Issue:
Elements Collaboration Protection Security event page shows the warning "Mailbox protection for mailbox was temporarily disabled due to service issues. The system will attempt to restore it automatically." from the source Provisioning service.
What causes this issue and does something need to be done to fix it?
Resolution:
If the issue appears only on one or a few mailboxes but not every mailbox, then the issue is most likely on the Exchange side and not Elements Collaboration protection. Usually when this error appears, the issue is resolved by itself by waiting for the Elements Collaboration Protection to try to establish the connection again.
The Elements Collaboration Protection mailbox refresh task is scheduled to run every two hours. Each time the mailbox is not able to be connected, the same Security Event will appear in the logs.
We recommend to wait for a 48 hours to see if the protection status has changed back to "protected". You can go to the Cloud services > cloud service > Exchange page to view all the mailboxes and their statuses. Check if the status has changed from Protected (Temporary protection failure) back to Protected.
If issue affects all or most of the mailboxes, we recommend reviewing the following Microsoft article to understand these changes and verify that EWS (Exchange Web Services) access is correctly configured for the affected mailbox(es) - The way to control EWS usage in Exchange Online is changing | Microsoft Community Hub
It is worth confirming that:
-
EWS is enabled both at the tenant level and at the individual mailbox level
-
The affected users have a valid Exchange Online license assigned
-
The affected users Outlook mailbox policy din’t got any restrictions prior to the error
If you have access to PowerShell, you can check the mailbox-level EWS setting with:
Get-CASMailbox -Identity user@domain.com | Select EwsEnabled
And the org-wide default with:
Get-OrganizationConfig | Select EwsEnabled
Article no: 000015527