Supported platforms and requirements

The tables below contain all the information regarding system requirements and supported platforms for CodeTwo Backup.

Software components
The program consists of two main components installed together:
  • CodeTwo Backup Service - responsible for the back-end management of jobs and other associated processes
  • CodeTwo Backup Administration Panel - allows the user to configure the Backup Service by creating jobs (backup, restore, archive) and server connections 
CodeTwo Backup Service & Administration Panel
Required permissions: The installation requires local administrator rights.
The program can be operated by all users (domain and non-domain) who have access to the machine where CodeTwo Backup is installed.

Connection to Microsoft 365 (Exchange Online)

To back up the Exchange Online mailboxes and public folders data from your Microsoft 365 (Office 365) tenant, you need to register CodeTwo Backup in that tenant's Microsoft Entra ID (Azure Active Directory). The program needs to be assigned application permissions listed below:

Exchange:

  • full_access_as_app

Microsoft Graph:

  • Directory.Read.All
  • Group.Read.All
  • MailboxSettings.ReadWrite
  • User.Read.All

CodeTwo Backup can be registered:

  • automatically, when configuring a connection to Microsoft 365 in the program (an account with the Global Administrator or Privileged Role Administrator role is required when signing in to Microsoft 365);
  • manually in Entra ID (Azure AD), as described in this article. You will be asked to provide the registration details and an email address of any user from your Microsoft 365 tenant in the program to establish a connection with Exchange Online.

No matter which registration method you use, the account that is used to sign in to Microsoft 365 or whose email address is provided in the program needs to be assigned a Microsoft 365 license that includes the Exchange Online plan.

Public folders

To be able to restore data to Exchange Online public folders, the account used to configure a connection to Microsoft 365 needs to be the Owner of the tenant's root public folder as well as all subfolders to which the data will be restored.

Connection to on-premises Exchange Server

The administrator account used for establishing a new connection to on-premises Exchange server needs to be mailbox-enabled and have impersonation rights granted to users' mailboxes (CodeTwo Backup assigns the necessary rights automatically, if they are missing). By default, such rights are granted to users assigned the Organization Management group.

Learn how to create such an account following the Role-Based Access Control approach

Connection to SharePoint Online

To back up the SharePoint Online and OneDrive for Business data from your Microsoft 365 tenant, you need to register CodeTwo Backup in that tenant's Microsoft Entra ID. The program needs to be assigned application permissions listed below:

Microsoft Graph:

  • Directory.Read.All
  • Group.Read.All
  • User.Read.All

Office 365 SharePoint Online:

  • User.Read.All
  • Sites.FullControl.All

CodeTwo Backup can be registered:

  • automatically, when configuring a connection to SharePoint Online in the program (an account with the Global Administrator or Privileged Role Administrator role is required when signing in to Microsoft 365);
  • manually in Entra ID, as described in this article. You will be asked to provide the registration details and an email address of any user from your Microsoft 365 tenant in the program to establish a connection with SharePoint Online.

Optionally, if you wish to perform actions supported by the legacy authentication protocol only, you need to provide Global Administrator or SharePoint Administrator credentials in the Legacy authentication step of the connection wizard. Learn more

Connection to on-premises SharePoint Server

The administrator account used to configure a new connection to on-premises SharePoint server needs to be: 

  • added to the Domain Users group
  • added to the Administrators group of the server on which your SharePoint Server is installed
  • added to the SharePoint Farm Administrators group
  • granted Full Control permissions to the SharePoint site at the Web Application Policy level
  • added to the Remote Management Users group
  • added to the SharePoint_Shell_Access role
  • set as the site collection administrator for each site collection you want to back up or to which you want to restore the backed-up data. 

The admin account used to deploy SharePoint will have all the necessary rights.

Learn how to create a new admin account that can be used to backup or restore on-premises SharePoint data

To back up public folders, the administrator account used in the program needs to be granted the Full control permission to the root public folders tree. See our Knowledge Base article on how to do so
Multi-factor authentication (MFA) is supported. Be sure to use the app password instead of your regular password when configuring a connection to SharePoint Online. Learn more
Requirements: To work correctly, the program requires at least a quad-core processor and 4 GB of RAM. To back up on-premises Exchange or SharePoint data, the program needs to be installed in the same domain where Exchange Server or SharePoint Server resides. The machine on which you install the program also needs to be connected to the Internet at all times. Learn more

Supported platforms

  • In the case of Exchange Online:
    • Microsoft 365 (Office 365) plans with Exchange Online (including F1 and Kiosk plans)
    • Exchange Online standalone plans
  • In the case of on-premises Exchange Server:
    • Exchange Server 2019
    • Exchange Server 2016
  • In the case of SharePoint Online:
    • Office 365 plans with SharePoint Online
  • In the case of SharePoint on-premises:
    • SharePoint Server 2019
    • SharePoint Server 2016

The program can be installed on a physical or virtual machine.

(*) If you're installing the program on Windows Server 2016, make sure your operating system includes the latest updates. Learn more

To ensure optimum performance, it is strongly recommended to back up your data on SSDs (solid-state drives) and only use HDDs (hard-disk drives) for data archiving. While a standard HDD can be used as your backup storage, it should be avoided.

Note that using network drives (including iSCSI, NAS) or removable storage solutions (including USB-C disks) is possible only in the case of archive jobs (such devices cannot be used as primary storage).

Size on disk after installation: Similar to the size of the installation file - see the Download page of your CodeTwo product (Backup for Office 365Backup for Exchange) for details. Installation of additional components (such as .NET) might be required - these components usually require less than 100 MB of available disk space.
Other
Items supported for backup The program supports the backup of:
  • all types of mailbox items, such as emails, contacts, calendars, tasks, etc. (except for hidden system folders), residing within user, Microsoft 365 group, shared, SharePoint site and resource mailboxes; user's archive mailboxes (In-Place Archives) are also supported,
  • Exchange public folders data,
  • SharePoint data residing in site collections, team sites, lists, libraries, etc., 
  • OneDrive for Business sites,
  • Microsoft Teams data residing within Exchange Online, SharePoint Online and OneDrive for Business (channel and private files, calendar items, OneDrive Notebooks, voicemail messages, attachments sent in chat messages and Wiki pages; chats/conversations and other types of data not listed above are not supported).
At the moment, the program does not support the backup of Skype for Business data. Keep also in mind that the program backs up only contents of mailboxes or public folders, not their properties or permissions (delegates).
The program also allows a user to back up mailboxes from a subdomain. You can find more information in this article.
Emails encrypted using Microsoft Purview Message Encryption (formerly Office 365 Message Encryption) are supported. Such messages remain encrypted and retain their properties when copied to a backup storage or when restored to a Microsoft 365 tenant.
Hybrid setup support Backup/restore options will work in hybrid setups if separate jobs are created for a set of mailboxes from on-premises Exchange Server and from Exchange Online (Microsoft 365). Such jobs must use separate connection configurations too - jobs targeting on-premises mailboxes must connect using an on-prem mailbox-enabled account. In a similar way, Exchange Online (Microsoft 365) hosted mailboxes may be processed by jobs configured to use an account with mailboxes in the cloud.
Be aware that CodeTwo Backup was not created specifically for hybrid environments, therefore you may encounter errors when going through the connection configuration wizard. Ignore them, create a test job and try it out before jumping to conclusions. Full support for hybrids is expected in future releases.
ADFS is not yet supported. Single Sign On (SSO)-enabled accounts may be used for server connection configuration, but only when a UPN in a non-federated target domain address is used (e.g. *.onmicrosoft.com).

See also

Installation - information about the setup of the program.
Learn more about assigning admin roles in Microsoft 365

In this article

Was this information useful?