Veritas Enterprise Vault Exchange archiving support for Hybrid Modern Authentication

Veritas Enterprise Vault Exchange archiving support for Hybrid Modern Authentication

Article: 100050874
Last Published: 2023-09-05
Ratings: 8 0
Product(s): Enterprise Vault

Hybrid Modern Authentication (HMA) is a method of identity management that offers more secure user authentication and authorization. This method provides users the ability to access the On-premises application using authorization tokens obtained from the cloud. For Microsoft Exchange Server, On-premises mailbox users can use these tokens for authentication to On-premises Microsoft Exchange Server.

Veritas Enterprise Vault Exchange archiving supports HMA when Microsoft Outlook 2016 or later is used.


  • The Vault Service account (VSA) and System Mailbox must be in the On-premises Active Directory.
  • User synchronization with the On-premises Active Directory is necessary for Enterprise Vault Search. Do not perform migrations or deletions of user accounts from the On-premises Active Directory.

If you have enabled HMA for Microsoft Exchange Server On-premises servers to authenticate the Outlook users, and you use Enterprise Vault Exchange archiving, then you must perform the following steps on each Enterprise Vault server that hosts a Microsoft Exchange Server archiving task:

  1. Log on to the Enterprise Vault server using the Vault Service account. If you run Microsoft Exchange Server archiving tasks under a service account other than the Vault Service account, log on using that account.
  2. Create the following registry entries:
    Registry Path Value Type Value Name Value Data
    HKEY_CURRENT_USER\Software\Microsoft\Exchange DWORD AlwaysUseLegacyAuthForAutodiscover 1
    HKEY_CURRENT_USER\Software\Microsoft\Exchange DWORD MapiHttpDisabled 1

    For Outlook 2016 and 2019: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Identity

    DWORD EnableADAL 0
  3. Restart the Enterprise Vault Admin service.


Was this content helpful?