Summary of Content for Dell PowerProtect 19.10 Data Manager Microsoft Exchange Server User Guide PDF
Page 1
PowerProtect Data Manager 19.10 Microsoft Exchange Server User Guide
March 2022Rev. 01
Page 2
Notes, cautions, and warnings
NOTE: A NOTE indicates important information that helps you make better use of your product.
CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid
the problem.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
2020 - 2022 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be trademarks of their respective owners.
Chapter 1: PowerProtect Data Manager for Microsoft Application Agent Overview......................10 PowerProtect Data Manager overview........................................................................................................................ 10 Supported Internet Protocol versions...........................................................................................................................10 Introducing the Microsoft Exchange Server application agent.............................................................................. 10 Microsoft Exchange Server application agent and File System agent coexistence........................................... 11 Prerequisites........................................................................................................................................................................ 11 Firewall and port considerations..................................................................................................................................... 11 Role-based security........................................................................................................................................................... 12 Data-in-flight encryption.................................................................................................................................................. 12 PowerProtect Data Manager new deployment overview........................................................................................ 13 PowerProtect Data Manager existing deployment overview..................................................................................13
Chapter 2: Enabling the Microsoft Exchange Server application agent.........................................15 Microsoft Exchange Server data protection and replication requirements.........................................................15 Protecting a stand-alone Microsoft Exchange Server............................................................................................. 15 Protecting Microsoft Exchange Server DAG environments....................................................................................16 Install and configure the application agent.................................................................................................................. 16
Prerequisites..................................................................................................................................................................16 Install the Microsoft application agent....................................................................................................................17 Uninstall the Microsoft application agent with the setup file........................................................................... 18 Configure the Microsoft Exchange Server operations....................................................................................... 18
Manage the Microsoft Exchange Server application agent....................................................................................25 View application agent details..................................................................................................................................26
Support for existing Microsoft application agent backups with PowerProtect Data Manager..................... 27 Supporting existing Microsoft application agent backups with PowerProtect Data Manager.................27 Using the backup discovery tool for PowerProtect Data Manager management of existing
View the storage unit password............................................................................................................................... 31 Enable an asset source.................................................................................................................................................... 32
Disable an asset source..............................................................................................................................................32 Delete an asset source.....................................................................................................................................................33 Recommission the Microsoft Exchange Server application agent........................................................................ 33 Discover a Microsoft Exchange Server application host.........................................................................................34 Add a protection policy for Microsoft Exchange Server database protection...................................................34 Cancel an application agent protection job.................................................................................................................39 Extended retention........................................................................................................................................................... 40 Edit the retention period for backup copies............................................................................................................... 42 Delete backup copies........................................................................................................................................................42
Retry a failed backup copy deletion........................................................................................................................43 Export data for deleted backup copies.................................................................................................................. 43
Contents
Contents3
Page 4
Remove backup copies from the PowerProtect Data Manager database.................................................... 44 Enable the Microsoft application agent after hostname change...........................................................................44 Manage the PowerProtect agent service................................................................................................................... 45
About the PowerProtect agent service................................................................................................................. 45 Start, stop, or obtain the status of the PowerProtect agent service............................................................ 46 Troubleshooting PowerProtect agent service installations.............................................................................. 46 Troubleshooting PowerProtect agent service operations.................................................................................46 Register the PowerProtect agent service to a different server address on Windows.............................. 47 Recovering the PowerProtect agent service from a disaster.......................................................................... 47
Manage the cloud tier operations with PowerProtect Data Manager................................................................. 48 Add a cloud tier schedule to a protection policy................................................................................................. 49 Tier the PowerProtect Data Manager backups from DD to the cloud...........................................................49 Restore the cloud tier backups to DD....................................................................................................................50
Chapter 4: Performing Self-Service Backups of Microsoft Exchange Server Databases...............52 Performing self-service backups of Microsoft Exchange Server databases......................................................52 Back up Microsoft Exchange Server with the Windows PowerShell backup cmdlet.......................................52
Syntax to perform stand-alone server backups...................................................................................................52 Syntax to perform federated backups................................................................................................................... 53 Optional parameters for the Backup-Exchange cmdlet.....................................................................................54
Listing backups and save files........................................................................................................................................56 List backups with the Get-ExchangeBackup cmdlet..........................................................................................56 List backups and save files with the msagentadmin administration command............................................58
Reading the backup object from Windows PowerShell cmdlet output................................................................59 Output formats............................................................................................................................................................ 59 EMCExchangeBackupRestore.BackupData.ExchangeBackupDatabase object attributes....................... 60 EMCExchangeBackupRestore.BackupData.ExchangeBackup object attributes.........................................60
Formatting the list of backups........................................................................................................................................61
Chapter 5: Performing Restores of Microsoft Exchange Server Backups.....................................62 Restore a Microsoft Exchange Server application host.......................................................................................... 62 Prerequisite for Microsoft Exchange Server restore operations...........................................................................62 Restoring Microsoft Exchange Server databases.....................................................................................................62
Restore a backup to the source database............................................................................................................ 63 Restore a backup to an alternate database.......................................................................................................... 63 Optional parameters for the Restore-Exchange cmdlet....................................................................................64
Performing granular-level restores............................................................................................................................... 66 Mount backups............................................................................................................................................................ 66 Browse and recover granular-level data with ItemPoint for Microsoft Exchange Server.........................67 Managing mounted backups with the Mount Service system tray icon........................................................68
Performing granular-level restores without Microsoft Exchange Server........................................................... 69 Prerequisites for granular-level restores without Microsoft Exchange Server............................................69 Commands for granular-level restores without Microsoft Exchange Server............................................... 70
Appendix A: Microsoft Exchange Server Best Practices and Troubleshooting...............................71 Troubleshooting storage units........................................................................................................................................ 71 Troubleshooting backup failures when credentials include a backslash character (\)..................................... 71 Troubleshooting PowerProtect Data Manager UI display of localhost.localdomain hostname...................... 72 Troubleshooting agent registration ..............................................................................................................................72
4Contents
Page 5
Troubleshooting PowerProtect agent service operations.......................................................................................73 Troubleshooting PowerProtect agent service installations.....................................................................................73 Troubleshooting Microsoft Exchange Server backups.............................................................................................74 Troubleshooting Microsoft Exchange Server restores............................................................................................ 75
Contents5
Page 6
Preface As part of an effort to improve product lines, periodic revisions of software and hardware are released. Therefore, all versions of the software or hardware currently in use might not support some functions that are described in this document. The product release notes provide the most up-to-date information on product features.
If a product does not function correctly or does not function as described in this document, contact Customer Support.
NOTE: This document was accurate at publication time. To ensure that you are using the latest version of this document,
go to the Customer Support website.
Product naming Data Domain (DD) is now PowerProtect DD. References to Data Domain or Data Domain systems in this documentation, in the user interface, and elsewhere in the product include PowerProtect DD systems and older Data Domain systems. In many cases the user interface has not yet been updated to reflect this change.
Language use This document might contain language that is not consistent with Dell Technologies current guidelines. Dell Technologies plans to update the document over subsequent future releases to revise the language accordingly.
This document might contain language from third-party content that is not under Dell Technologies control and is not consistent with the current guidelines for Dell Technologies own content. When such third-party content is updated by the relevant third parties, this document will be revised accordingly.
Website links The website links used in this document were valid at publication time. If you find a broken link, provide feedback on the document, and a Dell employee will update the document as necessary.
Purpose This document describes how to configure and use the Dell EMC PowerProtect Data Manager with the Microsoft application agent to back up and restore Microsoft Exchange Server. The PowerProtect Data Manager Administration and User Guide provides additional details about configuration and usage procedures.
Audience This document is intended for the host system administrator who configures and uses the PowerProtect Data Manager with the Microsoft application agent to back up and restore Microsoft Exchange Server.
Revision history The following table presents the revision history of this document.
Table 1. Revision history
RevisionDateDescription
01 March 22, 2022 Initial release of this document for PowerProtect Data Manager version 19.10.
6Preface
Page 7
Compatibility information Software compatibility information for the PowerProtect Data Manager software is provided at the E-Lab Navigator.
Related documentation The following publications are available at Customer Support and provide additional information:
Table 2. Related documentation
TitleContent
PowerProtect Data Manager Administration and User Guide Describes how to configure the software.
PowerProtect Data Manager Deployment Guide Describes how to deploy the software.
PowerProtect Data Manager Licensing Guide Describes how to license the software.
PowerProtect Data Manager Release Notes Contains information on new features, known limitations, environment, and system requirements for the software.
PowerProtect Data Manager Security Configuration Guide Contains security information.
PowerProtect Data Manager Amazon Web ServicesDeployment Guide
Describes how to deploy the software to Amazon Web Services (AWS).
PowerProtect Data Manager Azure Deployment Guide Describes how to deploy the software to Microsoft Azure.
PowerProtect Data Manager Google Cloud PlatformDeployment Guide
Describes how to deploy the software to Google Cloud Platform (GCP).
PowerProtect Data Manager Cloud Disaster RecoveryAdministration and User Guide
Describes how to deploy Cloud Disaster Recovery (Cloud DR), protect virtual machines in the AWS or Azure cloud, and run recovery operations.
PowerProtect Data Manager Cyber Recovery User Guide Describes how to install, update, patch, and uninstall the Dell EMC PowerProtect Cyber Recovery software.
PowerProtect Data Manager File System User Guide Describes how to configure and use the software with the File System agent for file-system data protection.
PowerProtect Data Manager Kubernetes User Guide Describes how to configure and use the software to back up and restore namespaces and PVCs in a Kubernetes cluster.
PowerProtect Data Manager Microsoft Exchange Server UserGuide
Describes how to configure and use the software to back up and restore the data in a Microsoft Exchange Server environment.
PowerProtect Data Manager Microsoft SQL Server UserGuide
Describes how to configure and use the software to back up and restore the data in a Microsoft SQL Server environment.
PowerProtect Data Manager Oracle RMAN User Guide Describes how to configure and use the software to back up and restore the data in an Oracle Server environment.
PowerProtect Data Manager SAP HANA User Guide Describes how to configure and use the software to back up and restore the data in an SAP HANA Server environment.
PowerProtect Data Manager Storage Direct User Guide Describes how to configure and use the software with the Storage Direct agent to protect data on VMAX storage arrays through snapshot backup technology.
PowerProtect Data Manager Network Attached Storage UserGuide
Describes how to configure and use the software to protect and recover the data on network-attached storage (NAS) shares and appliances.
PowerProtect Data Manager Virtual Machine User Guide Describes how to configure and use the software to back up and restore virtual machines and virtual-machine disks (VMDKs) in a vCenter Server environment.
Preface7
Page 8
Table 2. Related documentation (continued)
TitleContent
VMware Cloud Foundation Disaster Recovery WithPowerProtect Data Manager
Provides a detailed description of how to perform an end-to- end disaster recovery of a VMware Cloud Foundation (VCF) environment.
PowerProtect Data Manager Disaster Recovery BestPractices Guide
Provides guidance and best practices for a PowerProtect Data Manager server disaster-recovery solution.
PowerProtect Data Manager Public REST API documentation Contains the PowerProtect Data Manager APIs and includes tutorials to guide you in their use.
vRealize Automation Data Protection Extension for DataProtection Systems Installation and Administration Guide
Describes how to install, configure, and use the Dell EMC vRealize Data Protection Extension.
Typographical conventions The following type style conventions are used in this document:
Table 3. Style conventions
FormattingDescription
Bold Used for interface elements that a user specifically selects or clicks, for example, names of buttons, fields, tab names, and menu paths. Also used for the name of a dialog box, page, pane, screen area with title, table label, and window.
Italic Used for full titles of publications that are referenced in text.
Monospace Used for: System code System output, such as an error message or script Pathnames, file names, file name extensions, prompts, and syntax Commands and options
Monospace italic Used for variables.
Monospace bold Used for user input.
[ ] Square brackets enclose optional values.
| Vertical line indicates alternate selections. The vertical line means or for the alternate selections.
{ } Braces enclose content that the user must specify, such as x, y, or z.
... Ellipses indicate non-essential information that is omitted from the example.
You can use the following resources to find more information about this product, obtain support, and provide feedback.
Where to find product documentation The Customer Support website The Community Network
Where to get support The Customer Support website provides access to product licensing, documentation, advisories, downloads, and how-to and troubleshooting information. The information can enable you to resolve a product issue before you contact Customer Support.
To access a product-specific page:
1. Go to the Customer Support website.
8Preface
Page 9
2. In the search box, type a product name, and then from the list that appears, select the product.
Knowledgebase The Knowledgebase contains applicable solutions that you can search for either by solution number (for example, KB000xxxxxx) or by keyword.
To search the Knowledgebase:
1. Go to the Customer Support website. 2. On the Support tab, click Knowledge Base. 3. In the search box, type either the solution number or keywords. Optionally, you can limit the search to specific products by
typing a product name in the search box, and then selecting the product from the list that appears.
Live chat To participate in a live interactive chat with a support agent:
1. Go to the Customer Support website. 2. On the Support tab, click Contact Support. 3. On the Contact Information page, click the relevant support, and then proceed.
Service requests To obtain in-depth help from a support agent, submit a service request. To submit a service request:
1. Go to the Customer Support website. 2. On the Support tab, click Service Requests.
NOTE: To create a service request, you must have a valid support agreement. For details about either an account or
obtaining a valid support agreement, contact a sales representative. To find the details of a service request, in the
Service Request Number field, type the service request number, and then click the right arrow.
To review an open service request:
1. Go to the Customer Support website. 2. On the Support tab, click Service Requests. 3. On the Service Requests page, under Manage Your Service Requests, click View All Dell Service Requests.
Online communities For peer contacts, conversations, and content on product support and solutions, go to the Community Network. Interactively engage with customers, partners, and certified professionals online.
How to provide feedback Feedback helps to improve the accuracy, organization, and overall quality of publications. You can send feedback to DPAD.Doc.Feedback@emc.com.
Preface9
Page 10
PowerProtect Data Manager for MicrosoftApplication Agent Overview
Topics:
PowerProtect Data Manager overview Supported Internet Protocol versions Introducing the Microsoft Exchange Server application agent Microsoft Exchange Server application agent and File System agent coexistence Prerequisites Firewall and port considerations Role-based security Data-in-flight encryption PowerProtect Data Manager new deployment overview PowerProtect Data Manager existing deployment overview
PowerProtect Data Manager overview Use PowerProtect Data Manager with the application agent to perform the following operations:
Automate the configuration of the application agent backup policy and protection storage settings. Create a catalog of backups that the application agent creates. Then monitor that catalog data to determine if retention
policies are being adhered to. Manage the life cycle of backups that the application agent creates. Ensure that the backups are marked for garbage
collection, based on the rules of the retention policy.
PowerProtect Data Manager does not change the way that the application agent works. DBAs, system administrators, or backup administrators create the backups and perform the restore operations.
Supported Internet Protocol versions PowerProtect Data Manager only supports the use of IPv4 addresses.
Using an IPv6 address can result in errors or other unexpected behavior. When configuring devices to connect over the network with PowerProtect Data Manager, use only IPv4 addresses.
Introducing the Microsoft Exchange Serverapplication agent The Microsoft application agent enables an application administrator to protect and recover the Microsoft Exchange Server application data on the application host. PowerProtect Data Manager integrates with the Microsoft application agent to check and monitor backup compliance against protection policies. PowerProtect Data Manager also enables central scheduling for backups.
You can install the Microsoft application agent on a Windows Microsoft Exchange Server host by using the install wizard. Install and configure the application agent provides instructions.
NOTE:
PowerProtect Data Manager supports the coexistence of the Microsoft application agent and the File System agent on
Windows.
1
10PowerProtect Data Manager for Microsoft Application Agent Overview
Page 11
To enable the discovery and scheduling of backups with PowerProtect Data Manager, you must approve the client in the
PowerProtect Data Manager UI. Manage the Microsoft Exchange Server application agent provides more information.
The Microsoft application agent does not support the MetaCacheDatabase (MCDB) feature in Microsoft Exchange Server
2019. Ensure that you do not enable MCDB in Microsoft Exchange Server 2019.
Software compatibility information for the PowerProtect Data Manager software and application agents is provided in the E-Lab Navigator.
Microsoft Exchange Server application agent and FileSystem agent coexistence PowerProtect Data Manager only supports the coexistence of the Microsoft Exchange Server application agent with the File System agent on Windows.
When the Microsoft Exchange Server application agent and the File System agent coexist and both agents are installed and registered to the same PowerProtect Data Manager instance, the following workflows are supported:
For File Systems:
Use File-based backup (FBB) instead of Block-based backup, and provide a dummy exclusion filter in the protection policy. In the File System protection policy backup, do not include Microsoft Exchange Server.edb and log file assets.
For Microsoft Exchange Server, run a Microsoft Exchange Server full backup only.
Prerequisites Ensure that your environment meets the requirements for a new deployment or update of PowerProtect Data Manager.
Requirements: NOTE: The most up-to-date software compatibility information for the PowerProtect Data Manager software and the
application agents is provided in the E-Lab Navigator.
A list of hosts that write backups to DD systems is available. DDOS version 6.1 or later and the PowerProtect DD Management Center are required. All models of DD systems are
supported.
NOTE: PowerProtect DD Management Center is required with a DDOS version earlier than 6.1.2. With DDOS version
6.1.2 or later, you can add and use a DD system directly without PowerProtect DD Management Center.
Application agent 19.10 or earlier is required. License: A trial license is provided with the PowerProtect Data Manager software. Dell EMC Data Protection Suite
Applications, Backup, and Enterprise customers can contact Dell EMC Licensing Support for assistance with a permanent PowerProtect Data Manager license.
Large environments require multiple PowerProtect Data Manager instances. Contact Champions.eCDM@emc.com for assistance with sizing requests.
The PowerProtect Data Manager 19.10 download file requires the following: ESXi version 6.5, 6.7, or 7.0. 8 vCPUs, 18 GB RAM, one 100 GB disk, and one 500 GB disk. The latest version of the Google Chrome browser to access the PowerProtect Data Manager UI. TCP port 7000 is open between PowerProtect Data Manager and the application agent hosts.
Firewall and port considerationsTable 4. PowerProtect Data Manager port requirements
DescriptionCommunicationPort
SSH communications Bi-directional communication between the SSH client and the PowerProtect Data Manager appliance.
22 TCP/UDP
PowerProtect Data Manager for Microsoft Application Agent Overview11
Page 12
Table 4. PowerProtect Data Manager port requirements (continued)
DescriptionCommunicationPort
RestServer Bi-directional communication between the HTTP client and the PowerProtect Data Manager appliance.
8443 TCP
UI redirect Inbound only. 80 TCP
443
LDAP Outbound only. 389 TCP/UDP
636 TCP
Discovery (devices) Outbound between the PowerProtect Data Manager appliance and the device.
3009 TCPStorage Direct and DD system
5989 TCPSMI-S
PowerProtect Data Manager agent
Bi-directional communication between the database hosts and the PowerProtect Data Manager appliance.
7000 TCP
Embedded VM Direct service
Outbound. 9090 TCP
Role-based security PowerProtect Data Manager provides predefined user roles that control access to areas of the user interface and to protected operations. Some of the functionality in this guide is reserved for particular roles and may not be accessible from every user account.
By using the predefined roles, you can limit access to PowerProtect Data Manager and to backup data by applying the principle of least privilege.
The PowerProtect Data Manager Security Configuration Guide provides more information about user roles, including the associated privileges and the tasks that each role can perform.
Data-in-flight encryption PowerProtect Data Manager provides centralized management of backup and restore encryption for application agents. Backup and restore encryption is supported for both centralized and self-service operations where applicable.
You can ensure that the backup and restore content is encrypted when read on the source system, transmitted in encrypted form, and then decrypted before it is saved on the destination storage. This prevents another party from intercepting private data.
PowerProtect Data Manager only supports encryption in-flight for Microsoft SQL Server with Application Direct, Microsoft Exchange Server, Oracle RMAN, File System, SAP HANA, and network attached storage (NAS) workloads. This is a global setting that is applicable to all supported workloads. For File System agents, restore encryption is supported for image-level restore only. For Microsoft SQL Server agents, restore encryption is supported for database-level restore only.
The PowerProtect Data Manager Administration and User Guide and PowerProtect Data Manager Security ConfigurationGuide provide more information about encryption in-flight, such as how to enable the feature and important considerations to understand before enabling.
12PowerProtect Data Manager for Microsoft Application Agent Overview
Page 13
PowerProtect Data Manager new deploymentoverview Familiarize yourself with the high-level steps required to install PowerProtect Data Manager with the application agent.
Steps
1. Design how to group the backups, based on the storage requirements and retention policies.
The account team can help with backup storage design.
2. Install PowerProtect DD Management Center.
PowerProtect Data Manager uses PowerProtect DD Management Center to connect to the DD systems. The DDManagement Center Installation and Administration Guide provides instructions.
NOTE: PowerProtect DD Management Center is required with a DDOS version earlier than 6.1.2. With DDOS version
6.1.2 or later, you can add and use a DD system directly without PowerProtect DD Management Center.
3. Install PowerProtect Data Manager from the download file.
The PowerProtect Data Manager Deployment Guide provides instructions.
4. Add external DD systems or PowerProtect DD Management Center to PowerProtect Data Manager.
The PowerProtect Data Manager Administration and User Guide provides instructions on how to add protection storage.
5. Install the application agent on the appropriate hosts and connect them to PowerProtect Data Manager according to the instructions in the next "Enabling" chapter.
DBAs should perform this operation.
6. Add new or approve pending agent requests in the PowerProtect Data Manager according to the instructions in the next "Enabling" chapter.
7. After the approval of agent requests, PowerProtect Data Manager must run a discovery operation to discover the assets.
The PowerProtect Data Manager Administration and User Guide provides information.
8. Add a protection policy for groups of assets that you want to back up.
NOTE: After you create a centralized protection job, the first backup is a full backup.
9. Monitor protection compliance in the PowerProtect Data Manager dashboard.
PowerProtect Data Manager existing deploymentoverview Familiarize yourself with the high-level steps required to install PowerProtect Data Manager with the application agent in an existing environment.
Steps
1. Install PowerProtect DD Management Center.
PowerProtect Data Manager uses PowerProtect DD Management Center to connect to the DD systems. The DDManagement Center Installation and Administration Guide provides instructions.
NOTE: PowerProtect DD Management Center is required with a DDOS version earlier than 6.1.2. With DDOS version
6.1.2 or later, you can add and use a DD system directly without PowerProtect DD Management Center.
2. Install PowerProtect Data Manager from the download file.
The PowerProtect Data Manager Deployment Guide provides instructions.
3. Add external DD systems or PowerProtect DD Management Center to PowerProtect Data Manager.
The PowerProtect Data Manager Administration and User Guide provides instructions on how to add protection storage.
4. Update the application agent or uninstall and then reinstall the application agent on the hosts and connect them to PowerProtect Data Manager. Follow the instructions in the next "Enabling" chapter.
PowerProtect Data Manager for Microsoft Application Agent Overview13
Page 14
DBAs should perform this operation.
NOTE: Ensure that the configuration file config.cfg in the installation folder contains the mandatory parameter
setting BACKUP_TYPE=BlockBasedBackup.
5. Add new or approve pending agent requests in the PowerProtect Data Manager according to the instructions in the next "Enabling" chapter.
6. After the approval of agent requests, PowerProtect Data Manager must run a discovery operation to discover the assets.
The PowerProtect Data Manager Administration and User Guide provides information.
7. Add a protection policy for groups of assets that you want to back up.
NOTE: After you create a centralized protection job, the first backup is a full backup.
8. Monitor protection compliance in the PowerProtect Data Manager dashboard.
14PowerProtect Data Manager for Microsoft Application Agent Overview
Page 15
Enabling the Microsoft Exchange Serverapplication agent
Topics:
Microsoft Exchange Server data protection and replication requirements Protecting a stand-alone Microsoft Exchange Server Protecting Microsoft Exchange Server DAG environments Install and configure the application agent Manage the Microsoft Exchange Server application agent Support for existing Microsoft application agent backups with PowerProtect Data Manager
Microsoft Exchange Server data protection andreplication requirements PowerProtect Data Manager can manage and monitor data protection and replication for Microsoft Exchange Server assets through integration with the Microsoft application agent.
After installing the Microsoft application agent, review the following information for additional requirements before adding the Microsoft application agent as an asset source in PowerProtect Data Manager and discovering the Microsoft Exchange Server assets.
Verify that the environment meets the following requirements:
Ensure that all clocks on the Microsoft Exchange Server host, domain controller, and PowerProtect Data Manager are time-synced to the local NTP server to ensure discovery of the backups.
Ensure that the Microsoft Exchange Server and the PowerProtect Data Manager system network can see and resolve each other.
Ensure that port 7000 is open on the Microsoft Exchange Server host. Ensure that DNS is configured correctly on the application agent host for the Microsoft Exchange Server. Ensure that DNS is configured correctly on the PowerProtect Data Manager host and the name resolution matches.
Protecting a stand-alone Microsoft Exchange Server Learn how to configure protection of a stand-alone Microsoft Exchange Server.
Steps
1. Add storage for DD Management Console or the external DD.
Add protection storage provides information.
2. Install the Microsoft application agent on the Microsoft Exchange Server host.
Install and configure the application agent provides information.
3. Configure the required user privileges on the Microsoft Exchange Server host.
Configure users with the App Agent Exchange Admin Configuration tool provides information.
4. Add or approve the Microsoft application agent in PowerProtect Data Manager. Manage the Microsoft Exchange Server application agent provides information.
5. Discover the Microsoft Exchange Server application host.
Discover a Microsoft Exchange Server application host provides information.
6. Create a protection policy to protect the assets of the Microsoft Exchange Server host.
2
Enabling the Microsoft Exchange Server application agent15
Page 16
Add a protection policy for Microsoft Exchange Server database protection provides information.
NOTE: You cannot perform a backup to a secondary DD device. You can only restore from a secondary DD device.
Protecting Microsoft Exchange Server DAGenvironments Learn how to configure the protection of Microsoft Exchange Server database availability group (DAG) environments.
About this task
On each node in the DAG, repeat the steps to install the Microsoft application agent, and then add and discover the application host in PowerProtect Data Manager.
CAUTION: Protection of the nodes in a DAG requires that all the nodes be registered to the PowerProtect Data
Manager server.
Steps
1. Add a storage system.
Add protection storage provides information.
2. Install the Microsoft application agent on each node in the DAG.
Install and configure the application agent provides information.
3. Configure the required user privileges on each node in the DAG.
Configure users with the App Agent Exchange Admin Configuration tool provides information.
4. Add or approve the Microsoft application agent on each node in the DAG. Manage the Microsoft Exchange Server application agent provides information.
5. Discover each Microsoft Exchange Server application host.
Discover a Microsoft Exchange Server application host provides information.
6. Create a protection policy to protect the assets of the Microsoft Exchange Server hosts.
Add a protection policy for Microsoft Exchange Server database protection provides information.
NOTE: You cannot perform a backup to a secondary DD device. You can only restore from a secondary DD device.
Install and configure the application agent
Prerequisites
Ensure that an Microsoft Exchange Server environment meets the following prerequisites before you install the Microsoft application agent:
Install the following applications on the Windows host: Microsoft Exchange Server .NET Framework 4.0 or later
If you are installing ItemPoint for granular-level recovery, install .NET Framework 4.5.
In the PowerProtect Data Manager UI, select Agent Downloads from the System Settings menu, select the Microsoft application agent download package, msappagent1910_win_x64.zip, and then download the package to the Windows Microsoft Exchange Server host.
Log in to the Microsoft Exchange Server host as an Administrator to install the Microsoft application agent.
16Enabling the Microsoft Exchange Server application agent
Page 17
Install the Microsoft application agent
Learn how to install the Microsoft application agent.
About this task
NOTE: In DAG environments, you must install the Microsoft application agent on each node in the DAG.
Steps
1. In the PowerProtect Data Manager UI:
a. Select Agent Downloads from the System Settings menu. b. Select the Microsoft application agent download package, msappagent1910_win_x64.zip.
c. Download the package to the host where you want to install the Microsoft application agent.
NOTE: To verify the authenticity and integrity of the downloaded package, follow the instructions in the PowerProtect
Data Manager Security Configuration Guide.
2. Open msappagent1910_win_x64.zip with WinZip.
3. Use WinZip to extract the msappagent1910_win_x64.zip file.
4. In the extracted directory, launch emcmsappagent-19.10.0.0.exe. The installation wizard appears.
5. On the Welcome Wizard page, select I agree to the license term and agreements, and then click Next.
6. On the Change Install Location page, perform one of the following tasks: To install the Microsoft application agent in the default directory, leave the installation location as is.
The default installation directory is C:\Program Files\DPSAPPS\MSAPPAGENT.
To specify a different installation location, perform the following steps:
a. Click Change. b. In the dialog box that appears, specify the installation location. c. Click OK.
NOTE: When you choose to install the Microsoft application agent in a non-default directory, all the application
agent files are installed in the specified directory, including the lockbox files.
7. Click Next.
8. On the Configure Installation Options page, specify the following options as required to integrate the Microsoft application agent with PowerProtect Data Manager for centralized or self-service protection of Microsoft Exchange Server data:
To install the Microsoft application agent software, select Application Direct. To enable granular-level restores, select ItemPoint.
This option installs ItemPoint for Microsoft Exchange Server, which you can use to perform granular-level restores.
Specify the PowerProtect Data Manager appliance details by performing the following steps: a. Select PowerProtect Data Manager. b. In the Appliance hostname or IP address field, type the hostname or IP address of the PowerProtect Data
Manager server.
NOTE: If you specify a hostname or fully qualified domain name (FQDN) with an underscore (_) for the
PowerProtect Data Manager server, then the communication will be done by the system's IP, if provided by
the system on registration.
c. To enable the PowerProtect Data Manager communications port 7000, ensure that the Configure the WindowsFirewall option is selected under Common Core Components. This option is selected by default.
NOTE:
When the Configure the Windows Firewall option is enabled, the installation creates the Windows firewall
rule that allows inbound and outbound connections for the agent service process. Installation of the Microsoft
application agent requires port 7000 on the Microsoft Exchange Server and port 8443 on PowerProtect Data
Enabling the Microsoft Exchange Server application agent17
Page 18
Manager to be open bidirectionally. These ports enable communication between the Microsoft application agent
and PowerProtect Data Manager.
If the File System agent is already installed and firewall rules are configured, then the Configure the Windows
Firewall option is selected by default but disabled for the Microsoft application agent.
9. Click Install >.
10. On the Complete the Setup page, click Finish.
Uninstall the Microsoft application agent with the setup file
About this task
To uninstall the Microsoft application agent for Microsoft Exchange Server with the setup file, perform the following steps.
NOTE: If a granular-level restore was performed since the last reboot of the host, Microsoft application agent requests
a reboot during an uninstall operation. The Microsoft application agent installs and uses the Eldos CBFS driver for granular-
level restores. The Eldos CBFS driver is loaded during the granular-level restore operation. Microsoft requires the driver to
be unloaded before you start the uninstall operation.
Steps
1. Launch emcmsappagent-19.10.0.0.exe.
2. On the Install Modification page, select Remove, and then click Next.
3. On the Configure Uninstallation Options page, click Remove.
4. On the Complete the Setup page, click Finish.
Results
The firewall rule created during installation for PowerProtect Data Manager communications port 7000 is removed automatically during the uninstall operation.
Configure the Microsoft Exchange Server operations
You must complete the required configurations to enable the backup and restore operations in an Microsoft Exchange Server environment. The following topics provide the product configuration details.
Configure users with the App Agent Exchange Admin Configuration tool
In order to protect a stand-alone Microsoft Exchange Server or Microsoft Exchange Server database availability group (DAG) with the Microsoft application agent you must configure an account with the required privileges.
The App Agent Exchange Admin Configuration tool simplifies configuring security group memberships by ensuring that users have all the required Active Directory security group memberships and PowerShell management roles.
The App Agent Exchange Admin Configuration tool enables you to create or reset account permissions with the necessary privileges to perform backup and recovery operations on an Microsoft Exchange Server. After installing the Microsoft application agent, use the tool to create an account, or to modify, validate, and update existing account privileges.
To use the App Agent Exchange Admin Configuration tool, you must be logged in with domain administrator permissions. You can use an existing non-administrative user to run the App Agent Exchange Admin Configuration tool only if you select SkipActive Directory Authentication and configure the user on each Microsoft Exchange Server node. This option skips the Active Directory authentication and authorization operations for the user, and only sets the user as the Microsoft Exchange Server application agent user account in the registry for backup and recovery operations.
The Microsoft application agent uses the user account that is set in the registry by the App Agent Exchange Admin Configuration tool to perform backups and database or granular-level recovery.
To create a Microsoft Exchange Server application agent administrator account, the App Agent Exchange Admin Configuration tool performs the following steps:
Creates an Active Directory user account. Creates a custom Microsoft Exchange Server security group, which is EMC App Agent Exchange Admin Roles.
18Enabling the Microsoft Exchange Server application agent
Page 19
Adds the user account to the groups that are listed in the following table.
Table 5. Permissions that the Exchange Admin Configuration tool configures
User groupMicrosoft Exchange Server role
Security group membership on the application agent client computer
Local Administrator
Security group membership on Domain Controller Domain User
Exchange Security Group membership EMC App Agent Exchange Admin Roles, which include: Database Copies Databases Mailbox Import Export View-Only Configuration
Configuring an administrative user
You can perform the following actions after clicking Configure Admin User:
Create a Microsoft Exchange Server application agent Admin user, configure the permissions that are required for Microsoft Exchange Server backup and recovery (both database and GLR), and set the user account in the registry.
Update an existing Microsoft Exchange Server Admin user's permissions to those that are required for Microsoft Exchange Server backup and recovery (both database and GLR), and set the App Agent Exchange administrator account in the registry.
Set an existing user as an App Agent Exchange Admin account in the registry.
Configure an administrative Microsoft Exchange Server backup account
You can configure an administrator user with the App Agent Exchange Admin Configuration tool by creating an account, or by using an existing account.
Steps
1. In the App Agent Exchange Admin Configuration window, click Configure Admin User.
2. Under Action, select one of the following options: Create new adminCreate a Microsoft Exchange Server user account for Microsoft application agent backup and
recovery operations. Configure existing userUse an existing Microsoft Exchange Server user account for Microsoft application agent
backup and recovery operations.
3. Type the User Name and Password.
4. If you are creating an account:
a. In the Confirm Password field, retype the password. b. From the Database list, select the Microsoft Exchange Server database for which the user will perform backups and
This option creates a ContentSubmitters Active Directory security group. This option is unavailable if a ContentSubmitters group is already created in the Active Directory. This option is available only on Microsoft Exchange Server 2013 and later.
6. (Optional) If you are configuring an existing user, select Skip Active Directory Authentication.
This option skips the Active Directory authentication and authorization operations for the user, and only sets the user as the Microsoft Exchange Server application agent user account in the registry for backup and recovery operations.
NOTE: This option should be selected when you manually configure a user.
7. Click Configure. The output window shows the status of the configure operation, including any warning or error messages.
Results
The user receives the necessary permissions to backup and restore the Microsoft Exchange Server database. View the configured user in the Properties window of the Microsoft Exchange Server security group, on the Members tab.
Enabling the Microsoft Exchange Server application agent19
Page 20
Configuring an administrator in a parent and child domain environment
Consider the following when configuring a user in a parent and child domain environment.
In a parent child domain environment, when you create a user in a child domain, then the user is added to the Active Directory of the child mailbox server. However, the user inherits the security group membership from the parent domain.
The App Agent Exchange Admin Configuration Tool does not support user configurations for the following scenarios:
To create a user in the parent Active Directory from a child mailbox server. To create a user in the child Active Directory from a parent mailbox server. To create a user from a child or parent mailbox server in a different domain of the same forest.
Manually configure a user in these scenarios.
Examples of administrative user configurations
This section provides examples of configuring an administrator with the App Agent Exchange Admin Configuration tool.
Configuring or modifying an Admin user
1. In the App Agent Exchange Admin Configuration window, click Configure Admin User. 2. Complete the Configure Admin User page. 3. Click Configure. 4. Verify that all the configurations are correctly set by running the System Configuration Checker.
Manually configuring a Microsoft Exchange Server backup Admin user
1. Configure the user manually in Active Directory, and ensure that the user has the appropriate roles and rights, as described in Configure users with the App Agent Exchange Admin Configuration tool.
2. In the App Agent Exchange Admin Configuration window, click Configure Admin User. 3. On the Configure Admin User page, perform the following steps:
a. Select Configure Existing User. b. In the User Name and Password fields, type the required information. c. Select Skip Active Directory Authentication. d. Click Configure.
Configuring a non-administrative user
You can create an Microsoft Exchange Server backup user with non-administrative privileges.
In order to configure a non-admin Windows user to perform Microsoft Exchange Server protection operations, you must create a domain user and assign that user the required privileges with the App Agent Exchange Admin Configuration tool.
NOTE: You can use a non-administrative user to run the App Agent Exchange Admin Configuration tool only if you select
Skip Active Directory Authentication and configure the user with the tool on each Microsoft Exchange Server node.
Creating a non-administrative domain account for creating Microsoft Exchange Server backup users
You can create Microsoft Exchange Server backup users with a non-administrative Windows account if it is configured with the required privileges.
Prerequisites
You must be logged in to a domain controller as an administrative domain user.
Steps
1. Create a new domain user.
Once created, the user is listed in the Active Directory Users and Computers window.
2. Open the user Properties window, and in the Members Of tab, ensure that the user is added to the following user groups:
User right Description
Remote Desktop Users Allows the user to remotely connect to a domain controller.
Account Operators Allows the user to create domain user accounts.
20Enabling the Microsoft Exchange Server application agent
Page 21
The user is also a member of the Domain Users group by default.
3. Open the Group Policy Management Editor window, and under Windows Settings > Security Settings > LocalPolicies > User Rights Assignment, grant the user the following rights:
User right Description
Allow log on locally Allows the user to log on to all domain controllers in the domain.
Allow log on through Remote Desktop Services
Allows the user to log on to all domain controllers in the domain through Remote Desktop Services.
Account Operators Allows the user to create domain user accounts.
4. To apply the changes, log out of the domain controller.
Configure a non-administrative Microsoft Exchange Server backup account
You can use the App Agent Exchange Admin Configuration tool to configure a non-administrative Windows account to perform Microsoft Exchange Server backup and recovery.
Prerequisites
Log in to a domain controller with a user who can create domain accounts. Creating a non-administrative domain account for creating Microsoft Exchange Server backup users provides details on how to configure a non-administrative user with the required privileges.
Steps
1. Create a new domain user.
Once created, the user is listed in the Active Directory Users and Computers window.
2. Open the user Properties window, and in the Members Of tab, ensure that the user is added to the following user groups:
User right Description
Remote Desktop Users Allows the user to remotely connect to a domain controller.
Organization Management Allows the user administrative access to the Microsoft Exchange Server organization.
The user is also a member of the Domain Users group by default.
3. Perform the following steps on each Microsoft Exchange Server that you want to back up, including all servers that are part of a database availability group (DAG):
a. Log on to the Microsoft Exchange Server as a local Administrator. b. In Computer Management > Local Users and Groups, add the new user to the Administrators group. c. To apply the changes, log out of the Microsoft Exchange Server. d. Log on to the Microsoft Exchange Server as the new user. e. Launch the App Agent Exchange Admin Configuration tool. f. In the App Agent Exchange Admin Configuration tool window, click Configure Admin User. g. On the Configure Admin User page, perform the following actions:
i. Select Configure existing user. ii. Enter the credentials for the user created in step 1. iii. Select Skip Active Directory Authentication. iv. Click Configure.
Results
The user is set in the registry and assigned the non-administrative permissions that are required for Microsoft Exchange Server backup and recovery.
Updating the administrator password and registry
Click Update Admin Password to modify the Microsoft Exchange Server application agent administrator account password and update the registry.
Enabling the Microsoft Exchange Server application agent21
Page 22
Validating an existing administrator
Use the App Agent Exchange Admin Configuration tool to verify whether a Microsoft Exchange Server application agent administrator account is correctly configured.
About this task
NOTE: Validating an existing administrator in a parent and child domain environment can fail because the tool might try to
contact Active Directory to validate credentials from the registry.
Steps
1. In the App Agent Exchange Admin Configuration window, click Validate an existing Admin.
2. In the User Name and Password fields, type the required information.
3. Click Validate. A window that lists the Microsoft Exchange Servers in your environment opens.
4. Select each server that the user must back up or recover, and then click OK. The window closes and the validate operation starts. The output window shows the status of the operation including any warning or error messages.
Results
The output window shows the results of the validate operation.
Import the configuration file
Use the Import-ExchangeBackupConfigFile cmdlet to import the configuration parameters needed to perform a specific operation to an object.
Import the configuration parameters to an object that you can use to perform operations such as backups, listing backups, mounting backups, and restores by using the corresponding cmdlets.
NOTE: When multiple protection policies exist, the cmdlet prompts you to select from a list of storage options. Type the
number of the target storage option that includes the required DD, storage unit, and username.
Use the following syntax to import the configuration file parameters with the Import-ExchangeBackupConfigFile cmdlet:
Related manuals for Dell PowerProtect 19.10 Data Manager Microsoft Exchange Server User Guide
If you want to find out how the PowerProtect Dell works, you can view and download the Dell PowerProtect 19.10 Data Manager Microsoft Exchange Server User Guide on the Manualsnet website.
Yes, we have the Microsoft Exchange Server User Guide for Dell PowerProtect as well as other Dell manuals. All you need to do is to use our search bar and find the user manual that you are looking for.
The Microsoft Exchange Server User Guide should include all the details that are needed to use a Dell PowerProtect. Full manuals and user guide PDFs can be downloaded from Manualsnet.com.
The best way to navigate the Dell PowerProtect 19.10 Data Manager Microsoft Exchange Server User Guide is by checking the Table of Contents at the top of the page where available. This allows you to navigate a manual by jumping to the section you are looking for.
This Dell PowerProtect 19.10 Data Manager Microsoft Exchange Server User Guide consists of sections like Table of Contents, to name a few. For easier navigation, use the Table of Contents in the upper left corner.
You can download Dell PowerProtect 19.10 Data Manager Microsoft Exchange Server User Guide free of charge simply by clicking the “download” button in the upper right corner of any manuals page. This feature allows you to download any manual in a couple of seconds and is generally in PDF format. You can also save a manual for later by adding it to your saved documents in the user profile.
To be able to print Dell PowerProtect 19.10 Data Manager Microsoft Exchange Server User Guide, simply download the document to your computer. Once downloaded, open the PDF file and print the Dell PowerProtect 19.10 Data Manager Microsoft Exchange Server User Guide as you would any other document. This can usually be achieved by clicking on “File” and then “Print” from the menu bar.