Kernel Exchange Backup and Recovery Problem

Digital Forensic Community Forums Computer Forensics Windows Kernel Exchange Backup and Recovery Problem

Viewing 1 reply thread
  • Author
    Posts
    • #5901
      Shaun Andersen
      Participant

      I am using Kernel Exchange Backup and Recovery and I can see the mailboxes, but when I click to export them to PST it fails and disconnects me. Anyone have any advice?

    • #5910
      NinjaForensics
      Participant

      Shaun,

      I think the problem you are having can be solved through impersonation rights.

      1. Log into the O365 admin panel first using the admin creds
      2. Are the accounts showing under members?
      3. Open Admin Center> Exchange > Permission> Admin Roles > Role Group
      4. Add a new role ‘New-Impersonation-Right’, Click (+) Roles, Select applicationImpersonation, Add, OK
      5. Click to select Members and add the account you are logged in as and add it along with ‘Administrator’

      6. On the local machine open Powershell by right mouse clicking on it and select ‘Run as Administrator’
      7. Then type the following line by line:

      Set-ExecutionPolicy Unrestricted

      $livecred = Get-Credential

      $s = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $cred -Authentication Basic -AllowRedirection

      $importresults= Import-PSSession $s

      Enable-OrganizationCustomization

      Assign Impersonation rights:-

      New-ManagementRoleAssignment -Role “ApplicationImpersonation” -User admin@domain.com

      Now try and collect the PST’s again!

Viewing 1 reply thread
  • You must be logged in to reply to this topic.
DFC Main Logo

Digital Forensic Community