none
Permissions required to connect to a DPM server via powershell RRS feed

  • Question

  • I am attempting to connect to a DPM server (DPM 2010) via powershell. The machine from where I am running the powershell cmd is my local machine (and not the DPM server).

    When I run the following command: Connect-DPMServer servername

    I get the following generic error:

     

    Connect-DPMServer : Unable to connect to servername. (ID: 948)
    Verify that the DPM service is running on this computer.
    

    The way I can get the error to go away is that if log into the DPM server and add myself to the local "Administrators" group, I am then able to run the script from my local machine successfully.

    But what I need to be able to do is provide a large group of users the ability to run power-shell scripts that will eventually restore SQL databases. I cannot add all these users to the "Administrators" group (I need to find the exact set of permissions required and not give them carte blanche access to the DPM server).

    Please help!

     


    http://blog.aggregatedIntelligence.com/
    Monday, January 23, 2012 6:48 PM

Answers

  • Hi

    To connect to DPM the user needs permissions to DPM/SQL Server DPMDB. If the user account you are using can't connect to SQL, then you can get the error above.

    But if the goal is to allow users to restore SQL Databases I would use DPM Self-Service Recovery Tool instead of making every user a DPM administrator (which pretty much will wide open the hability to backup/restore/etc)

    http://technet.microsoft.com/en-us/library/ff399189.aspx


    Thanks, Wilson Souza - MSFT This posting is provided "AS IS" with no warranties, and confers no rights
    Monday, January 23, 2012 9:45 PM
    Moderator
  • I guess the only option to manage a DPM server is being a local administrator.....
    Thanks, Wilson Souza - MSFT This posting is provided "AS IS" with no warranties, and confers no rights
    • Marked as answer by rockyMtnRajah Wednesday, January 25, 2012 3:53 PM
    Monday, January 23, 2012 10:33 PM
    Moderator

All replies

  • Hi,

    As far as I know you have to be in the local Administrators group on the DPM server in order to connect via PowerShell, however this will be changed in DPM 2012.

    Regards!


    http://www.purgar.net
    Monday, January 23, 2012 8:23 PM
  • Thanks Jure, Is this documented anywhere?


    http://blog.aggregatedIntelligence.com/
    Monday, January 23, 2012 8:27 PM
  • Hi,

    Not that I know of. If I remmember corectlly I've asked someone from MS about this and I think that he said this is the only way. It is however possible that there is another way but I don't know where to get started.

    Good luck.

    Regards!


    http://www.purgar.net
    Monday, January 23, 2012 9:05 PM
  • Hi

    To connect to DPM the user needs permissions to DPM/SQL Server DPMDB. If the user account you are using can't connect to SQL, then you can get the error above.

    But if the goal is to allow users to restore SQL Databases I would use DPM Self-Service Recovery Tool instead of making every user a DPM administrator (which pretty much will wide open the hability to backup/restore/etc)

    http://technet.microsoft.com/en-us/library/ff399189.aspx


    Thanks, Wilson Souza - MSFT This posting is provided "AS IS" with no warranties, and confers no rights
    Monday, January 23, 2012 9:45 PM
    Moderator
  • Hi Wilson,

    Thanks for your reply. The reason we have been looking at using the powershell cmdlets is that we want to restore the databases as part of much larger process (where the entire process is automated). This process can be kicked off by any one on the development team. (The process, sets up IIS sites, restores databases and sets up environments for development). I dont think there is a way to automate using of the DPM Self service tool. Which is why I think I need to get DPM powershell cmdlets running for this group of users.

    Is there a group that I can add the users too, to get access to the DMP db? Will that be all that I need to do?

    Update: I added myself to the SA group on the sql-server. But that doesnt seem to help. I am unable to login without being added to the local administrators group.

    Raj


    http://blog.aggregatedIntelligence.com/

    Monday, January 23, 2012 9:57 PM
  • I guess the only option to manage a DPM server is being a local administrator.....
    Thanks, Wilson Souza - MSFT This posting is provided "AS IS" with no warranties, and confers no rights
    • Marked as answer by rockyMtnRajah Wednesday, January 25, 2012 3:53 PM
    Monday, January 23, 2012 10:33 PM
    Moderator