topic EWS O365 Instance - Not allowed to access Non IPM folder. (85) in Cortex XSOAR Discussions https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/ews-o365-instance-not-allowed-to-access-non-ipm-folder-85/m-p/583082#M3225 <P>XSOAR stopped fetching incidents from our assigned email address on April 3rd. I opened the EWS O365 instance to investigate and did a "test" for troubleshooting and the test result shows:<BR /><BR /></P> <DIV class="test-result-title"> <DIV class="semi-bold"><STRONG>Error</STRONG></DIV> <DIV class="test-timestamp"><STRONG>(April 9, 2024 11:14 AM)</STRONG></DIV> </DIV> <P><STRONG>Not allowed to access Non IPM folder. (85)&nbsp;</STRONG></P> <P>&nbsp;</P> <P>We did not make any settings changes to the instance. After doing some research it appears that there was a recent change with Microsoft O365. Is anyone else running into this issue? Is there a work around or fix?</P> <P>&nbsp;</P> <P>#EWSO365 #EWSO365Instance</P> Tue, 09 Apr 2024 17:29:49 GMT WillNguyen 2024-04-09T17:29:49Z EWS O365 Instance - Not allowed to access Non IPM folder. (85) https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/ews-o365-instance-not-allowed-to-access-non-ipm-folder-85/m-p/583082#M3225 <P>XSOAR stopped fetching incidents from our assigned email address on April 3rd. I opened the EWS O365 instance to investigate and did a "test" for troubleshooting and the test result shows:<BR /><BR /></P> <DIV class="test-result-title"> <DIV class="semi-bold"><STRONG>Error</STRONG></DIV> <DIV class="test-timestamp"><STRONG>(April 9, 2024 11:14 AM)</STRONG></DIV> </DIV> <P><STRONG>Not allowed to access Non IPM folder. (85)&nbsp;</STRONG></P> <P>&nbsp;</P> <P>We did not make any settings changes to the instance. After doing some research it appears that there was a recent change with Microsoft O365. Is anyone else running into this issue? Is there a work around or fix?</P> <P>&nbsp;</P> <P>#EWSO365 #EWSO365Instance</P> Tue, 09 Apr 2024 17:29:49 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/ews-o365-instance-not-allowed-to-access-non-ipm-folder-85/m-p/583082#M3225 WillNguyen 2024-04-09T17:29:49Z Re: EWS O365 Instance - Not allowed to access Non IPM folder. (85) https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/ews-o365-instance-not-allowed-to-access-non-ipm-folder-85/m-p/583092#M3226 <P>Apparently the fix in the code is very simple, but if we don't want to clone and maintain our own integrations, we'll have to wait for the update.</P> <P>&nbsp;</P> <P>The fix is described here.</P> <P><A href="https://stackoverflow.com/questions/78264205/not-allowed-to-access-non-ipm-folder" target="_blank">https://stackoverflow.com/questions/78264205/not-allowed-to-access-non-ipm-folder</A></P> <P>&nbsp;</P> <P>If we could get some XSOAR engineer to push this badboy, that'd pretty cool.</P> Tue, 09 Apr 2024 19:12:56 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/ews-o365-instance-not-allowed-to-access-non-ipm-folder-85/m-p/583092#M3226 CJNTS 2024-04-09T19:12:56Z Re: EWS O365 Instance - Not allowed to access Non IPM folder. (85) https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/ews-o365-instance-not-allowed-to-access-non-ipm-folder-85/m-p/583096#M3228 <P>Looks like there is a content pack update that addresses this in the marketplace.</P> <P>&nbsp;</P> <DIV id="dropdown-expander-title" class="dropdown-expander-title clickable"> <DIV class="expander-left-components"> <DIV class="expander-label-wrapper title-h3"> <DIV class="ui grid"> <DIV class="ui row"> <DIV class="ui column"> <DIV class="pack-release-notes-version-header h4">1.3.3 - 940291 (April 7, 2024)</DIV> </DIV> <DIV class="ui five wide right floated right aligned column"> <DIV class="version-rn isInstalled"><SPAN class="pack-install-link-wrapper"><SPAN class="pack-install-link link-text">Reinstall 1.3.3</SPAN></SPAN><SPAN class="color-success installed-pack-release-notes"><I class="demisto-icon icon-status-check-24-r"></I>Installed</SPAN></DIV> </DIV> </DIV> </DIV> </DIV> </DIV> </DIV> <DIV class="dropdown-expander-content pack-release-notes-version pack-release-notes-version-1.3.3 dropdown-expander-content-extended"> <DIV class="global-markdown"> <H4>Integrations</H4> <H5>EWS O365</H5> <UL> <LI><U>Fixed the <STRONG>ews-get-folder</STRONG> command which failed when given a folder ID as <EM><STRONG>folder-path</STRONG></EM>.</U></LI> <LI>Fixed an issue in <STRONG>Fetch incident</STRONG> with inline image attachments in <EM>PreprocessEmail</EM> script by adding description field to attachments to distinguish file attachments from inline images.</LI> <LI>Updated the Docker image to: <EM>demisto/py3ews:1.0.0.91453</EM>.</LI> </UL> <H5>EWS Extension Online Powershell v3</H5> <DIV class="preplacer">Fixed an issue where the following commands returned an error when no response was received:</DIV> <UL> <LI><EM><STRONG>ews-new-tenant-allow-block-list-items</STRONG></EM></LI> <LI><EM><STRONG>ews-get-tenant-allow-block-list-items</STRONG></EM></LI> <LI><EM><STRONG>ews-get-tenant-allow-block-list-count</STRONG></EM></LI> <LI><EM><STRONG>ews-remove-tenant-allow-block-list-items</STRONG></EM></LI> </UL> </DIV> </DIV> Tue, 09 Apr 2024 19:35:56 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/ews-o365-instance-not-allowed-to-access-non-ipm-folder-85/m-p/583096#M3228 CJNTS 2024-04-09T19:35:56Z Re: EWS O365 Instance - Not allowed to access Non IPM folder. (85) https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/ews-o365-instance-not-allowed-to-access-non-ipm-folder-85/m-p/583104#M3229 <P>Thanks!</P> <P>I updated the content pack - <EM>Microsoft Exchange Online</EM> to latest version 1.3.3 and it is now working.</P> <P>&nbsp;</P> <P>Appears a fix on April 5th addressed this "Not Allowed Access" error.<BR /><SPAN>1.3.0 - R936713 (April 5, 2024)</SPAN></P> <DIV id="dropdown-expander-title" class="dropdown-expander-title clickable"> <DIV class="expander-left-components"> <DIV class="expander-label-wrapper title-h3"> <DIV class="ui grid"> <DIV class="ui row"> <DIV class="ui five wide right floated right aligned column"> <DIV class="version-rn isDowngrade"><SPAN>Integrations</SPAN></DIV> </DIV> </DIV> </DIV> </DIV> </DIV> </DIV> <DIV class="dropdown-expander-content pack-release-notes-version pack-release-notes-version-1.3.0 dropdown-expander-content-extended"> <DIV class="global-markdown"> <H5>EWS O365</H5> <UL> <LI>Fixed an issue where the integration has failed with ‘Not Allowed Access’ error due to breaking changes on Microsoft’s side.</LI> </UL> </DIV> </DIV> Tue, 09 Apr 2024 20:37:13 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/ews-o365-instance-not-allowed-to-access-non-ipm-folder-85/m-p/583104#M3229 WillNguyen 2024-04-09T20:37:13Z