ < > in item name to a Windows local computer is not supported. As Windows does not support these characters for either a file or folder name. | ||
+ | * Restoring Newsfeed items in Modern Team Site will not publish the items to Homepage automatically, user will need to navigate to Site Content > Page Library> click on each individual news item and “Post” the news one by one manually. | ||
+ | <WRAP indent> | ||
+ | * Backup User (except for Global Admin) may not have permission to back up the site collection even if he/she can view it in the backup source tree. FOR EACH site collection, the user can backup it only if he/she is assigned as a site admin of that site collection. | ||
+ | <WRAP indent> | ||
+ | * If the user is assigned as site admin of the root level site collection only, he/she is not automatically added as site admin of other site collection under that root level site collection (i.e. If user is to backup specific site collection under the root, he/she has to be added as site admin of that specific site collection under the root also). | ||
+ | * For site collection that can be viewed by user in the source tree which he/she is not yet assigned as a site administrator: | ||
+ | <WRAP indent> | ||
+ | * when user expand the node of that site collection, access denied error pop up will be given. | ||
+ | * when user tick such site collection to backup, access denied error will be given in the backup log. | ||
+ | </WRAP> | ||
+ | </WRAP> | ||
+ | </WRAP> | ||
+ | |||
+ | === OneDrive === | ||
+ | * Backup and restore of file share links will be supported for OneDrive and SharePoint Documents only, and only for restore to the same Office 365 organization. | ||
+ | * Backup and restore of all versions will be supported for OneDrive and SharePoint Documents only, except for ”.aspx“ files. | ||
+ | |||
+ | === Outlook === | ||
+ | * Online Archive Mailbox will NOT be supported for backup and restore. | ||
+ | * For Outlook mail item, after using restore to original location to overwrite a mail item (and hence id of the mail id is changed), then | ||
+ | <WRAP indent> | ||
+ | * In the backup source tree of the same backup set: | ||
+ | <WRAP indent> | ||
+ | * the original ticked item still use the old mail id to reference and becomes red item. | ||
+ | * there is another item (with the latest mail id) created for that mail item | ||
+ | </WRAP> | ||
+ | User will need to deselect the red item and tick the mail item again in the backup source tree in order to do the next backup properly. As per development team, the issue will not be handled as user's selected source should not be modified by system | ||
+ | </WRAP> | ||
+ | |||
+ | === Restore to Alternate location === | ||
+ | * Only administrator account or user account with administrative authority can restore backup items to an alternate location. | ||
+ | * If you are trying to restore item(s) from one user to an alternate location user, AhsayOBM will restore the item(s) to their respective destination folder(s) with the same name as the original folder(s). \\ Example: Item from Outlook of User-A will be restored to the Outlook of the alternate location User-B; Item from SharePoint of User-A will be restored to the SharePoint of the alternate location User-B. | ||
+ | * Restore of item(s) in public folder to an alternate location public folder is not supported. \\ Example: Restore of item(s) in public folder from User-A to alternate location User-B is not supported. | ||
+ | * When restoring to alternate location, data type “Person or Group” will not be restored. Following restore, it is suggested revisiting the relevant settings if necessary. This also affects “Assigned To” column values of some list templates (e.g. Tasks list), and “Target Audience” column values of some list templates (e.g. Content and Structure Reports). | ||
+ | * If you are trying to restore item(s) from several users to an alternate location user, AhsayOBM will restore the item(s) to their respective destination folder(s) in alternate location user with the same name as the original folder(s). | ||
+ | |||
+ | | {{public:module:office365-v4:permission-41.png}} | | ||
+ | |||
+ | Example: Item from Outlook of User-A and User-B will be restored to the Outlook of the alternate location User-C. | ||
+ | |||
+ | === Restore to Alternate Office 365 account === | ||
+ | If you are trying to restore item(s) from multiple Office 365 user account to an alternate Office 365 user account, AhsayOBM can only restore one Office 365 user account at a time. | ||
+ | |||
+ | === Restore to Alternate Organization === | ||
+ | * Restoring of document library (including OneDrive) items 'Share Link to alternate organization will trigger a warning message. | ||
+ | * Skip to restore People and groups and Site permissions to alternate origination. | ||
+ | |||
+ | === Restore data to a destination user which has a different language === | ||
+ | If you are trying to restore the item to a destination user which has a different language setting than the original user, AhsayOBM will restore item(s) to their respective destination folder based on the translation listed below. | ||
+ | |||
+ | For folders such as ‘Calendar’ or ‘Notes’, a new folder ‘Calendar’ or ‘Notes’ will be created. | ||
+ | |||
+ | For folders in OneDrive and SharePoint, a new folder will be created. | ||
+ | |||
+ | === Restore existing documents in checked-out status === | ||
+ | |||
+ | Restoring of existing documents in checked out status is supported only when the user who has checked out the file is the same user who is performing the restore. | ||
+ | |||
+ | ^ Backup source (English) ^ Action ^ Destination User with Chinese as default language settings ^ | ||
+ | | Inbox Merge | 收件箱 | | ||
+ | | Outbox | Merge | 寄件匣 | | ||
+ | | Sent Items | Merge | 寄件備份 | | ||
+ | | Deleted Items | Merge | 刪除的郵件 | | ||
+ | | Drafts | Merge | 草稿 | | ||
+ | | Junk E-Mail | Merge | 垃圾電郵 | | ||
+ | | Calendar | Create new folder | Calendar | | ||
+ | | Notes | Create new folder | Notes | | ||
+ | | OneDrive Folder | Create new folder | OneDrive Folder | | ||
+ | | SharePoint Folder | Create new folder | SharePoint Folder | | ||
+ | |||
+ | ==== Microsoft Limitations ==== | ||
+ | |||
+ | === Exchange Online === | ||
+ | For more detailed information on the limitations of Exchange Online, please refer to this Microsoft article, [[https://docs.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/exchange-online-limits|Exchange Online Limits]]. These are some of the limitations that will be discussed in the Exchange Online Limits article: | ||
+ | * Address book | ||
+ | * Mailbox storage | ||
+ | * Capacity alerts | ||
+ | * Mailbox folder | ||
+ | * Message | ||
+ | * Receiving and sending | ||
+ | * Retention | ||
+ | * Distribution group | ||
+ | * Journal, Transport, and Inbox rule | ||
+ | * Moderation | ||
+ | * Exchange ActiveSync | ||
+ | |||
+ | === OneDrive === | ||
+ | For more detailed information on the limitations of OneDrive, please refer to this Microsoft article, [[https://support.office.com/en-us/article/invalid-file-names-and-file-types-in-onedrive-onedrive-for-business-and-sharepoint-64883a5d-228e-48f5-b3d2-eb39e07630fa?ui=en-US&rs=en-US&ad=US#individualfilesize|OneDrive Limits]]. These are some of the limitations that will be discussed in the OneDrive Limits article: | ||
+ | * File name and path lengths | ||
+ | * Thumbnails and previews | ||
+ | * Number of items to be synced | ||
+ | * Information rights management | ||
+ | * Differential sync | ||
+ | * Libraries with specific columns | ||
+ | * Windows specific limitations | ||
+ | |||
+ | === SharePoint === | ||
+ | For more detailed information on the limitations of SharePoint Online, please refer to this Microsoft article, [[https://docs.microsoft.com/en-us/office365/servicedescriptions/sharepoint-online-service-description/sharepoint-online-limits|SharePoint Online Limits]]. These are some of the limitations that will be discussed in the SharePoint Online article: | ||
+ | * Limits by plan \\ {{public:module:office365-v4:permission-42.png}} | ||
+ | * Service limits for all plans, such as: items in lists and libraries, file size and file path length, moving and copying across site collections, sync, versions, SharePoint groups, managed metadata, subsites, etc. | ||
+ | |||
+ | |||
+ | ===== 2.18 Best Practices and Recommendations ===== | ||
+ | |||
+ | The following are some best practices or recommendations we strongly recommend you follow before you start any Office 365 backup and restore. | ||
+ | |||
+ | ==== Temporary Directory Folder Location ==== | ||
+ | Temporary directory folder is used by CloudBacko for storing backup set index files and any incremental or differential backup files generated during a backup job. To ensure optimal backup/restoration performance, it is recommended that the temporary directory folder is set to a local drive with sufficient free disk space. | ||
+ | |||
+ | ==== Performance Recommendations ==== | ||
+ | Consider the following best practices for optimized performance of the backup operations: | ||
+ | * Enable schedule backup jobs when system activity is low to achieve the best possible performance. | ||
+ | * Perform test restores periodically to ensure your backup is set up and performed properly. Performing recovery test can also help identify potential issues or gaps in your recovery plan. It is important that you do not try to make the test easier, as the objective of a successful test is not to demonstrate that everything is flawless. There might be flaws identified in the plan throughout the test and it is important to identify those flaws. | ||
+ | |||
+ | ==== Backup Destination ==== | ||
+ | To provide maximum data protection and flexible restore options for agent-based backup, it is recommended to configure: | ||
+ | * At least one offsite or cloud destination | ||
+ | * At least one local destination for fast recovery | ||
+ | |||
+ | ==== Periodic Backup Schedule ==== | ||
+ | The periodic backup schedule should be reviewed regularly to ensure that the interval is sufficient to handle the data volume on the machine. Over time, data usage pattern may change on a production server, i.e. the number of new files created, the number of files which are updated/deleted, and new users may be added etc. | ||
+ | schedule. | ||
+ | |||
+ | Consider the following key points to efficiently handle backup sets with periodic backup schedule. | ||
+ | |||
+ | * Hardware – to achieve optimal performance, compatible hardware requirements is a must. Ensure you have the backup machine’s appropriate hardware specifications to accommodate frequency of backups, | ||
+ | <WRAP indent> | ||
+ | * so that the data is always backed up within the periodic backup interval | ||
+ | * so that the backup frequency does not affect the performance of the production server | ||
+ | </WRAP> | ||
+ | * Network – make sure to have enough network bandwidth to accommodate the volume of data within the backup interval. | ||
+ | * Retention Policy - also make sure to consider the retention policy settings and retention area storage management which can grow because of the changes in the backup data for each backup job. | ||
+ | |||
+ | ==== Authentication ==== | ||
+ | Although Microsoft has moved the enforcement date for Modern Authentication from end of 2020 to the second half of 2021, since this new authentication is already available starting with AhsayOBM v8.3.6.0 or above, it is recommended that backup sets are migrated to Modern Authentication. All newly created Office 365 backup sets on AhsayOBM v8.3.6.0 or above automatically use Modern Authentication. | ||
+ | |||
+ | However, due to the current limitation with Microsoft API, Modern Authentication is currently not suitable for backup sets with Personal Sites and/or SharePoint Sites selected. As a temporary workaround for Office 365 backup sets which require backup of Personal Sites and/or SharePoint Sites selected should be migrated to Hybrid Authentication until the issue has been resolved by Microsoft. | ||
+ | |||
+ | ==== Large number of Office 365 users to Backup ==== | ||
+ | In general, we recommend that each Office 365 backup set does not contain more than 2000 Office 365 users, to ensure a daily incremental backup job completes within 24 hours assuming that only small incremental daily changes will be made on the backup set. | ||
+ | |||
+ | However, the actual number of Office 365 users in a backup set may vary depending on the total number of Outlook, OneDrive, and SharePoint items, as well as the total size of these items. The actual number of Office 365 users in a backup set could be considerably less or could be more than 2000. | ||
+ | |||
+ | For details on the actual item count and size of Office 365 user, it is recommended to check in the Microsoft 365 Admin Centre, please refer to Appendix I: Steps on How to view Item count and Storage used in Microsoft 365 Admin Center. | ||
+ | |||
+ | Also, by splitting up all the users into separate backup sets, the more backup sets, the faster the backup process can achieve. | ||
+ | |||
+ | It is also a requirement that for every split backup sets should have its own unique user account for authentication to minimize the probability of throttling from Microsoft. | ||
+ | |||
+ | Example: If there are 10 split backup sets, then there should be 10 unique user accounts for authentication. | ||
+ | |||
+ | For more detailed example, refer to Appendix B: Example for backup of large numbers of Office 365 users. | ||
+ | |||
+ | ==== Concurrent Backup Thread ==== | ||
+ | The value of 4 concurrent backup threads is found to be the optimal setting for Office 365 backups, to ensure best backup performance, minimal resource usage, and lowest probability of throttling of Ahsay backup requests by Microsoft Office 365. | ||
+ | |||
+ | ==== Backup Source ==== | ||
+ | For Office 365 backup sets there are two approaches for backup source selection. Below are the sample screenshots of the selection __All Office 365 users__ and __Selective 365 user__. | ||
+ | |||
+ | | All Office 365 users | Selective Office 365 user | | ||
+ | | {{public:module:office365-v4:permission-43.png}} | {{public:module:office365-v4:permission-44.png}} | | ||
+ | | ||
+ | * All Office 365 users \\ If you tick the “Users” checkbox, all of the sub Office 365 user accounts will automatically be selected. | ||
+ | * Selective Office 365 user \\ If you tick selective Office 365 user accounts, you will notice that the “Users” checkbox is highlighted with gray color. This indicates that not all the users are selected. | ||
+ | |||
+ | These are the Pros and Cons when selecting a backup source from all Office 365 users and selective Office 365 user. | ||
+ | |||
+ | ^ ^ All Office 365 users ^ Selective Office 365 user ^ | ||
+ | ^ Backup Set Maintenance | The Admin does not need to manage the backup set, i.e. to select or unselect use when an Office 365 user account was added or removed, the changes are automatically updated in the backup source. | The Admin will have to select or unselect users manually when an Office 365 user account was added or removed, as the changes are not automatically updated in the backup source this can be very time consuming. \\ If an Office 365 user account is removed from the domain and the admin forgets to unselect the Office 365 user account from the backup source, then this will cause a warning that the user does not exist. | | ||
+ | ^ Office 365 License | The backup user account must have additional Office 365 license modules assigned to cover any increases Office 365 users. Otherwise, if additional users are added without sufficient modules, then this will cause backup quota exceeded warning and additional users will not be backed up. | This will allow the admin to easily control or manage the number of license modules used for the backup set. | | ||
+ | ^ Backup Time | All Office 365 user accounts will be backed up. This means the initial of full backup job will take longer, any subsequent incremental backup will take longer. | Only selective Office 365 user accounts will be backed up. This will mean the initial of full backup job will be faster, any subsequent incremental backup will be faster. | | ||
+ | ^ Storage | As all Office 365 user accounts are backed up, more storage will be required. | As only selective Office 365 user accounts will be backed up, the backup set will require relatively less storage. | |