none
DPM 2016 on Server 2016 to Enable End User Recovery -for Workstation or Laptops Protected content RRS feed

  • Question

  • Hi Team,

    Since this is 1st query this year so Happy New 2019 to All ,

    Recently we deployed DPM 2016 on Server 2016 .

    The feature EUR on File server is not work in DPM 2016 , checked in multiple forums

    Our query is that we need to enable option of End User to Recovery their data on Workstation or Laptop which is protected with DPM 2016

    Mainly PST file,  then default Users Folders and some other Drive path data backup is configured.

    If we enable EUR in DPM 2016 by extend Schema in AD above said will work or not?

    The main purpose of the project is 

       Centralised DPM management  from one location (total 6 location is planned)

       End user backup item recovery should be handled by end user only , should not call  Backup admin on recovery (short Term)

     Thanks in Advance,

    Kesavan K M


    Regards, Kesavan K M. Please remember to mark the replies as answers if they help.

    Saturday, January 5, 2019 4:43 PM

Answers

  • You can set up end-user recovery so that users can recover their own data, the end-user recovery enables users to independently recover file data by retrieving recovery points of their files without any IT team help.

    As you mentioned in your initial post, you will need to modify the Active Directory schema to enable end-user recovery.

    When DPM extends the schema, it creates a container called MS-ShareMapConfiguration, it grants the DPM server permissions to change the container contents, and it also adds mappings between source and replica shares.

    Configuring the end-user recovery

    1. Configure Active Directory to support end-user recovery:

    1.1 In the DPM console click Options > End-user Recovery > Configure Active Directory.

    1.2 In Configure Active Directory select Use current credentials or type in a user name and password with schema and domain admin permissions. Confirm your settings.

    1.3 If you don't have an account that has schedule and domain admin permissions you can ask another user with those permissions to run <drive:>\Program Files\Microsoft Data Protection Manager\DPM\End User Recovery\DPMADSchemaExtension.exe on a computer in the same domain as the DPM server. When the app runs the user should specify the name of the computer on which you want to enable end-user recovery and the DNS domain name of the DPM server.

    Note: If the protected computer and DPM reside in different domains, the schema needs to be extended by running the DPMADSchemaExtension.exe tool on the other domain.

    2. After AD settings are complete in the End-user Recovery tab click Enable end-user recovery.


    Blog: https://thesystemcenterblog.com LinkedIn:

    • Marked as answer by kesa_kara Monday, June 3, 2019 8:05 PM
    Saturday, January 5, 2019 7:18 PM
  • Hi Kesa,

    Can you please clarify once again in the below points

          Q1) EUR will support for Client machine Files & Folders are protected by DPM 2016 using MBS feature

    A1) yes, if you are protecting desktop clients using DPM client protection, then end users will be able to recover previous versions from DPM recovery points.

          Q2) EUR will not support where we protect windows File Shares protection using DPM 2016 using MBS feature.

    A2) Correct - a workaround will be to run DPM 2016 on Windows 2012 R2 that will continue to use legacy storage (vss based) and file server end user recovery will work as before.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    • Marked as answer by kesa_kara Monday, June 3, 2019 8:05 PM
    Wednesday, January 9, 2019 10:04 PM
    Moderator
  • Hi Kesa_kara,

    See inline comments MJ

    <snip>

    Also can you input of the query below

        How to utilise Optimise Performance (Enable on-the -wire-compression)

    MJ - This is a binary choice - it's either enabled or not enabled and if enabled DPMRA agent will compress the data before transmitting to DPM and DPMRA agent on DPM will de-compress the data before writing it to the replica volume.

        How the end user know how much data is backed up and what is left in terms of Size, because we defining 150 GB per user computer for backup. Also want to allow users to add/remove folders in backup . So we need to know this balance available space.

    MJ - You can set quotas so users do not exceed the allotted space allocated.

    A script to set or remove disk quotas for protected client computers in System Center Data Protection Manager

         To use MBS feature with ReFS disk format 

                Do we need to run DPM 2016 + OS 2016 in VM or Physical also work with same combination

    MJ - MBS works on both physical and virtual machines.  If using physical either use SAN storage where you can grow the LUN in case a volume becomes full, or use simple storage spaces with a column of one if you cannot grow the LUN greater than the amount of space you need for backups.   Using multiple small MBS volumes will be hard to manage and keep balanced so better to use one or two larger MBS volume up to the limit of 120TB for store pool. 

    Finally we are Using DPM for Protect Windows Clients 

         what is the best way to take backup of "*.PST" files are kept in client machine , but path we don't know,

    DPM should search the *.PST file automatically and take backup

    MJ - Standardize where the .pst files live on the client machines and backup the common location.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    • Marked as answer by kesa_kara Monday, June 3, 2019 8:06 PM
    Thursday, January 10, 2019 6:10 PM
    Moderator

All replies

  • Hello Kesavan!

    Happy new year to you too :-)

    "The feature EUR on File server is not work in DPM 2016 , checked in multiple forums"

    Could you describe this more in detail, how have you set this up and how are you trying to recover? Do you receive any errors?

    Best regards,
    Leon


    Blog: https://thesystemcenterblog.com LinkedIn:

    Saturday, January 5, 2019 5:10 PM
  • Hi Leon,

    Thank You!!!,

    Actually we need to have feature that End user need to recovery their Data without IT team help.

    As of know we attached 10 TB Storage to DPM console directly without storage pool

    Created protection group with windows 10 client .



    Regards, Kesavan K M. Please remember to mark the replies as answers if they help.

    Saturday, January 5, 2019 5:38 PM
  • You can set up end-user recovery so that users can recover their own data, the end-user recovery enables users to independently recover file data by retrieving recovery points of their files without any IT team help.

    As you mentioned in your initial post, you will need to modify the Active Directory schema to enable end-user recovery.

    When DPM extends the schema, it creates a container called MS-ShareMapConfiguration, it grants the DPM server permissions to change the container contents, and it also adds mappings between source and replica shares.

    Configuring the end-user recovery

    1. Configure Active Directory to support end-user recovery:

    1.1 In the DPM console click Options > End-user Recovery > Configure Active Directory.

    1.2 In Configure Active Directory select Use current credentials or type in a user name and password with schema and domain admin permissions. Confirm your settings.

    1.3 If you don't have an account that has schedule and domain admin permissions you can ask another user with those permissions to run <drive:>\Program Files\Microsoft Data Protection Manager\DPM\End User Recovery\DPMADSchemaExtension.exe on a computer in the same domain as the DPM server. When the app runs the user should specify the name of the computer on which you want to enable end-user recovery and the DNS domain name of the DPM server.

    Note: If the protected computer and DPM reside in different domains, the schema needs to be extended by running the DPMADSchemaExtension.exe tool on the other domain.

    2. After AD settings are complete in the End-user Recovery tab click Enable end-user recovery.


    Blog: https://thesystemcenterblog.com LinkedIn:

    • Marked as answer by kesa_kara Monday, June 3, 2019 8:05 PM
    Saturday, January 5, 2019 7:18 PM
  • Hi,

    Unfortunately file server end user recovery (EUR) is not supported when using modern backup storage (MBS) and the reason is because EUR is volume shadow copy (VSS) based and MBS uses ReFs clones for recovery points and not VSS snapshots.

    This limitation is documented here

    File server issues

    File Server end user recovery (EUR) not available when using Modern Backup Storage (MBS)

    Description: If you use Modern Backup Storage (MBS) with DPM 2016, File Server end-user recovery is not available.

    Workaround: None. File Server EUR is not supported when using MBS.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    Tuesday, January 8, 2019 11:44 PM
    Moderator
  • Hi Leon Laude,

    Thanks for your response.

    Let me do the given step and update you .

    I have few more query

        How to utilise Optimise Performance (Enable on-the -wire-compression)
        How the end user know that how much size

         To use MBS feature with ReFS disk format 

                Do we need to run DPM 2016 + OS 2016 in VM or Physical also work with same combination

                How  ReFS format will work with multiple physical disk attached to DPM server , what is the best way to use storage

                Finally we are Using DPM for Protect Windows Clients , while create protection group can we use specific file like "*.pst " in include option.

    thanks in Advance,


    Regards, Kesavan K M. Please remember to mark the replies as answers if they help.

    Wednesday, January 9, 2019 8:02 AM
  • Hi Kesavan,

    I missed out what Mike posted above, apologies for that!

    This means indeed that end-user recovery (EUR) is not available for DPM 2016 that uses Modern Backup Storage (MBS).


    Blog: https://thesystemcenterblog.com LinkedIn:

    Wednesday, January 9, 2019 8:07 AM
  • Hi Leon /Mike,

    Can you please clarify once again in the below points

          EUR will support for Client machine Files & Folders are protected by DPM 2016 using MBS feature

          EUR will not support where we protect windows File Shares protection using DPM 2016 using MBS feature.

    Ultimate goal is that End user protected data (Short time Data) should be restore by End Users only

    Long Time Data - Tape Protected restore will be done by DPM Admins

    Also we need to use MBS - which is feature of reduce storage usage to 50% & faster backup.

    thanks in Advance,


    Regards, Kesavan K M. Please remember to mark the replies as answers if they help.

    Wednesday, January 9, 2019 9:37 AM
  • Hi Mike,

    We are in the position of moving off of DPM due to lack of end user recovery on the latest versions of DPM.

    Is there anything in the pipeline to make the newer DPM versions function the same as VSS end user recovery older versions?

    A web portal users can get to?    Running ReFS volumes on the file server (we use disk quotas though)?

    Add option of not using MBS on the DPM server?

    Thank you for any insight on this.  

    Wednesday, January 9, 2019 9:02 PM
  • Hi Kesa,

    Can you please clarify once again in the below points

          Q1) EUR will support for Client machine Files & Folders are protected by DPM 2016 using MBS feature

    A1) yes, if you are protecting desktop clients using DPM client protection, then end users will be able to recover previous versions from DPM recovery points.

          Q2) EUR will not support where we protect windows File Shares protection using DPM 2016 using MBS feature.

    A2) Correct - a workaround will be to run DPM 2016 on Windows 2012 R2 that will continue to use legacy storage (vss based) and file server end user recovery will work as before.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    • Marked as answer by kesa_kara Monday, June 3, 2019 8:05 PM
    Wednesday, January 9, 2019 10:04 PM
    Moderator
  • Hi RDP-2010

    If you require file server end user recovery (EUR) then install DPM 2016 on Windows 2012 R2 and we will use legacy storage and use VSS snapshots.  EUR will then work as normal.   Additional workaround is to enable vss snapshots on the production file server(s) so EUR will get previous versions from that server instead of DPM.

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    Wednesday, January 9, 2019 10:08 PM
    Moderator
  • Hi Mike,

    Thanks for your response,

    Also can you input of the query below

        How to utilise Optimise Performance (Enable on-the -wire-compression)

        How the end user know how much data is backed up and what is left in terms of Size, because we defining 150 GB per user computer for backup. Also want to allow users to add/remove folders in backup . So we need to know this balance available space.

         To use MBS feature with ReFS disk format 

                Do we need to run DPM 2016 + OS 2016 in VM or Physical also work with same combination

    Finally we are Using DPM for Protect Windows Clients 

         what is the best way to take backup of "*.PST" files are kept in client machine , but path we don't know,

    DPM should search the *.PST file automatically and take backup

    thanks in advance,


    Regards, Kesavan K M. Please remember to mark the replies as answers if they help.

    Thursday, January 10, 2019 10:06 AM
  • Hi Kesa_kara,

    See inline comments MJ

    <snip>

    Also can you input of the query below

        How to utilise Optimise Performance (Enable on-the -wire-compression)

    MJ - This is a binary choice - it's either enabled or not enabled and if enabled DPMRA agent will compress the data before transmitting to DPM and DPMRA agent on DPM will de-compress the data before writing it to the replica volume.

        How the end user know how much data is backed up and what is left in terms of Size, because we defining 150 GB per user computer for backup. Also want to allow users to add/remove folders in backup . So we need to know this balance available space.

    MJ - You can set quotas so users do not exceed the allotted space allocated.

    A script to set or remove disk quotas for protected client computers in System Center Data Protection Manager

         To use MBS feature with ReFS disk format 

                Do we need to run DPM 2016 + OS 2016 in VM or Physical also work with same combination

    MJ - MBS works on both physical and virtual machines.  If using physical either use SAN storage where you can grow the LUN in case a volume becomes full, or use simple storage spaces with a column of one if you cannot grow the LUN greater than the amount of space you need for backups.   Using multiple small MBS volumes will be hard to manage and keep balanced so better to use one or two larger MBS volume up to the limit of 120TB for store pool. 

    Finally we are Using DPM for Protect Windows Clients 

         what is the best way to take backup of "*.PST" files are kept in client machine , but path we don't know,

    DPM should search the *.PST file automatically and take backup

    MJ - Standardize where the .pst files live on the client machines and backup the common location.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    • Marked as answer by kesa_kara Monday, June 3, 2019 8:06 PM
    Thursday, January 10, 2019 6:10 PM
    Moderator
  • Hi, thank you so much for the response above.  Very helpful.

    Could your team consider making the DPM installer allow non-MBS  installs on Server 2016/2019?   This would allow us to continue to use VSS based "previous versions" end user recovery on newer hardware/OS's.

    Thanks. 

    Monday, January 14, 2019 5:26 PM