Backup and Restore Functionality for Microsoft Office 365 Data

The Office 365 data that can be backed up and restored using DS-Client includes Exchange data, SharePoint Online data, and OneDrive data (as SharePoint Online data).

Exchange Online data
Exchange data needs to be in a user mailbox, shared mailbox, or resource mailbox to be supported. It can be restored to the same mailbox or a different mailbox of the original domain or of a different domain using DS-Client.

SharePoint Online data
DS-Client can back up SharePoint data from SharePoint Online and restore it to SharePoint Online. SharePoint data that can be backed up and restored most items.

You can select data for backup at the site collection, site, and list levels. You cannot select list items individually as backup set items; however, the individual list items that are within selected lists will be backed up. You can select individual list items for restore. SharePoint data can only be restored to the same site collection at the original domain (i.e. Original Location) using DS-Client.

For other instructions on managing or using Microsoft SharePoint, visit the Microsoft Office Support website.

OneDrive data (as SharePoint Online data)
OneDrive data is processed as SharePoint Online data by DS-Client. OneDrive data under personal sites can be backed up and restored using DS-Client.

OneDrive data for each user is backed up as the Documents List of each user's personal site, e.g. \\OFFICE.MICROSOFT.COM\VirtualShare:SharePoint Site Collections\https://< tenant >-my.sharepoint.com/personal/< user >_< tenant >_onmicrosoft_com/\Documents\*

Backup Set Creation and distribution can be done using either Management Console or the DS-NOC Cloud Management System.

DS-NOC on Windows can be used to create Office 365 backup sets
You can use Cloud Management System in DS-NOC (Windows) rather than Classic DS-User to create, configure, and schedule Microsoft Office 365 backup sets. DS-NOC on Linux does not support Microsoft Office 365 backups.

The Cloud Management System in DS-NOC automates the process for creating and scheduling Backup from the Cloud (Microsoft Office 365) backup sets for multiple users according to your specified settings. It can divide backup sets among multiple DS-Client instances and distribute multiple credentials among many backup sets. It is also a centralized interface for monitoring these backup sets.

After the backup sets have been created and scheduled using the Cloud Management System in DS-NOC, you can use Classic DS-User and Management Console to initiate on-demand backups or restore the data as necessary.

Recommended DS-Client-to-DS-System setup
To optimize the speed of Microsoft Office 365 backups, set up DS-Client and DS-System to communicate within the same local area network (LAN) at the same site location. This setup keeps communication localized between DS-Client and DS-System. After obtaining data from the source, DS-Client can send the backup data to DS-System via a LAN, which is more efficient than transferring over a wide area network (WAN).

This setup differs from the typical recommendation of installing DS-Client on the same LAN with the backup source.

Basic Workflow for Backup and Restore

Backing up data for multiple users
First, you can configure and edit backup settings for Microsoft Office 365 backup sets using the Management Console or the Cloud Management System in DS-NOC (Windows).

Management Console (Windows or Linux) the Management Console is a web-based application that simplifies the backup and recovery process by providing a centralized environment to manage DS-Systems, DS-Clients, backup sets, schedules, retention rules, and more.

The Management Console Application Programming Interface (API), which is based on the RESTful (Representational State Transfer) framework, allows developers to use their preferred programming languages and tools to integrate with the Management Console.

DS-NOC (Windows) creates and schedules Microsoft Office 365 backup sets in DS-Client according to your settings and configures DS-Client as necessary.

DS-Client and Mangement Console then runs Microsoft Office 365 backups according to your settings.

Restoring data for individual users

  1.     
  2.     

    Before restoring the data of a particular Office 365 user, you need to identify the Office 365 backup set in the DS-Client and Management Console that processed that user's data. 

        
  3.    
  4.     

    In DS-User or Management Console, using the Restore Now Wizard, select the data that you want to restore in that backup set.

        

DS-Client or Management Console  will then restore the selected data.

Prerequisites for Backup and Restore
Ensure that the following prerequisites are met before you perform the backup and restore of data on Exchange Online, an on-premises Exchange Server, SharePoint Online, and OneDrive.

Management Console: Can be used to create Microsoft Office 365 backup sets
Before you begin using the Management Console, ensure that all the required DS-Systems and DS-Clients have been installed. You must have the latest version of Java which is required to use the Management Console launcher.

The default IP address used by the Management Console is 127.0.0.1 and the default port is 9595. The default user name and password is admin. You will be prompted to change the password the first time you sign in.

The first time you sign in to the Management Console you are prompted to perform the initial configuration of the system, including changing your password, configuring a DS-System and DS-Client connection, configuring users and permissions, configuring cloud credentials, and configuring notifications.

NOTE: Ensure that the DS-Client machine and Management Console machine are synchronized with a time server to ensure consistency. You can use UTC (Coordinated Universal Time) via a recognized NTP (Network Time Protocol) server to keep the time synchronized.

The Management Console software can be installed only on the 64-bit version of the supported operating system. For the latest information, see the Support Matrix.

DS-NOC on Windows: Another tool to create Microsoft Office 365 backup sets
You can use the Cloud Management System in DS-NOC (Windows) to create Microsoft Office 365 backup sets.

Required network configuration
The DS-NOC server and the DS-Client computer are able to access *.office365.com.
That ports 80, 8080, and 443 are open on the DS-NOC server and the DS-Client computer.

DS-Client Installation: Microsoft Office 365 DS-Client plug-in required
For DS-Client to perform backup and restore for Backup from the Cloud (Microsoft Office 365) backup sets, including Microsoft Exchange Server (using EWS) backup sets, you must install the Microsoft Office 365 DS-Client plug-in on the DS-Client computer.

The plug-in installation file can be found on the installation DVD in the following folders:
\Software\DS-Client\Windows_64_bit\plugins\install.exe

DS-Client Service: Windows administrator account required for Exchange Online and SharePoint Online
Ensure that the DS-Client Service uses a Windows administrator account to log on when it starts. If the DS-Client Service uses a Local System Account, Logon failure errors might occur due to a limitation of the authentication method used by Microsoft when you attempt to create a Backup from the Cloud (Microsoft Office 365) backup set.

License: Microsoft Office 365 license required
Microsoft Office 365 license is required for two types of Microsoft Office 365 user accounts:
Each end user whose Microsoft Office 365 mailbox or SharePoint site you plan to back up and restore. The corresponding license, e.g., Exchange Online license or SharePoint Online license, is required depending on the backup source.
Each user (1) who will administer/manage the backup and restore process in the Office 365 portal/admin center, and/or (2) whose credentials will be used by DS-Client to access the backup source.

Prerequisites for Backup and Restore of SharePoint Online Data
Ensure that the following prerequisites are met before you perform the backup and restore of SharePoint Online data, including OneDrive data:

DS-NOC Server: Windows-specific dependencies required for SharePoint Online
To create, schedule, configure, or monitor Microsoft Office 365 backup sets for SharePoint Online data (including OneDrive data) via DS-NOC, ensure that Windows-specific dependencies are installed on the DS-NOC server.
SharePoint Online requires Windows-specific dependencies to allow data access.
Here are the requirements for Cloud Management System in DS-NOC and for configuring and monitoring backups for SharePoint Online data.

Cloud Management System is a centralized tool for configuring and monitoring Backup from the Cloud backup sets, which include Office 365 backup sets for Exchange Online and SharePoint Online and G Suite backup sets.

Windows DS-NOC required for Cloud Management System Cloud Management System is available in Windows DS-NOC only. It is not available in DS-NOC running on Linux machines.

Additional installation and configuration required for SharePoint Online Before you can configure and monitor Office 365 backup sets for SharePoint Online data using Cloud Management System in Windows DS-NOC, you must ensure that the following requirements are met.

You must use the 64-bit version of Apache Tomcat on the DS-NOC server. You must use a DS-NOC server that runs on Windows.

SharePoint Online requires
Windows-specific software and configuration on the DS-NOC server.

Install the required SDK on the DS-NOC server

You must ensure that the SharePoint Server 2013 Client Components SDK is installed on the DS-NOC server.
1.Visit this URL for details:
http://www.microsoft.com/en-ca/download/details.aspx?id=35585
2.After installing the SDK, copy the following DLL to the Tomcat bin folder:
Microsoft.Online.SharePoint.Client.Tenant.dll
By default, the DLL is found at this location:
%PROGRAMFILES%\SharePoint Client Components\Assemblies\
Install the required modules on the DS-NOC server. You must ensure that the following modules are installed and configured on the DS-NOC server.
1.Windows PowerShell 3.0 or higher.
2.Microsoft Online Services Sign-In Assistant for IT Professionals RTW:
http://www.microsoft.com/en-us/download/details.aspx?id=41950
3.Azure Active Directory Module for Windows PowerShell (64-bit version):
Use the installer called AdministrationConfig-EN.msi, which can be found at in the Asigra ISO under the folder Software\DS-NOC
4.Microsoft Visual C++ 2010 Redistributable Package (x64):
https://www.microsoft.com/en-ca/download/details.aspx?id=14632
Restart the DS-NOC server after dependencies have been installed. After all the Office 365 dependencies described above have been installed and configured, restart the DS-NOC server.

Additional information
To determine if a user has created a personal site, go to the user profile of the user in the SharePoint admin center

Apache Tomcat Service: Windows administrator account required for SharePoint Online
To create, schedule, configure, or monitor Microsoft Office 365 backup sets for SharePoint Online data (including OneDrive data) via DS-NOC, ensure that the Apache Tomcat Service uses a Windows administrator account to log on. Apache Tomcat is the service that runs DS-NOC.

This is a requirement to ensure proper operation owing to the Windows-specific dependencies mentioned above in Section "DS-NOC Server: Windows-specific dependencies required for SharePoint Online"

Domain: User permission requirements for SharePoint Online
To perform the backup and restore of SharePoint Online data, including OneDrive data, you must create for each DS-Client at least one dedicated SharePoint account that is used solely for the purpose of accessing the backup source and restore destination. The dedicated SharePoint account requires the following permissions:

Global admin
In the Office 365 admin center, ensure that the SharePoint account that will be used for accessing the backup source and restore destination is set as a Global administrator.

Site Collection Administrator
In the Office 365 SharePoint admin center, set the same Global administrator as the Site Collection Administrator for each site collection to be backed up and restored. DS-Client applies the Site Collection Administrator role automatically for personal sites.

IMPORTANT: The SharePoint account that you use to perform the backup and restore of SharePoint Online data will become an owner of the SharePoint items.

DS-Client buffer: Space requirement
Ensure that the location that is selected as the DS-Client buffer path provides sufficient space for SharePoint Online backup activities. During the backup of SharePoint Online data, DS-Client uses the DS-Client buffer to temporarily store files that are larger than 500 MB. The capacity of the DS-Client buffer must be able to support data storage requirements based on a combination of these three aspects:
Batch size
Number of simultaneous backup sessions allowed
Largest possible size of files to be backed up simultaneously.

Exchange domain: User permission requirements for Exchange
The following procedures are required for the backup and restore of data for Exchange Online. Configure each user that will be used for logging on to the Exchange Server as follows.

1. Add user to Discovery Management
a) Go to the administrative settings for Exchange:
For Exchange Online: In the Microsoft Office 365 account, on the ADMIN menu, select Exchange.
b) Go to permissions > admin roles.
c) In the list, select Discovery Management and click the Edit button.
d) In the pop-up window, under Members, click +.
e) In a new pop-up window, select the user you need to add, click add, and click OK.
f) In the first pop-up window, click Save.
g) In the admin roles pane, verify that the user you need to add is listed under Members of the Discovery Management group.

2. Add user to Organization Management
a) Go to the administrative settings for Exchange:
For Exchange Online: In the Microsoft Office 365 account, on the ADMIN menu, select Exchange.
For Exchange Online in a Microsoft Office 365 Small Business domain, visit: https://outlook.office365.com/ecp/
b) Go to permissions > admin roles.
c) In the list, select Organization Management and click the Edit button.
d) In the pop-up window, under Members, click +.
e) In a new pop-up window, select the user you need to add, click add, and click OK.
f) In the first pop-up window, click Save.
g) In the admin roles pane, verify that the user you need to add is listed under Members of the Organization Management group.

3. Add Application Impersonation as an assigned role in Organization Management
a) Go to the administrative settings for Exchange:
For Exchange Online: In the Microsoft Office 365 account, on the ADMIN menu, select Exchange.
b) Go to permissions > admin roles.
c) In the list, select Organization Management and click the Edit button.
d) In the pop-up window, under Role, click +.
e) In a new pop-up window, select ApplicationImpersonation, click add, and click OK.
f) In the first pop-up window, click Save.
g) In the admin roles pane, verify that ApplicationImpersonation is listed under Assigned Roles of the Organization Management group.

In DS-User, you can enable a feature that automatically makes distribution groups, deleted users, and other email addresses that do not have a mailbox unavailable for selection in the New Backup Set Wizard. This elimination process will delay the wizard as it verifies each item before populating the list of email addresses for selection.
To enable this feature, follow these steps in DS-User:
1. In DS-User, on the Setup menu, select Configuration.
2. Click the Advanced tab.
3. Select the category Miscellaneous.
4. Select the parameter ExchangeOnlineExcludeGroupMailboxes and set its value to Yes.

NOTE: If this feature is not enabled, you must ensure that distribution groups are not selected alongside mailboxes that you have manually selected for backup in a Microsoft Office 365 backup set.