fredag 16 december 2011
Secondary DPM server over WAN link
Scenario: You have a primary DPM server protecting your production environment. You also have a remote site that is great for offsite replication to a secondary DPM server. However, there’s a limit regarding how poor wan link you can have between those two sites. If the scenario fits your design you must have a WAN link higher than 512 kb.
fredag 9 december 2011
Error 25 with secondary protection of DPM database
Suddenly the protection failed and new recovery points couldn’t be created. The VSS for SQL was in an error state so I rebooted the primary DPM server and verified the VSS writer, everything was ok. I tried to make a recovery point but the SQL VSS failed immediately.
I looked in the System event log and notices an consistent error with the Virtual Disk Service, error 25 that occurred at the same time as the creation of the recovery point.

After restarting the Virtual Disk and DPM writer services the recovery point could successfully be made for the primary DPM Servers database.
fredag 2 december 2011
DPM2012 session @ NIC2012
In my session I will cover the news of DPM2012 and give you all a walkthrough of the new GUI and features.
Welcome to attend my session in Norway!
lördag 26 november 2011
VC Redistibutable Package
fredag 18 november 2011
Problem with SQL synchronization
On the SQL server side I noticed an error in the event viewer with the event id 5, Active Server Pages. This error occurred at the same time as the backup. To solve this I had to re-register the asp.dll from an elevated command prompt.
Run Regsvr32 asp.dll from an elevated command prompt.
fredag 11 november 2011
DPM 2012 book
I’m asking the DPM community what specific topics you would like to see covered in this book.
Please email me @ robert.hedblom@gmail.com
fredag 4 november 2011
Best Of MMS
Got a lot of positive response that will keep me going =)
If you want to know more about System Center Operations Manager or System Center Orchestrator, check out Anders Bengtsson's blog
fredag 28 oktober 2011
Complements for EUR
EUR is the functionality that was presented in DPM 2006. This is the ability to let the end-users restore files from file shares using shadow copy function and interaction with DPM.
EUR is based on your NTFS rights on that share. There are some nice complements that Mike Jacquete posted on the DPM forum.
Disable restore Button
This functionality prevents a client from overwriting the current version of a file with an earlier version of the file. The client can only copy the earlier version of a file to an alternative location.
To do this, type either of the following commands at the command prompt, and then press ENTER
REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer /v NoPreviousVersionsRestore /t REG_DWORD /d 1
REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer /v NoPreviousVersionsRestore /t REG_DWORD /d 1
You can add the DWORD registry entry as part of a user's logon script.
We recommend that you add the DWORD entry to the HKEY_LOCAL_MACHINE subkey. We recommend this for the following reasons:
• The HKEY_LOCAL_MACHINE subkey is not overwritten by policy updates.
• The HKEY_CURRENT_USER subkey can be written to by logon scripts that are using nonadministrator permissions.
Disable the Previous Versions tab
To disable the Previous Versions tab on individual client computers, follow these steps:
Type either of the following commands at the command prompt, and then press ENTER:
REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer /v NoPreviousVersionsPage /t REG_DWORD /d 1
REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer /v NoPreviousVersionsPage /t REG_DWORD /d 1
fredag 21 oktober 2011
Any wishes?
I’m wondering if you got any wishes? What do you want to know about DPM? Do you have any scenarios that you want to see get presented? What does the community want to see?
I’m listening to YOU, get back with info @ Robert.hedblom@gmail.com
fredag 14 oktober 2011
Protection of SharePoint
First you must install the DPM agent on your WFE (Web-Front-End) servers.
Second, install the DPM agents on your back end SQL servers.
Third you must enable the SharePoint VSS using the executable ConfigureSharepoint.exe with the switch -EnableSharePointProtection
tisdag 11 oktober 2011
DPM2010 management packs
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=7612
fredag 7 oktober 2011
Webcast: News in DPM 2012
At the 13/10 1PM GMT+1 I will host a webcast (Live meeting) that addresses the new features and will also show the new GUI.
Please email me @ robert.hedblom@gmail.com and I will provide you the link and information you need.
This is free , you don’t have to pay to attend
Date:13/10 2011
Time:1 PM GMT +1
fredag 30 september 2011
Running Hyper-V ILR on a virtual DPM2010 server
This won’t work if you run DPM2010 on a virtual server since the ILR is based on the Hyper-V role and you can’t activate the Hyper-V role on an already virtual environment…or?
Of course you can, but it’s important that you know that this isn’t a supported workaround.
Use OCSetup to install the Hyper-V role. It will be installed even if it fails. This is since it can’t access the ED bit or the virtual extensions on the processor. Hyper-V won’t work but DPM 2010 will after a restart be able to perform a ILR on a VHD.
OCSetup Microsoft-Hyper-V
tisdag 27 september 2011
Webcast, what is DPM and how does it work?
• What is DPM
• How does it work
• Walkthrough of the different protection od workloads
This webcast is free of charge.
If you are interested in participating please send me an email @ robert.hedblom@gmail.com and I will provide the information you need to connect and join.
Welcome to join the 30/9 @ 1 PM CET
Looking forward to see you!
måndag 26 september 2011
Best of MMS 2011 agenda is set
Check out the agenda @ http://www.microsoft.com/sverige/bestofmms2011/agenda.html
fredag 23 september 2011
Backing up cross domains
Using DPM in your environment you’re able to backup other DPM servers cross different domain and forests. This could be used for example in the scenario that a company A made an acquisition of another company B. Company A will be responsible for managing the disaster recovery scenario for company B’s data using Data Protection Manager.
Using DPM to backup other servers or DPM servers across domain and forests boarders there are some prerequisites that must be fulfilled:
- You must have network access between the domain or forests servers. Use ping to verify
- You must define conditional forwarders for the domains so your DNS will be aware of the other domain’s DNS information
- You must have a two-way trust relationship. For domain two-way trust minimum requirements are 2003 domain. For forest trust you must have Windows Server 2008 Forest mode.
- An account in both domains that are domain admin used for domain trusts or enterprise admin used for forests trusts.
First you must verify your network access. Ping the other network to verify that you have connectivity between the sites.
Second you need to setup a conditional forwarder. I will demonstrate this in 2008R2.
Go to your domain controller in your domain. Open your DNS MMC. Right click on the Conditional Forwarder and choose New Conditional Forwarder.
You will now be prompted with the New Conditional Forwarder window.
In the field DNS Domain you type in the domain name of the domain you want to have DNS information about. Now you must enter the IP addresses of the DNS servers in that domain, you will enter those in the IP addresses of the master servers. Enter the IP addresses and your DNS server will try to resolve it, this could take some time. At the bottom you’ll have the option to Store this conditional forwarder in Active Directory… check this and choose to replicate to all DNS servers in the forests. Now you’re done, click on OK. Now you must do the same operation in the other domains DNS servers and typing in your domain name and DNS servers IP addresses. After this you will be able to ping the resources in the other domain using FQDN.
Now we will make the trust between the domains. You’ll need an account that is a member of the domain administrator group in the domain you want to create a trust with.
Open Active Directory Domains and Trusts. Right click your domain name and choose properties.
Click on the Trust tab.
Click in the New Trust… button in the bottom. The New Trust Wizard will appear. Click Next.
Now you need to enter the Trust Name. Type in the DNS name of the domain you want to make a trust with. For example contoso.com
Next you will decide what kind of trust type you will use, in this example you will use an Forest Trust.
Now choose the Direction of Trust. DPM must have a Two-way trust.
You’ll be prompted for credentials of an domain admin account in the domain you’ll trust.
Now define the Outgoing Trust Authentication Level-Local Forest option. Choose Forest-wide authentication. Click Next.
You’ll now define the Outgoing Trust Authentication Level-Specified Forest option. Choose Forest-wide authentication. Click Next.
The Trust Selection Complete windows will now show. Click Next to create the Trust relationship.
You’ll now have the option to Confirm Outgoing Trust. Do this.
Now the trust is done and your able to protect workloads in the other domain.
In the DPM console you attach the servers with their FQDN and your able to protect them
fredag 16 september 2011
Best Of MMS 2011
It’s time again for Best Of MMS in Sweden. It will be in Stockholm at the 25th and 26th of October. I will host the session about DPM 2012, welcome to join me @
http://www.microsoft.com/sverige/bestofmms2011/default.html
fredag 9 september 2011
Change the time for detailed inventory
Set-MaintenanceJobStartTime -DPMServerName "servername" -MaintenanceJob LibraryInventory -StartTime 18:00
torsdag 1 september 2011
DPM 2012 Beta Released
The DPM team has really listened to the customer’s wishes and thoughts regarding new features and made a great new version of DPM, DPM2012.
New features announced in DPM 2012 are:
Centralized console: You can monitor a lot of DPM servers or protected members (don’t know if the number is public so you’ll have to wait) within the same console.
The centralized console is based on SCOM so you must have a System Center Operations Manager 2007 R2 Server Components installation up and running before you can install your centralize console for DPM 2012. You’re also able to install your central console on a W7, Vista or Windows XP SP3 client and manage all your DPM servers. If you are running DPM 2010 you’re also able to monitor those DPM servers within the centralized console during your migration process to DPM20102. One important thing is that you have the KB2465832 installed on your DPM2010 servers.
New UI: The DPM team has made the same UI as the other System Center products, YES!
Certificate Based Protection: You can now backup machines from different domains not trusted to the DPM server, this also includes workgroup machines.
Role Based Access: There are 8 different roles based on the administration take made from the DPM admin side. Your helpdesk staff could be included in one role and your escalation engineers are members in another. You’ll also have the ability to create customized roles.
Tape: Enhancements are made for improved reliability, space optimization and much more…
Sharepoint: You’r now able to restore items without moving the content database.
Hyper-V: Able to perform Item Recovery within a virtual DPM server
DPM DB: You can now host multiple DPM Servers on the same SQL instance
Looking forward to the next Beta release!!
fredag 26 augusti 2011
Event ID 517, backing up system state
In WSB there’s a global catalogue used by the WSB feature. This could enter a corrupted state and causing the System State backup (and BMR) to fail.
Here’s an example of the event log:
The backup operation that started at '2011-06-21T10:34:12.022776900Z' has failed with following error code '2155347969' (An operation on the global catalog failed because the catalog is corrupted.). Please review the event details for a solution, and then rerun the backup operation once the issue is resolved
To correct this, open the local WSB on the affected server and choose to clear the Global Catalogue in the right action pane.
fredag 19 augusti 2011
Backing up SQL with DPM
• Simple
• Full
• Bulk-full
The thing that differentiates the databases is that the simple database has no transactional log files and can therefore only use the Express-Full backup technique in DPM.
The best practice for SQL server databases is to run a weekly database consistency check (also called DBCC) for avoiding backing up a database with a corruption issues with DPM.
You should not run or use other backup applications on a SQL server that is protected with DPM. This will lead to that DPM will not be able to back up your databases. If you should use DPM to protect your SQL server databases use only DPM, nothing else.
Last but not least verify with the SQL Server administrator that the following task are not scheduled at the same time as the Express-Full backup is running:
• Check database integrity
• History cleanup
• Maintenance cleanup
• Rebuild index
• Reorganize index
• Shrink database
• Update statistics
fredag 1 juli 2011
fredag 24 juni 2011
Use ESEUTIL.EXE for Exchange 2003 32-bit on DPM 2010
But if you’re running a 32-bits version of Exchange 2003 that is protected with DPM 2010 and you want to use ESEUTIL on the DPM server you will run into some trouble. Since the DPM2010 version is a 64-bit server technology you can’t place 32-bit binaries on a DPM 2010 server.
DPM 2010 is a 64-bit server technology that can protect 32-bit server technologies.
But of course there is a solution.
If you download the Microsoft Exchange Server 2007 management tools at this URL http://go.microsoft.com/fwlink/?LinkId=112325 you will be able to use that ESEUTIL version.
fredag 17 juni 2011
Changing the path for System State backups
fredag 10 juni 2011
SAN based recovery
There are three things you must be aware of.
First: The DPM server and the protected server must be both connected to the same SAN, Or the zoning in the SAN must be configured so the LUN presented to the protected computer and the DPM server is the same.
Second: A SAN where hardware snapshot functionality is enabled
Third: Your SAN must be able to create clones and split a clone to make it writable
fredag 3 juni 2011
Offline VS Online backup of a Hyper-V environment
In the next coming minutes I will try to explain why it differentiates.
Ever seen this, you got a 2008R2 server that gets backed up using saved state? Why, There are VSS’es that are in a stable state running on the virtual machine and all Hyper-V VSS’es looks fine on the host side also.
Let’s try to explain how a backup of a virtual environment works. First you install a DPM agent on the Hyper-V host, that’s the server hosting all the virtual machines. After you have done all necessary configurations in DPM to start protecting your Hyper-V environment you will create the replica. This is where the VSS’es comes in place. The DPM agent on the host will initiate a VSS-Requestor. This will send a VSS request to the virtual machine, the virtual machine will answer to that requests and say what present VSS’s are running within the virtual server.
So, if you are running a Hyper-V server with a server technology that hasn’t any VSS’es that can backup your server technology within the virtual operating system you will end up with a backup that will run only using saved state.
But there’s more.
Online protection is not possible when;
• Backup (Volume Snapshot) Integration Service is not installed or disabled.
• VM has one or more dynamic disks.
• VM has one or more non-NTFS based volumes.
• The VM Cluster Resource Group in a cluster setup is offline.
• VM is not in a running state.
• Shadow storage assignment of a volume inside the VM is explicitly set to a different volume other than itself.
fredag 27 maj 2011
DPM Course
Welcome to attend.
http://www.cornerstone.se/Web/Templates/CoursePage.aspx?id=2513&course=COUR2009052510091400637804&epslanguage=SV
fredag 20 maj 2011
All Volumes
When you create or modify a protection group and chooses to include a disk subsystem of a server you got the All Volumes check box. When you mark this check box you will include all the disks that are present to the system at this moment.
If you install a new disk or inserts a USB stick in the protected server this will not automatically be included in the backup that DPM preforms. You must modify the protection group and manually add the new local disk.
fredag 13 maj 2011
Did you install WSB?


fredag 6 maj 2011
Short Erase
If your tape drive supports short erase, you can enable it on the DPM server by creating the DWORD UseShortErase under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent.
Set the value of the DWORD to 00000000.
After this value is set, all erase operations on the DPM server will be short erases. To revert to long erases, remove this registry key.
Important: Though short erase is much faster than long erase, it does not completely erase the data from the tape. If you have a policy that all data from the tape must be erased and unrecoverable, do not enable short erase.
fredag 29 april 2011
A book on DPM 2010

Steve Buchanan is the name of the author and he also has a great blog.
It’s been fun helping Steve with the book and I’m very happy for him that it’s published. Keep up the good work
fredag 8 april 2011
Co-Location of data on Tape
There are some restrictions:
1. You cannot apply co-location selectively. If enabled, it applies to all protection groups.
2. Only protection groups with the same retention period can be co-located on the same tape.
3. Encrypted and non-encrypted datasets cannot be co-located on the same tape.
4. Datasets from different vaults cannot be co-located on the same tape.
If you fine with that open the DPM PowerShell and type: Set-DPMGlobalProperty -DPMServerName -OptimizeTapeUsage $True
tisdag 1 mars 2011
fredag 11 februari 2011
KB2465832 will soon be here
In this QFE Microsoft will perhaps address some circular/cyclic protection for you who has problem with VSS in those environments.
Be on the lookout for the release date!
fredag 4 februari 2011
How to get started with End-User Recovery or EUR
There are some important considering’s you must have in mind before you enable EUR.
- When enabling the EUR function you will modify your Active Directory schema. Inform the Active Directory administrator.
- If you enable EUR you can't control on what file servers EUR should operate.
- Another downside is that you can’t control which security groups or domain users that should be able to perform the action or not.
If you’re confident knowing this and you still wants to enable the EUR function there are some prerequisites on the client-side that you should have in mind. If your clients in the domain runs on W7 or Vista SP1, the Shadow Copy Client Software is already installed in the operating system. EUR is supported on XP SP2 but you need to install or deploy the Shadow Copy Client Software to those computers.
There are two ways of enabling the EUR, from the DPM console or manually. Let’s have a look on both.
If you go to your console / protection you will see on the left side the link option, click on the link
Now you’ll see the Options window. Go to the End-user Recovery tab. Click on the button Configure Active Directory. You will now see a windows posting that you’ll need to enter credentials for updating the Active Directory Schema.
Enter your credentials and click ok. You’ll now be prompted with a question that want you to verify that it’s ok to update the Active Directory Schema.
If you want to continue press the Yes button. An informational window appears that says it could take some time updating the Active Directory Schema, press ok.
If the updated succeeded, a window pops up and gives you that information. Some users can now get an error message that states that a communication error between the DPM server and the domain controllers. Verify your firewall configurations.
If you want to update the Active Directory Schema manually go to the Domain Controller that has the Schema Master role for the domain. The application you need to update the Active Directory Schema is located on the DPM server at the path %programfiles%\Microsoft DPM\DPM\End User Recovery. In that catalogue you will find the application DPMADSchemaExtension. Copy that to the domain controller and run the application as an administrator.

You will get a couple of questions that you need to answer so the application can update the Active Directory Schema correctly.

Type in the name for the DPM server, not the FQDN.
Enter your domain name.
måndag 24 januari 2011
Communication between DPM server and agent
SERVICE | PORT | PROTOCOL | ||
DCOM | 135 | TCP (Dynamic) | ||
TCP | 5718, 5719 | TCP | ||
DNS | 53 | UDP | ||
Kerberos | 88 | TCP | ||
LDAP | 389 | TCP, UDP | ||
NetBIOS | 137, 138 | UDP | ||
139, 445 | TCP |
Note that the ports 5718 and 5719 are DPM specific. 5718 is used for the agent coordinator and 5719 for the agent.
fredag 14 januari 2011
DPM agent installation on a DC or RODC
My friend Mike has wrote a blog post regarding how to solve this, check out this great article by Mike
söndag 2 januari 2011
MVP Award

I’m very grateful for this award. Due to this I would like to write some words to thank those people that believed, and still believe in me and my work.
First I would like to say thank you to my wife Hanna, your support has always been great. Thank you for your patience and understanding when your husband is spending half the nights in front of the laptop.
I would also like to say thank you to my employer Office IT-Partner Borås and my colleges with special thanks to Mr. Per Bidemyr, Mr. Jesper Neuman, Mr. Martin Westberg and Mr. Jörgen Andersson.
There are also some other fantastic peoples around the globe that I would like to say thanks to. First of is the gang at Microsoft starting with Mr. Jonny Andersson, Mr. Mikael Nederman, Mr. Anders Bengtsson and Mr. Michael Jacquet.
Last but not least a warm thank you to Mr. Mike Resseler, MVP for Data Protection Manager.
See you out there in the DPM world!
Best Regards
Robert Hedblom