Contents

Dell Microsoft App Agent 19.1 Data Protection Exchange Server User Guide PDF

1 of 104
1 of 104

Summary of Content for Dell Microsoft App Agent 19.1 Data Protection Exchange Server User Guide PDF

Dell EMC PowerProtect Microsoft Application Agent Version 19.1

Exchange Server User Guide 302-005-563

REV 01

July 2019

Copyright 2014-2019 Dell Inc. or its subsidiaries. All rights reserved.

Dell believes the information in this publication is accurate as of its publication date. The information is subject to change without notice.

THE INFORMATION IN THIS PUBLICATION IS PROVIDED AS-IS. DELL MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND

WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF

MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. USE, COPYING, AND DISTRIBUTION OF ANY DELL SOFTWARE DESCRIBED

IN THIS PUBLICATION REQUIRES AN APPLICABLE SOFTWARE LICENSE.

Dell Technologies, Dell, EMC, Dell EMC and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be the property

of their respective owners. Published in the USA.

Dell EMC Hopkinton, Massachusetts 01748-9103 1-508-435-1000 In North America 1-866-464-7381 www.DellEMC.com

2 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Federated backups in the Exchange DAG environment.............................................. 53 Selecting the source path in ItemPoint for Exchange Server......................................95 Selecting target path in ItemPoint for Exchange Server ............................................96 Mount Service system tray icon................................................................................. 96

1 2 3 4

FIGURES

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 3

Figures

4 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Revision history............................................................................................................ 9 Style conventions........................................................................................................10 Permissions that the Exchange Admin Configuration tool configures......................... 37 General configuration file parameters.........................................................................42 Primary system configuration file parameters.............................................................44 Attributes of the EMCExchangeBackupRestore.BackupData.ExchangeBackupDatabase object........... 79 Attributes of the EMCExchangeBackupRestore.BackupData.ExchangeBackup object ...................................................................................................................................80 Attributes of the EMCExchangeBackupRestore.MountData.ExchangeMount object ................................................................................................................................... 94 Debug log file names................................................................................................. 102 Return codes and description....................................................................................102

1 2 3 4 5 6

7

8

9 10

TABLES

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 5

Tables

6 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

3

5

Preface 9

Configuring the Microsoft Application Agent for Exchange Server 13 Overview of Application Direct with Exchange Server................................ 14 Application Direct backup and restore operations....................................... 14 Configuring the Data Domain System......................................................... 15

Installing and upgrading the Data Domain operating system...........15 Configuring the Data Domain system............................................. 15 Configuring the Data Domain Cloud Tier for data movement to the cloud..............................................................................................30 Distributed segment processing.....................................................32 Advanced load balancing and link failover...................................... 33 Encrypted managed file replication................................................34 Data Domain High Availability........................................................ 35 Validating the Data Domain system............................................... 35 Troubleshooting the Data Domain system..................................... 36

Configure users with the App Agent Exchange Admin Configuration tool...36 Configuring an administrative user.................................................37 Configuring a non-administrative user........................................... 40 Update Admin Password................................................................42 Validating an existing administrator............................................... 42

Create a configuration file.......................................................................... 42 Import the configuration file....................................................................... 45 Configuring the lockbox..............................................................................46

Commands to create and manage the lockbox...............................47 Create a lockbox............................................................................49

Import the EMCExchangeBackupRestore PowerShell modules to Exchange Server 2010................................................................................................50

Backing Up Exchange Server 51 Overview of Application Direct with Exchange Server backups.................. 52

Federated backups of a DAG......................................................... 52 Best practices to back up Exchange Server with Application Direct...........53 Back up Exchange Server with the Windows PowerShell backup cmdlet... 54

Syntax to perform standalone server backups...............................54 Syntax to perform federated backups........................................... 55 Optional parameters for the Backup-Exchange cmdlet..................57

Listing backups and save files.....................................................................58 List backups with the Get-ExchangeBackup cmdlet......................58 List backups and save files with the msagentadmin administration command.......................................................................................62

Move and recall save sets on a Data Domain Cloud Tier ............................ 65

Figures

Tables

Chapter 1

Chapter 2

CONTENTS

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 7

Move save sets to the Data Domain Cloud Tier............................. 65 Recall save sets from the Data Domain Cloud Tier.........................66 Optional parameters for the msagentadmin administration command.......................................................................................67

Deleting backups ....................................................................................... 69 Delete backups with the Remove-ExchangeBackup cmdlet...........69 Delete backups with the msagentadmin administration command.... 73

Deleting expired backups ...........................................................................75 Prerequisites..................................................................................75 Delete expired backups with the ddbmexptool.exe tool................. 76 Optional parameters for the ddbmexptool expiry tool.................... 77

Reading the backup object from Windows PowerShell cmdlet output........ 78 Output formats.............................................................................. 78 EMCExchangeBackupRestore.BackupData.ExchangeBackupDataba se object attributes........................................................................79 EMCExchangeBackupRestore.BackupData.ExchangeBackup object attributes.......................................................................................80

Restoring Exchange Server Backups 83 Best practices to restore Exchange Server with Application Direct............84 Prerequisite for Exchange restore operations.............................................84 Restoring Exchange Server databases....................................................... 84

Restore a backup to the source database......................................85 Restore a backup to an alternate database.................................... 87 Optional parameters for the Restore-Exchange cmdlet.................89

Performing granular-level restores..............................................................91 Mount backups...............................................................................91 Browse and recover granular-level data with ItemPoint for Microsoft Exchange Server........................................................... 95 Managing mounted backups with the Mount Service system tray icon............................................................................................... 96

Performing Exchange Server disaster recovery..........................................97 Perform Exchange Server disaster recovery .................................97 Perform disaster recovery from the Data Domain Cloud Tier.........97

Troubleshooting 101 Debug logs for troubleshooting Exchange backup and recovery issues..... 102 Error codes in the msagentadmin administration command output........... 102 App Agent Exchange Admin Configuration tool fails in a parent-child domain ................................................................................................................. 103

Chapter 3

Chapter 4

Contents

8 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Preface

As part of an effort to improve product lines, periodic revisions of software and hardware are released. Therefore, all versions of the software or hardware currently in use might not support some functions that are described in this document. The product release notes provide the most up-to-date information on product features.

If a product does not function correctly or does not function as described in this document, contact a technical support professional.

Note: This document was accurate at publication time. To ensure that you are using the latest version of this document, go to the Support website https:// www.dell.com/support.

Purpose

This document describes how to configure and use the PowerProtect Microsoft application agent to back up and restore Microsoft Exchange Server.

Audience

This document is intended for the user, who installs and configures and uses the Microsoft application agentto back up and restore Microsoft Exchange Server.

Revision history

The following table presents the revision history of this document.

Table 1 Revision history

Revision Date Description

01 July 25, 2019 Initial release of this document for the Microsoft application agent 19.1.

Related documentation

The following publications provide additional information:

l PowerProtect Microsoft Application Agent Installation Guide

l PowerProtect Microsoft Application Agent Release Notes

l PowerProtect Microsoft Application Agent SQL Server User Guide

l PowerProtect ItemPoint for Microsoft SQL Server User Guide

l PowerProtect ItemPoint for Microsoft Exchange Server User Guide

l PowerProtect Database Application Agent Installation and Administration Guide

l PowerProtect Database Application Agent Release Notes

l DDBEA section of the eLab Navigator at https://elabnavigator.emc.com/eln/ modernHomeDataProtection

l Data Domain Operating System documentation

Special notice conventions that are used in this document

The following conventions are used for special notices:

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 9

NOTICE Identifies content that warns of potential business or data loss.

Note: Contains information that is incidental, but not essential, to the topic.

Typographical conventions

The following type style conventions are used in this document:

Table 2 Style conventions

Bold Used for interface elements that a user specifically selects or clicks, for example, names of buttons, fields, tab names, and menu paths. Also used for the name of a dialog box, page, pane, screen area with title, table label, and window.

Italic Used for full titles of publications that are referenced in text.

Monospace Used for:

l System code

l System output, such as an error message or script

l Pathnames, file names, file name extensions, prompts, and syntax

l Commands and options

Monospace italic Used for variables.

Monospace bold Used for user input.

[ ] Square brackets enclose optional values.

| Vertical line indicates alternate selections. The vertical line means or for the alternate selections.

{ } Braces enclose content that the user must specify, such as x, y, or z.

... Ellipses indicate non-essential information that is omitted from the example.

You can use the following resources to find more information about this product, obtain support, and provide feedback.

Where to find product documentation

l https://www.dell.com/support

l https://community.emc.com

Where to get support

The Support website https://www.dell.com/support provides access to product licensing, documentation, advisories, downloads, and how-to and troubleshooting information. The information can enable you to resolve a product issue before you contact Support.

To access a product-specific page:

1. Go to https://www.dell.com/support.

2. In the search box, type a product name, and then from the list that appears, select the product.

Preface

10 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Knowledgebase

The Knowledgebase contains applicable solutions that you can search for either by solution number (for example, KB000xxxxxx) or by keyword.

To search the Knowledgebase:

1. Go to https://www.dell.com/support.

2. On the Support tab, click Knowledge Base.

3. In the search box, type either the solution number or keywords. Optionally, you can limit the search to specific products by typing a product name in the search box, and then selecting the product from the list that appears.

Live chat

To participate in a live interactive chat with a support agent:

1. Go to https://www.dell.com/support.

2. On the Support tab, click Contact Support.

3. On the Contact Information page, click the relevant support, and then proceed.

Service requests

To obtain in-depth help from Licensing, submit a service request. To submit a service request:

1. Go to https://www.dell.com/support.

2. On the Support tab, click Service Requests.

Note: To create a service request, you must have a valid support agreement. For details about either an account or obtaining a valid support agreement, contact a sales representative. To get the details of a service request, in the Service Request Number field, type the service request number, and then click the right arrow.

To review an open service request:

1. Go to https://www.dell.com/support.

2. On the Support tab, click Service Requests.

3. On the Service Requests page, under Manage Your Service Requests, click View All Dell Service Requests.

Online communities

For peer contacts, conversations, and content on product support and solutions, go to the Community Network https://community.emc.com. Interactively engage with customers, partners, and certified professionals online.

How to provide feedback

Feedback helps to improve the accuracy, organization, and overall quality of publications. You can send feedback to DPAD.Doc.Feedback@emc.com.

Preface

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 11

Preface

12 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

CHAPTER 1

Configuring the Microsoft Application Agent for Exchange Server

This chapter includes the following sections:

l Overview of Application Direct with Exchange Server........................................ 14 l Application Direct backup and restore operations...............................................14 l Configuring the Data Domain System................................................................. 15 l Configure users with the App Agent Exchange Admin Configuration tool.......... 36 l Create a configuration file..................................................................................42 l Import the configuration file...............................................................................45 l Configuring the lockbox..................................................................................... 46 l Import the EMCExchangeBackupRestore PowerShell modules to Exchange

Server 2010........................................................................................................50

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 13

Overview of Application Direct with Exchange Server Learn about the features and capabilities that the Microsoft application agent for Application Direct with Exchange Server supports.

Backup and recovery

l Exchange Server (also known as writer) or database-level backups.

l Block-based full and incremental backups.

l Backups over either IP or FC.

l PowerShell cmdlet interface to perform the backup and restore operations that include listing, mounting, and deletion of backups.

l Federated backups in the IP DAG and IP-less DAG (no administrative access point) environments.

l Instant access to backup copies of Exchange database and logs file on Data Domain (that is, mounting backups).

l Individual database restore.

l Item level restores (also known as granular-level restores), in which individual mailboxes, mailbox folders, or messages are restored using ItemPoint.

Data Domain Cloud Tier

l Marking block-based backups to move from a Data Domain storage unit to a Data Domain Cloud Tier.

l Manually recalling block-based backups from a Data Domain Cloud Tier to a Data Domain storage unit.

l Automatically recalling save sets from a Data Domain Cloud Tier to a Data Domain storage unit or restoring backups directly from the cloud.

Note: Direct restore operations are only available for DDOS 6.1 using Elastic Cloud Storage

l Deleting block-based backups on a Data Domain Cloud Tier.

Environmental support

l Common lockbox path, which is the same lockbox in a common location for the application agents.

l Coexistence with other backup products that you use to protect data that the Microsoft application agent does not protect. However, the Microsoft application agent cannot coexist with the database application agent.

l Supports Data Domain High Availability. Data Domain High Availability on page 35 provides information.

Application Direct backup and restore operations An Application Direct backup to a Data Domain system uses the following components:

l The Application Direct library API enables the backup software to communicate with the Data Domain system.

Configuring the Microsoft Application Agent for Exchange Server

14 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

The DDBEA section of the eLab Navigator at https://elabnavigator.emc.com/eln/ modernHomeDataProtection provides information about the supported versions of the Application Direct library and the Data Domain operating system.

l The distributed segment processing component reviews the data that is already stored on the Data Domain system, and sends only unique data for storage. The distributed segment processing component enables the backup data to be deduplicated on the database or application host to reduce the amount of data transferred over the network. Distributed segment processing on page 32 provides information.

When the Data Domain system restores data to a client, the system converts the stored data to its original non-deduplicated state before sending it over the network.

Configuring the Data Domain System Before you can use the Microsoft application agent for Exchange Server, you must configure a Data Domain system.

The Microsoft application agent uses Application Direct technology to store backups on a Data Domain system.

Installing and upgrading the Data Domain operating system The Data Domain Operating System Installation Guide provides information about how to install and upgrade the Data Domain (DD) operating system.

You require a license to implement many of the features on a Data Domain system.

Note: You require the Application Direct license to use the Microsoft application agent software. You also require a replication license for both the source and destination Data Domain systems to use the replication feature.

Contact the Data Domain sales representative for more information and to purchase licensed features.

The Data Domain Operating System Administration Guide provides information about all the licensed features, and how to display and enable Data Domain licenses. The DDBEA section of the eLab Navigator at https://elabnavigator.emc.com/eln/ modernHomeDataProtection lists the versions of Data Domain OS that are supported with the Microsoft application agent.

Configuring the Data Domain system This section describes how to configure the Data Domain system.

The Data Domain Operating System Command Reference Guide provides complete descriptions of the commands used in these sections.

Opening ports in a firewall to enable Data Domain backups

Note: This topic is relevant only if you use an Ethernet connection for backup and restore operations with the Microsoft application agent.

Ensure that the following ports are open on the firewall to enable the Application Direct backups and optimized duplication.

l TCP 2049 (NFS)

l TCP 2051 (Replication)

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 15

l TCP 111 (NFS portmapper)

l TCP xxx (select a port for NFS mountd, where the default MOUNTD port is 2052)

Enabling Data Domain Boost on a Data Domain system Every Data Domain system that supports DD Boost must have a unique name. You can use the DNS name of the Data Domain system, which is always unique.

About this task

Enable DD Boost on a Data Domain system by using one of the following methods:

l The ddboost enable command

l Data Domain System Manager on the Data Management > DD Boost page The Data Domain Operating System Administration Guide provides information.

The Data Domain Operating System Command Reference Guide provides more information about the commands used in this procedure.

Procedure

1. On the Data Domain system, log in as an administrative user.

2. Verify whether you have enabled the file system, and the file system is running, by running the following command:

filesys status

To enable the file system, run the following command:

filesys enable

3. Verify whether you have enabled the DD Boost license by running the following command:

license show

To add the DD Boost license by using the license key from the Data Domain installation package, run the following command:

license add license-key

4. Configure the DD Boost username and password for the Data Domain system.

You can configure only one user for DD Boost access on a Data Domain system at a time. The username and password are case-sensitive.

Configure the username and the password by running the following commands:

user add username password password

ddboost set user-name username

Configuring the Microsoft Application Agent for Exchange Server

16 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

5. Enable Data Domain Boost by running the following command:

ddboost enable

Changing Data Domain Boost access rights

When you enable the Data Domain Boost service for the first time on a Data Domain system, all database servers can access the service by default.

Use the ddboost access command to override this default, and restrict access to specific database servers.

For example, to remove the default access permission for all servers and add new access permissions for two specific database servers, dbserver1.datadomain.com and dbserver2.datadomain.com, run the following commands:

# ddboost disable # ddboost access del # ddboost clients add dbserver1.datadomain.com dbserver2.datadomain.com # ddboost enable

The Data Domain Operating System Command Reference Guide provides information about these commands.

These commands establish the access controls that enable only the dbserver1.datadomain.com and dbserver2.datadomain.com database servers to access the DD Boost service.

Note: Before you configure backups, add the database server host that contains the Microsoft application agent software to a host access group.

If these commands fail to establish access controls, rerun the ddboost enable command to configure the default access control that enables all hosts to access the DD Boost service. If the commands have established access controls, rerunning the ddboost enable command enables them. The ddboost enable command does not modify the access control list.

Consider the following guidelines when you change the Data Domain Boost access rights:

l Ensure that no backup operations are running to the Data Domain system. Run the ddboost disable command to prevent the backup operations.

Note: When you disable DD Boost, you disable the data access to all database servers.

l Specify only a fully qualified domain name, IP address, or resolvable DNS name for the client.

l If you have changed or deleted a username, the change in access rights does not affect any current operation. For example, deleting the current clients from the Data Domain Boost access list by running the ddboost access del command does not stop a backup that is in progress. The current operations do not fail because of the change in access rights.

l After you change the access rights, run the ddboost enable command to re- enable Data Domain Boost and permit operations that are relevant to the changed access rights.

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 17

You can run the ddboost clients show config command to verify which database servers have DD Boost access rights. If the command output is *, all database servers have the access rights. For example:

# ddboost clients show config

DD Boost access allowed from the following clients *

# ddboost clients show config

DD Boost access allowed from the following clients: aehdb2 aehdb2.datadomain.com aehdb3 aehdb3.datadomain.com aehdb4 aehdb4.datadomain.com aehdb5 aehdb5.datadomain.com

Verify the active client connections by running the following command:

# ddboost show connections

Configuring the Data Domain Boost server The following sections explain how to configure the Data Domain Boost server.

Creating storage units

Create one or more storage units on each Data Domain system that you use with the Microsoft application agent.

About this task

Ensure that you use a unique storage unit name on a single Data Domain system. However, you can use the same storage unit name on more than one Data Domain system.

Note: Storage unit names are case-sensitive.

You must provide the storage unit name when you perform the backup and restore operations with the Microsoft application agent.

You can create a storage unit by using one of the following methods:

l The ddboost storage-unit command

l Data Domain System Manager on the Data Management > DD Boost page The Data Domain Operating System Administration Guide provides information.

You must create at least one storage unit on each Data Domain system that you will use with the Microsoft application agent. You can share a storage unit on a Data Domain system with more than one client system.

Procedure

1. Run the following command on the Data Domain system:

ddboost storage-unit create

Configuring the Microsoft Application Agent for Exchange Server

18 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

2. Repeat step 1 for each Data Domain system that is enabled with DD Boost.

3. To list the status of the storage units, run the following command:

ddboost storage-unit show

Deleting storage units

About this task

To delete a specified storage unit and its contents, and any DD Boost associations, run the following command:

# ddboost storage-unit delete

The ddboost destroy command deletes all storage units from the Data Domain system and permanently removes all the data files contained in the storage units.

The Data Domain Operating System Command Reference Guide provides information about the ddboost commands.

(Optional) Configuring quotas for storage units

Provision the storage on a Data Domain system through optional quota limits for a storage unit.

About this task

You can specify quota limits at either the storage unit level or the MTree level either when you create a storage unit or later. The Data Domain Operating System Command Reference Guide provides details about the quota and ddboost commands.

l To enable quota limits on the Data Domain system, run the following command:

quota capacity enable

l To verify the quota status, run the following command:

quota capacity status

l To configure quota limits when you create a storage unit, run the following command:

ddboost storage-unit create storage_unit_name [quota-soft-limit n {MiB|GiB|TiB|PiB}] [quota-hard-limit n {MiB|GiB|TiB|PiB}]

l To configure quota limits after you create a storage unit, run the following command:

quota capacity set storage-units storage_unit_list {soft-limit n {MiB|GiB|TiB|PiB}} {hard-limit n {MiB|GiB|TiB|PiB}}

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 19

For example:

quota capacity set storage-units SU_AEHDB5 soft-limit 10 GiB hard-limit 20 GiB

SU_AEHDB5: Quota soft limit: 10240 MiB, hard limit: 20480 MiB

Alternately, you can set the quota limits at the MTree level. For example:

quota capacity set mtrees /data/col1/SU_AEHDB5 soft-limit 10 GiB hard-limit 20 GiB

/data/col1/SU_AEHDB5: Quota soft limit: 10240 MiB, hard limit: 20480 MiB

l To verify the quota limits of a storage unit, run the following command:

quota capacity show storage-units storage_unit_list

Alternately, to verify the quota limits at the MTree level, run the following command:

quota capacity show mtrees mtree_path

Configuring distributed segment processing

You must configure the distributed segment processing option on the Data Domain system. The option setting applies to all the database servers and all the software that uses DD Boost.

You can manage the distributed segment processing by using one of the following methods:

l The ddboost command.

l Data Domain System Manager on the Data Management > DD Boost page. The Data Domain Operating System Administration Guide provides information.

To configure the distributed segment processing option, run the following command:

ddboost option set distributed-segment-processing {enabled | disabled} Enabling or disabling the distributed segment processing option does not require a restart of the Data Domain file system.

A host on which you have installed the Data Domain Operating System (DD OS) release 5.2 or later enables the distributed segment processing feature by default. If you upgrade a host from DD OS release 5.0.x or 5.1.x to DD OS release 5.2 or later, the distributed segment processing option remains in its previous state, that is, either enabled or disabled.

Configuring the Microsoft Application Agent for Exchange Server

20 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Configuring advanced load balancing and link failover

The advanced load balancing feature balances the load of a data transfer and distributes the load in private network when the Data Domain system receives data from the DD Boost client.

About this task

The process provides greater throughput, especially for environments that use multiple 1 GbE connections. The following restrictions apply to the configuration of the advanced load balancing and link failover:

l You can add interfaces to groups only by using an IP address.

l You must use interfaces that have the same link speed in a group. You must not mix 1 GbE interfaces with 10 GbE interfaces in a group.

You can manage advanced load balancing and link failover by using one of the following methods:

l The ddboost ifgroup command.

l Data Domain System Manager on the Data Management > DD Boost page. The Data Domain Operating System Administration Guide provides information.

Create the interfaces by using the net command before you create the interface group.

To create an interface group on the Data Domain system by adding existing interfaces to the group and registering the Data Domain system with the Microsoft application agent, perform the following steps:

Procedure

1. Add the interfaces to the group by running the ddboost ifgroup command. For example:

ddboost ifgroup add interface 192.168.1.1

ddboost ifgroup add interface 192.168.1.2

ddboost ifgroup add interface 192.168.1.3

ddboost ifgroup add interface 192.168.1.4

You can create only one interface group and you cannot rename this group.

2. Select one interface on the Data Domain system to register with the Microsoft application agent.

3. Create a failover aggregated interface and register that interface with the Microsoft application agent.

The Data Domain Operating System Administration Guide describes how to create a virtual interface for link aggregation.

You can use an interface that is not part of the ifgroup to register with the Microsoft application agent. You must register the interface with a resolvable name by using either DNS or any other name-resolution mechanism.

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 21

4. Enable the interface group on the Data Domain system by running the following command:

ddboost ifgroup enable

5. Verify the configuration by running the following command:

ddboost ifgroup show config interfaces

6. Add or delete interfaces from the group.

Results

After setting up the interface group, you can add or delete interfaces from the group.

Configuring DD Boost over fibre channel

DD OS release 5.3 and later support fibre channel (FC) communication between the Data Domain Boost library and the Data Domain system.

About this task

Note: This topic is relevant only if you use fibre channel for backup and restore operations with the Microsoft application agent.

To use some products, you require the use of fibre channel as the data transfer mechanism between the Data Domain Boost library and Data Domain system. The Data Domain Boost over fibre channel transport (DD Boost-over-FC) enables such products to access the DD Boost technology features.

Although fibre channel is specified as a general-purpose data transport mechanism, you can use fibre channel solely as a transport for SCSI device access. Fibre channel hardware and drivers reside solely within the SCSI protocol stacks in host operating systems. The DD Boost-over-FC transport must use SCSI commands for all communication.

To request access to a Data Domain system, the Microsoft application agent specifies the DD Boost-over-FC server name that is configured for the Data Domain system. The DD Boost-over-FC transport logic within the DD Boost library performs the following tasks:

l Examines the set of generic SCSI devices that are available on the database server.

l Uses SCSI commands to identify a catalog of devices, which are pathnames of the SCSI devices that the database server operating system discovers.

l Issues SCSI commands to the identified generic SCSI devices to transfer Data Domain Boost protocol requests and responses between the library and the Data Domain system.

The DD Boost-over-IP advanced load balancing and link failover feature and its associated ifgroups require the IP transport. You can achieve load balancing and link- level high availability for the DD Boost-over-FC transport through different means.

The DD Boost-over-FC communication path applies only between the database server or Data Domain Boost library and the Data Domain system. The DD Boost-over-FC communication path does not apply to communication between two Data Domain systems.

To enable the DD Boost-over-FC service, you must install the supported fibre channel target HBAs on the host. The Data Domain Operating System Command Reference Guide

Configuring the Microsoft Application Agent for Exchange Server

22 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

and Data Domain Operating System Administration Guide provide information about using the scsitarget command for managing the SCSI target subsystem.

Procedure

1. Enable the DD Boost-over-FC service by running the following command:

# ddboost option set fc enabled

2. (Optional) Set the dfc-server-name by running the following command:

# ddboost fc dfc-server-name set server_name

Alternatively, accept the default name, which is the base hostname of the Data Domain system. A valid dfc-server-name consists of one or more of the following characters:

l lowercase letters (az)

l uppercase letters (AZ)

l digits (09)

l underscore (_)

l dash () Note: The dot or period character (.) is not valid within a dfc-server- name. You cannot use the fully qualified domain name of a Data Domain system as the dfc-server-name.

3. Create a DD Boost FC group by running the following command:

# ddboost fc group create group_name

For example:

# ddboost fc group create lab_group

4. Configure the device set of the DD Boost FC group by running the following command:

# ddboost fc group modify group_name device-set count count endpoint {all | none | endpoint_list}

For example:

# ddboost fc group modify lab_group device-set count 8 endpoint all

5. Add initiators to the DD Boost FC group by running the following command:

# ddboost fc group add group_name initiator initiator_spec

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 23

For example:

# ddboost fc group add lab_group initiator "initiator-15,initiator-16"

6. Verify that the DFC devices are visible on the client.

7. Ensure that the user, who performs the backups and restores has the required permissions to access the DFC devices.

Managing the DD Boost-over-FC path

The ifgroup-based advanced load balancing and link failover mechanism does not apply to the Fibre Channel transport.

The Data Domain system advertises one or more Processor-type SCSI devices to the database server over one or more physical paths. The database server operating system discovers the devices and makes them available to applications through a generic SCSI mechanism (SCSI Generic driver on Linux, SCSI Pass-Through Interface on Windows).

Consider the following example:

l The database server has two initiator HBA portsA and B

l Data Domain System has two FC target endpointsC and D

l You have configured Fibre Channel Fabric zoning so that both initiator HBA ports can access both FC target endpoints

l You have configured Data Domain system with a DD Boost FC group that contains the following components:

n Both FC target endpoints on the Data Domain system

n Both initiator HBA ports

n Four devices (0, 1, 2, and 3)

In this example, the media server operating system might discover up to 16 generic SCSI devices; one for each combination of initiator, target endpoint, and device number:

/dev/sg11: (A, C, 0) /dev/sg12: (A, C, 1) /dev/sg13: (A, C, 2) /dev/sg14: (A, C, 3) /dev/sg15: (A, D, 0) /dev/sg16: (A, D, 1) /dev/sg17: (A, D, 2) /dev/sg18: (A, D, 3) /dev/sg19: (B, C, 0) /dev/sg20: (B, C, 1) /dev/sg21: (B, C, 2) /dev/sg22: (B, C, 3) /dev/sg23: (B, D, 0) /dev/sg24: (B, D, 1) /dev/sg25: (B, D, 2) /dev/sg26: (B, D, 3)

When the Microsoft application agent requests that the Data Domain Boost library establish a connection to the server, the DD Boost-over-FC transport logic within the DD Boost library uses SCSI requests to build a catalog of these 16 generic SCSI devices. The SCSI devices are paths to access the DD Boost-over-FC service on the

Configuring the Microsoft Application Agent for Exchange Server

24 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Data Domain System. As part of establishing the connection to the server, the DD Boost-over-FC transport logic provides the catalog of paths to the server.

Selecting the initial path

The server maintains statistics about the DD Boost-over-FC traffic over the various target endpoints and known initiators. During the connection setup procedure, path management logic in the server evaluates these statistics and then selects the path, through which the server establishes the connection, based on the following criteria:

l Evenly distribute the connections across different paths for queue-depth constrained clients. Queue-depth constraints on page 26 provides more information.

l Select the least busy target endpoint.

l Select the least busy initiator from among the paths to the selected target endpoint.

Dynamic rebalancing

The server periodically performs dynamic rebalancing when the statistics reveal the following situations:

l For queue-depth constrained clients that Queue-depth constraints on page 26 describes, connections are distributed unequally across available paths

l Workload across target endpoints is out of balance

l Workload across initiators is out of balance

When the server finds one of these situations, the server marks one or more connections for server-directed path migration. In a future data transfer operation, the server requests that the DD Boost library use a different path from the catalog for subsequent operations.

Client path failover

The server dynamic rebalancing logic directs the client to use a different path. However, the client can use a different path if the client receives errors while using the connection's current path.

For example, assume the path catalog for a connection consists of eight paths:

/dev/sg21: (A, C, 0) /dev/sg22: (A, C, 1) /dev/sg23: (A, D, 0) /dev/sg24: (A, D, 1) /dev/sg25: (B, C, 0) /dev/sg26: (B, C, 1) /dev/sg27: (B, D, 0) /dev/sg28: (B, D, 1)

The server selects the (A, C, 0) path during an initial path selection. The DFC transport logic in the DD Boost library starts sending and receiving data for the connection by using SCSI commands to /dev/sg21.

Later, the link from the target endpoint C to the switch becomes unavailable. Any subsequent SCSI request that the DFC transport logic submits to /dev/sg21 fails with an error code that indicates that the process could not deliver the SCSI request to the device.

In this case, the DFC transport logic looks in the catalog of devices for a path with a different physical component and a different combination of initiator and target endpoints. The DFC transport logic retires the SCSI request on the selected path, and

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 25

repeats the process till the DFC transport logic finds a path that can successfully complete the SCSI request.

Queue-depth constraints

The specific SCSI device that receives a request is irrelevant to the DD Boost-over-FC solution. All SCSI devices are identical destination objects for SCSI commands. When processing a SCSI request, the server logic gives no consideration to the specific device on which the SCSI request arrived.

Certain client operating systems restrict the number of outstanding I/O requests that the operating system can simultaneously process over a SCSI device. For example, the Windows SCSI Pass-Through Interface mechanism conducts only one SCSI request at a time through each of its generic SCSI devices. When multiple connections (for example, backup jobs) try to use the same generic SCSI device, the performance of the DD Boost-over-FC solution is impacted.

The Data Domain system also imposes a limit on the number of outstanding I/O requests for each advertised SCSI device. You must advertise multiple SCSI devices on the Data Domain system to overcome performance issues in the case of heavy workloads. The term queue-depth describes the system-imposed limit on the number of simultaneous SCSI requests on a single device. Client systems, such as Windows, the queue depth of which is so low as to impact performance, are considered to be queue-depth constrained.

Enabling encrypted file replication

To enable the encrypted file replication option, run the following command:

About this task

# ddboost file-replication option set encryption enabled

Enabling encrypted file replication requires additional resources, such as CPU and memory on the Data Domain system, and does not require a restart of the Data Domain file system. The Data Domain Operating System Administration Guide provides information about encrypted file replication.

Data Domain replication Replicate data to remote Data Domain systems by using Data Domain Replicator. Replicating data enables you to perform recoveries in the case of disasters.

The Data Domain Replicator provides automated encrypted replication for disaster recovery and multi-site backup and archive consolidation. The Data Domain Replicator software asynchronously replicates only compressed, deduplicated data over a wide area network (WAN).

The Microsoft application agent does not initiate or monitor a replication. However, the product can restore from the replicated copy on a secondary Data Domain system. You must have used the product to create the backup on a primary Data Domain system. A Data Domain administrator performs the backup replication from the primary system to the secondary system.

To restore from a secondary Data Domain system, the restore operation must point to the secondary Data Domain system in the Data Domain host setting. There are no secondary Data Domain parameters.

Point to the secondary Data Domain system when configuring the restore operation, either explicitly with a Data Domain host parameter or with a configuration file.

Configuring the Microsoft Application Agent for Exchange Server

26 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Note: The replication process must not change the names of the directories and files created by the Microsoft application agent.

To enable the backup replication and subsequent restore from a secondary Data Domain system, the user ID or primary group ID of the DD Boost users on the primary and secondary systems must be identical.

You must meet specific configuration requirements to enable the restore of replicated backups from a secondary Data Domain system.

The Knowledgebase Article number 456734, titled Configuration of DDBoost Users on Source and Destination DDRs for MTree Replication, provides more details. The article is available on the Support website at https://support.emc.com.

The Configuring replication section in the Data Domain Operating System Administration Guide provides information about creating, enabling, disabling, and deleting replication pairs.

Configuring usage limits of Data Domain resources Use either the Data Domain operating system commands or the Data Domain Administration GUI to set limits on usage of the following Data Domain resources:

l Capacity: The amount of hard drive capacity that the application agent uses on a Data Domain host. Capacity limits are based on the used logical space, which depends on the amount of data that is written to a storage unit before deduplication. Logical capacity is the size of the uncompressed data. For example, when a 1 GB file is written twice to the same empty storage unit, the storage unit has a logical size of 2 GB, but a physical size of 1 GB.

l Streams: The number of Data Domain Boost streams that the application agent uses to read data from a storage unit or write data to a storage unit on a Data Domain host.

NOTICE The Microsoft application agent supports usage limits on Data Domain resources for Application Direct operations only.

Data Domain uses the term quota to collectively describe the capacity soft and hard limits of a storage unit. Stream limits are called limits.

The Data Domain operating system supports soft and hard limits on capacity and streams usage:

l When the Microsoft application agent exceeds a soft limit, the Data Domain host generates an alert. If the administrator has configured a tenant-unit notification list, the Data Domain host sends an email to each address in the list. The Microsoft application agent can continue to use more of the limited resource after a soft limit is exceeded.

l When the Microsoft application agent exceeds a hard limit, it cannot use any more of the limited resource.

The Data Domain administrator must create a separate storage unit for each application agent host or set of hosts that are limited.

For example, if there are 10 application agent hosts, the Data Domain administrator must create at least 10 storage units to limit the storage unit capacity that each application agent host uses. To use fewer storage units, the administrator must group the application agent hosts and assign the group to a single storage unit. The application agent hosts in the group share this storage unit. However, you cannot limit the consumption of a storage unit by each host. One application agent host can consume 100% of the storage unit. The resources are consumed on the first-come, first-serve basis.

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 27

To determine the stream limits of a storage unit, run the following command:

msagentadmin.exe administration --listSU --config [--debug 9] Example output of the command:

active write streams: 11 active read streams: 0 soft limit write streams: none soft limit read streams: none soft limit combined streams: 40 hard limit combined streams: 60

NOTICE Depending on the number and type of parallel operations that are performed at a given time, the stream usage varies. To determine the exact usage of the streams, monitor the number of streams that the storage units use over a period of time.

Impact of exceeding quota limits

At the start of a backup, the Microsoft application agent cannot determine how much capacity is required for the backup. The Microsoft application agent can perform a requested backup only when the destination host has sufficient space or storage capacity.

Exceeding the soft quota limit When the Microsoft application agent exceeds the capacity soft limit:

l During a backup, if the storage unit is part of a tenant-unit with a notification list, the Data Domain host sends an email to each address in the list. The list can include the Data Domain administrator and the application agent user.

l Alerts appear in the Current Alerts panel in the Data Domain Administration GUI regardless of whether the storage unit is part of a tenant-unit.

l The backup or restore operation continues without any adverse impact. The application agent does not generate any warning or error message in its log file or operational output.

Exceeding the hard quota limit When the Microsoft application agent exceeds the capacity hard limit during a backup, the Microsoft application agent cancels the backup.

Check the client backup and restore logs for error messages related to insufficient space on the storage unit. The following message shows an example:

145732:(pid 4584):Max DD Stream Count: 60 153003:(pid 4584): Unable to write to a file due to a lack of space. The error message is: [5005] [ 4584] [984] Thu Apr 14 10:14:18 2016 ddp_write() failed Offset 163577856, BytesToWrite 524288, BytesWritten 0 Err: 5005-ddcl_pwrite failed (nfs: No space left on device) 86699:(pid 4584): Unable to write data into multiple buffers for save- set ID '1460654052': Invalid argument (errno=22)

Configuring the Microsoft Application Agent for Exchange Server

28 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Configuring usage limits of Data Domain quota

To configure capacity usage limits for the application agent, the Data Domain administrator must set the hard capacity limit for the storage unit that the application agent uses for backups:

Procedure

1. Determine which application agent hosts use the storage unit.

2. Determine the amount of capacity to allow for the storage unit.

3. Create the storage unit, and then set the capacity quota by using either the GUI or the command prompt. The Data Domain documentation provides information.

4. Provide the Data Domain hostname, storage unit name, username, and password of the storage unit to the application agent users to use to perform backups.

The Data Domain administrator can also set the soft capacity quota for the storage unit, which sends alerts and notifications, but does not limit the capacity usage.

Note: When a storage unit is almost full and the capacity quota is decreased, the next backup can fail. Data Domain administrators must notify the Microsoft application agent users when they decrease a capacity quota, so that the application agent users can evaluate the potential impact on backups.

Impact of exceeding the soft stream limit

When the Microsoft application agent exceeds the stream soft stream limit:

l During a backup, if the storage unit is part of a tenant-unit with a notification list, the Data Domain host sends an email to each address in the list. The list can include the Data Domain administrator and the application agent user.

l Alerts appear in the Current Alerts panel in the Data Domain Administration GUI regardless of whether the storage unit is part of a tenant-unit.

l The backup or restore operation continues without any adverse impact. The application agent does not generate any warning or error message in its log file or operational output.

Impact of exceeding the hard stream limit

When the Microsoft application agent exceeds the hard stream limit during an operation, the Microsoft application agent cancels the operation.

Check the client backup and restore logs for error messages related to an exceeded stream limit. The following message shows an example:

153004:(pid 4144): Unable to write to a file because the streams limit was exceeded.

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 29

Configuring usage limits of Data Domain streams

A storage unit can have soft and hard limits for streams. The Data Domain administrator can set individual soft limits for read, write, and replication streams. The administrator can set a hard limit only for the total number of streams.

About this task

To configure a streams usage limit for a storage unit, the Data Domain administrator must set the hard limit for the storage unit that the application agent uses for backups:

Procedure

1. Determine which application agent hosts use the storage unit.

2. Determine the number of backup streams to allow for the storage unit.

3. Create the storage unit.

The Data Domain administrator can set the streams limit either as part of the ddboost storage-unit create command or after creating the storage unit by using the ddboost storage-unit modify command. The Data Domain documentation provides information.

Note: The Data Domain administrator cannot set a streams limit by using the Data Domain Administration GUI.

4. Provide the Data Domain hostname, storage unit name, username, and password of the storage unit to the application agent users to use to perform backups.

The Data Domain administrator can also set soft limits for the storage unit, which send alerts and notifications, but do not limit the number of streams used.

The Data Domain administrator can use the ddboost storage-unit modify command to modify the streams limits of storage units. The Data Domain documentation provides information.

Note: The Data Domain administrator must use caution when setting a streams hard limit. Setting the streams limit to a low value can impact the backup and restore performance. Decreasing a streams limit can result in a restore failure. The Data Domain administrator must notify the application agent users when decreasing a streams hard limit so that the application agent users can evaluate the potential impact on backups and restores.

Configuring the Data Domain Cloud Tier for data movement to the cloud You can configure the Microsoft application agent to use the Data Domain Cloud Tier for the movement of backup data to the cloud and the subsequent recall of the backup data from the cloud.

Data Domain (DD) Cloud Tier is a native feature of DD OS 6.0 and later for data movement from the active tier to low-cost, high-capacity object storage in the public, private, or hybrid cloud for long-term retention.

The Microsoft application agent supports the DD Cloud Tier for movement of Application Direct backup data to the cloud, which frees up space on the Data Domain system (active tier).

Configuring the Microsoft Application Agent for Exchange Server

30 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

You must set up a DD Cloud Tier policy, also known as a data movement policy, for each MTree or storage unit that the Microsoft applicant agent uses for data movement to the cloud.

After you have set up the data movement policies, you can configure and perform the following operations:

l Movement of backup data from the Data Domain system to the cloud.

l Recall of backup data from the cloud to the Data Domain system.

A backup with the Microsoft application agent consists of backup save sets, where a save set is a collection of one or more save files created during the backup session.

A save file is an operating system file or block of data, the simplest object that you can back up or restore. A backup creates one or more save files within a save set. The Microsoft application agent moves and recalls the backup data at the save set level only, moving all the save files in a save set.

Setting up the DD Cloud Tier policy for data movement to the cloud The Microsoft application agent moves the backup data from the active tier to the cloud according to the DD Cloud Tier policy. To enable the data movement to the cloud, you must set up the required policy for each MTree or storage unit.

DD Cloud Tier provides two types of policy, the application-based policy and the age- based policy. The Microsoft application agent supports only the application-based policy, which is managed by the application that creates the backup files on the Data Domain system. This policy moves the backup file content to the cloud according to the application's specifications.

NOTICE Do not apply an age-based policy to a storage unit that is used by the Microsoft application agent. An age-based policy moves all the file content (including metadata) from a storage unit to the cloud according to the file age, as when all the files older than T days are moved. Such data movement by an age- based policy can cause the failure of metadata queries for the Microsoft application agent.

The DBA must contact the Data Domain administrator to create the application-based policy, also known as a data movement profile, for the MTree or storage unit that the Microsoft application agent uses for the Application Direct backups. The Data Domain documentation provides details about the DD Cloud Tier configuration procedures.

For any DD OS version earlier than 6.1, the Data Domain administrator must use DD REST APIs to create application-managed based policies through tools such as the curl command. Starting with DD OS 6.1, the Data Domain administrator can run the Data Domain command data-movement policy to configure the application-based policy

Using the data-movement command with DD OS 6.1 or later

DD OS 6.1 or later enables you to configure the application-based policy through the following Data Domain command from the command line. This command sets the application-based policy for the specified Mtrees:

data-movement policy set app-managed {enabled | disabled} to-tier cloud cloud-unit mtrees

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 31

For example, the following command sets the application-based policy for the Mtree / data/col1/app-agent40:

data-movement policy set app-managed enabled to-tier cloud cloud- unit Cloud mtrees /data/col1/app-agent40

You can run the following command to display the policy configuration result for verification purposes:

data-movement policy show

Mtree Target(Tier/Unit Name) Policy Value ------------------------- ---------------------- ------------- ------- /data/col1/app-agent40 Cloud/Cloud app-managed enabled ------------------------- ---------------------- ------------- -------

Distributed segment processing Distributed segment processing uses the Data Domain Boost library on the database server and the Data Domain software on Data Domain Replicator. The Microsoft application agent loads the DD Boost library during backup and restore operations.

Distributed segment processing allows the Microsoft application agent to perform parts of the deduplication process, which avoids sending duplicate data to the Data Domain system that you configured as a storage server.

The distributed segment processing feature provides the following benefits:

l Increases throughput because the DD Boost library sends only unique data to the Data Domain system. The throughput improvements depend on the redundant nature of the data that you back up, the overall workload on the database server, and the database server capability. In general, greater throughput is attained with higher redundancy, greater database server workload, and greater database server capability.

l Decreases network bandwidth requirements by sending the unique data to the Data Domain system through the network.

Manage distributed segment processing by using the ddboost command options. Use distributed segment processing if the network connection is 1 Gb Ethernet. Configuring distributed segment processing on page 20 provides information on how to configure the distributed segment processing.

Distributed segment processing supports the following modes of operation for sending backup data to a Data Domain system:

l Distributed segment processing enabled

l Distributed segment processing disabled

Set the operation mode on the Data Domain system. The Microsoft application agent negotiates with the Data Domain system for the current setting of the option and accordingly performs backups.

Distributed segment processing enabled mode When you enable the distributed segment processing feature, the DD Boost library performs the following tasks:

1. Segments the data.

2. Computes IDs for the data segments.

Configuring the Microsoft Application Agent for Exchange Server

32 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

3. Checks with the Data Domain system for duplicate segments.

4. Compresses unique segments that the Data Domain system does not contain.

5. Sends the compressed data to the Data Domain system, which writes the unique data to disk.

You must configure the local compression algorithm that the DD Boost library uses on the Data Domain system. The Data Domain Operating System Administration Guide provides more information about local compression and its configuration.

Distributed segment processing disabled mode When you disable the distributed segment processing feature, the DD Boost library sends the data directly to the Data Domain system through the network. The Data Domain system then segments, deduplicates, and compresses the data before writing it to the disk.

Note: You cannot disable the distributed segment processing feature on an Extended Retention Data Domain system.

Advanced load balancing and link failover

Note: This topic is relevant only if you use an Ethernet connection for backup and restore operations with the Microsoft application agent.

The advanced load balancing and link failover feature enables the following capabilities:

l Combination of multiple Ethernet links into an interface group.

l Registration of only one interface on the Data Domain system with the Microsoft application agent.

If you configure an interface group, the Microsoft application agent negotiates with the Data Domain system on the registered interface to send the data. When the Data Domain system receives the data, the data transfer load is balanced and distributed on all the interfaces in the group.

Load balancing provides greater physical throughput to the Data Domain system as compared to configuring the interfaces into a virtual interface by using Ethernet-level aggregation.

The Data Domain system balances the connection load from multiple database servers on all the interfaces in the group. The advanced load balancing and link failover feature works at the Application Direct software layer. The feature is seamless to the underlying network connectivity, and supports both physical and virtual interfaces.

The feature balances the load of the data transfer depending on the number of outstanding connections on the interfaces. The feature balances the load of the connections only for backup and restore jobs.

The file replication connection between Data Domain systems is not part of the load balancing. You must use only one IP address for the target Data Domain system.

You must exclude one interface from the interface group (ifgroup) and reserve that interface for the file replication path between the source and target Data Domain systems.

Every installation of the Microsoft application agent must be able to connect to every interface that is a member of the interface group on the Data Domain system.

You can use the advanced load balancing and link failover feature with other network layer aggregation and failover technologies. You can put the links that connect the database servers and the switch that connects to the Data Domain system in an

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 33

aggregated failover mode. This configuration provides end-to-end network failover functionality. You can use any of the available aggregation technologies between the database server and the switch.

The advanced load balancing and link failover feature also works with other network layer functionality, such as VLAN tagging and IP aliasing, on the Data Domain systems. This functionality provides additional flexibility in segregating traffic into multiple virtual networks that run through the same physical links on the Data Domain system.

The Data Domain Operating System Administration Guide provides more information about how to configure VLAN tagging and IP aliasing on a Data Domain system.

The advanced load balancing and link failover feature provides the following benefits:

l Eliminates the need to register one storage server for each host that runs the Microsoft application agent, which potentially simplifies installation management.

l Routes subsequent incoming backup jobs to the available interfaces if one of the interfaces in the group stops responding while the Data Domain system is operational.

l Increases link utilization by balancing the load of the backup and restore jobs on multiple interfaces in the group.

l Performs a transparent failover of all current jobs to healthy operational links when an interface fails. The process does not interrupt the jobs.

Configuring advanced load balancing and link failover on page 21 provides information about how to configure advanced load balancing and link failover.

Configuration restrictions The Advanced load balancing and link failover feature has the following restrictions:

l You can add interfaces to groups only by using IP addresses.

l You must use interfaces that have the same link speed in a group.

l You need a switch to connect multiple database servers because a Data Domain system supports only one interface group.

Encrypted managed file replication By default, after the database servers authenticate the file replication jobs by using the preconfigured Application Direct username and password, they set up unencrypted file replication jobs between two Data Domain systems. If you enable the encrypted file replication feature, when the database servers set up a replication job, the session between the source and destination Data Domain systems uses Secure Sockets Layer (SSL) to encrypt all image data and metadata sent over the WAN.

Enabling this feature on the Data Domain system is transparent to the Microsoft application agent. When the Microsoft application agent requests that the Data Domain system perform a file replication job, the source and destination systems negotiate the encryption without involving the Microsoft application agent. Encrypted file replication uses the ADH-AES256-SHA cipher suite, which you cannot change, on the Data Domain operating system. If you enable this feature, you do not require to restart the file system on the Data Domain system.

If you enable encrypted file replication, you must install a replicator license on any source and destination Data Domain systems that have DD OS 5.0 or later. Encrypted file replication applies to all file replication jobs on the system.

You can use encrypted file replication with the encryption of data-at-rest feature, which is available on Data Domain operating systems with the optional encryption

Configuring the Microsoft Application Agent for Exchange Server

34 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

license. When you use encrypted file replication with the encryption of data-at-rest feature, the backup process uses SSL to encrypt the backup image data over a WAN.

Enabling encrypted file replication on page 26 provides information on how to enable encrypted file replication. The Data Domain Operating System Administration Guide provides more information about encrypted file replication.

Data Domain High Availability The Data Domain High Availability feature enables you to configure two Data Domain systems as an Active-Standby pair, which provides redundancy in the case of a system failure. The feature ensures that the active and standby systems are in sync so that if the active node fails because of either hardware or software issues, the standby node can continue the services.

The Data Domain High Availability feature provides the following additional support and capabilities:

l Supports failover of backup, restore, replication, and management services in the two-node system. Automatic failover does not require the user intervention.

l Provides a fully-redundant design with no failures when the system is configured according to the recommendations.

l Provides an Active-Standby system with no deterioration of performance in the case of a failover.

l Provides a failover within 10 minutes for most of the operations.

l Supports IP and FC connections. Both the nodes must have access to the same IP networks, FC SANs, and hosts.

The latest version of the Data Domain Operating System Administration Guide provides more information about the Data Domain High Availability feature.

Validating the Data Domain system To validate the status of the Data Domain system, run the following commands:

filesys status ddboost status ifgroup show config interfaces ddboost show connections ddboost storage-unit show compression ddboost storage-unit show

The Data Domain Operating System Command Reference Guide provides details about these commands and their options.

The command that you use to validate the communication between the database server and the Data Domain system depends on the type of the network connection that you use.

l If you have a DD Boost-over-IP system, log in to the database server, and then run the following command:

# rpcinfo -p

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 35

The command output must include the ports listed in Opening ports in a firewall to enable Data Domain backups on page 15.

l If you have a DD Boost-over-FC system, log in to the database server, and then run the relevant command to verify whether the DFC devices are visible on the client. The Data Domain Operating System Command Reference Guide provides details about the supported commands.

Troubleshooting the Data Domain system The Knowledgebase Article 334991, which is titled How to troubleshoot DataDomain DD Boost connectivity and performance provides information about how to use the ddpconnchk tool to troubleshoot specific Application Direct issues. The article is available on Online Support (https://support.emc.com).

Configure users with the App Agent Exchange Admin Configuration tool

In order to protect a standalone Exchange Server or Exchange database availability group (DAG) with the Microsoft application agent you must configure an account with the required privileges.

The App Agent Exchange Admin Configuration tool simplifies configuring security group memberships by ensuring that users have all the required Active Directory security group memberships and PowerShell management roles.

The App Agent Exchange Admin Configuration tool enables you to create or reset account permissions with the necessary privileges to perform backup and recovery operations on an Exchange Server. After installing the Microsoft application agent, use the tool to create an account, or to modify, validate, and update existing account privileges.

To use the App Agent Exchange Admin Configuration tool, you must be logged in with domain administrator permissions. You can use an existing non-administrative user to run the App Agent Exchange Admin Configuration tool only if you select Skip Active Directory Authentication and configure the user on each Exchange Server node. This option skips the Active Directory authentication and authorization operations for the user, and only sets the user as the Microsoft application agent Exchange user account in the registry for backup and recovery operations.

The Microsoft application agent uses the user account that is set in the registry by the App Agent Exchange Admin Configuration tool to perform backups and database or granular-level recovery.

To create a Microsoft application agent Exchange administrator account, the App Agent Exchange Admin Configuration tool performs the following steps:

l Creates an Active Directory user account.

l Creates a custom Exchange security group, which is EMC App Agent Exchange Admin Roles.

l Adds the user account to the groups that are listed in the following table:

Configuring the Microsoft Application Agent for Exchange Server

36 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Table 3 Permissions that the Exchange Admin Configuration tool configures

User group Exchange Server role

Security group memberships on the Microsoft application agent client host

Local Administrator

Security group memberships on Domain Controller Remote Desktop Users

Exchange Security Group memberships n Exchange Servers

n EMC App Agent Exchange Admin Roles, which include:

n Exchange Roles

n Database Copies

n Databases

n Disaster Recovery

n Mailbox Import Export

n Mail Recipient Creation

n Mail Recipients

n View-Only Configuration

Configuring an administrative user You can perform the following actions after clicking Configure Admin User:

l Create a Microsoft application agent Exchange Admin user, configure the permissions that are required for Exchange backup and recovery (both database and GLR), and set the user account in the registry.

l Update an existing Exchange Admin user's permissions to those that are required for Exchange backup and recovery (both database and GLR), and set the App Agent Exchange administrator account in the registry.

l Set an existing user as an App Agent Exchange Admin account in the registry.

Configure an administrative Exchange backup account You can configure an administrator user with the App Agent Exchange Admin Configuration tool by creating an account, or by using an existing account.

Procedure

1. In the App Agent Exchange Admin Configuration window, click Configure Admin User.

2. Under Action, select one of the following options:

l Create new adminCreate an Exchange user account for Microsoft application agent backup and recovery operations.

l Configure existing userUse an existing Exchange user account for Microsoft application agent backup and recovery operations.

3. Type the User Name and Password.

4. If you are creating an account:

a. In the Confirm Password field, retype the password.

b. From the Database list, select the Exchange database for which the user will perform backups and recoveries.

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 37

5. (Optional) Select Assign Organization Management rights.

Members of the Organization Management role group have permissions to manage Exchange objects and their properties in the Exchange organization. Members can also delegate role groups and management roles in the organization.

Note: If you select Assign Organization Management rights, the Microsoft application agent adds the user to the Organization Management group. The tool does not create a EMC App Agent Exchange Admin Roles security group.

If you do not select this option and also do not select the Skip Active Directory Authentication option, the Microsoft application agent will create an Active Directory security group called EMC App Agent Exchange Admin Roles and add the user to that group.

6. (Optional) Select Create ContentSubmitters security group.

This option creates a ContentSubmitters Active Directory security group. This option is unavailable if a ContentSubmitters group is already created in the Active Directory. This option is available only on Exchange Server 2013 and later.

7. (Optional) If you are configuring an existing user, select Skip Active Directory Authentication.

This option skips the Active Directory authentication and authorization operations for the user, and only sets the user as the Microsoft application agent Exchange user account in the registry for backup and recovery operations.

Note: This option should be selected when you manually configure a user.

8. Click Configure.

The output window shows the status of the configure operation, including any warning or error messages.

Results

The user receives the necessary permissions to backup and restore the Exchange database. View the configured user in the Properties window of the Exchange Servers security group, on the Members tab.

Configuring an administrator in a parent and child domain environment Consider the following when configuring a user in a parent and child domain environment.

In a parent child domain environment, when you create a user in a child domain, then the user is added to the Active Directory of the child mailbox server. However, the user inherits the security group membership from the parent domain.

The App Agent Exchange Admin Configuration Tool does not support user configurations for the following scenarios:

l To create a user in the parent Active Directory from a child mailbox server.

l To create a user in the child Active Directory from a parent mailbox server.

l To create a user from a child or parent mailbox server in a different domain of the same forest.

Configuring the Microsoft Application Agent for Exchange Server

38 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Manually configure a user in these scenarios.

Examples of administrative user configurations This section provides examples of configuring an administrator with the App Agent Exchange Admin Configuration tool.

Example 1 Configuring or modifying an Admin user with Organization Management rights

The user will be a member of the Organization Management group, but will not be a member of the EMC App Agent Exchange Admin Roles group.

1. In the App Agent Exchange Admin Configuration window, click Configure Admin User.

2. Complete the Configure Admin User page, and then select Assign Organization Management rights.

3. Click Configure.

4. Verify that all the configurations are correctly set, System Configuration Checker.

Example 2 Configuring or modifying an Admin user without Organization Management rights

The user will be a member of the EMC App Agent Exchange Admin Roles group, but will not be a member of the Organization Management group.

1. In the App Agent Exchange Admin Configuration window, click Configure Admin User.

2. Complete the Configure Admin User page. Ensure that Assign Organization Management rights is not selected.

3. Click Configure.

4. Verify that all the configurations are correctly set by running the System Configuration Checker.

Example 3 Manually configuring an Exchange backup Admin user

1. Configure the user manually in Active Directory, and ensure that the user has the appropriate roles and rights, as described in Configure users with the App Agent Exchange Admin Configuration tool on page 36.

2. In the App Agent Exchange Admin Configuration window, click Configure Admin User.

3. On the Configure Admin User page, perform the following steps:

a. Select Configure Existing User.

b. In the User Name and Password fields, type the required information.

c. Select Skip Active Directory Authentication.

d. Click Configure.

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 39

Configuring a non-administrative user You can create an Exchange backup user with non-administrative privileges.

In order to configure a non-admin Windows user to perform Exchange protection operations, you must create a domain user and assign that user the required privileges with the App Agent Exchange Admin Configuration tool.

Note: You can use a non-administrative user to run the App Agent Exchange Admin Configuration tool only if you select Skip Active Directory Authentication and configure the user with the tool on each Exchange Server node.

Creating a non-administrative domain account for creating Exchange backup users You can create Exchange backup users with a non-administrative Windows account if it is configured with the required privileges.

Before you begin

You must be logged in to a domain controller as an administrative domain user.

Procedure

1. Create a new domain user.

Once created, the user is listed in the Active Directory Users and Computers window.

2. Open the user Properties window, and in the Members Of tab, ensure that the user is added to the following user groups:

User right Description

Remote Desktop Users Allows the user to remotely connect to a domain controller.

Account Operators Allows the user to create domain user accounts.

The user is also a member of the Domain Users group by default.

3. Open the Group Policy Management Editor window, and under Windows Settings > Security Settings > Local Policies > User Rights Assignment, grant the user the following rights:

User right Description

Allow log on locally Allows the user to log on to all domain controllers in the domain.

Allow log on through Remote Desktop Services

Allows the user to log on to all domain controllers in the domain through Remote Desktop Services.

Account Operators Allows the user to create domain user accounts.

4. To apply the changes, log out of the domain controller.

Configuring the Microsoft Application Agent for Exchange Server

40 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Configure a non-administrative Exchange backup account You can use the App Agent Exchange Admin Configuration tool to configure a non- administrative Windows account to perform Exchange backup and recovery.

Before you begin

Log in to a domain controller with a user who can create domain accounts. Creating a non-administrative domain account for creating Exchange backup users on page 40 provides details on how to configure a non-administrative user with the required privileges.

Procedure

1. Create a new domain user.

Once created, the user is listed in the Active Directory Users and Computers window.

2. Open the user Properties window, and in the Members Of tab, ensure that the user is added to the following user groups:

User right Description

Remote Desktop Users Allows the user to remotely connect to a domain controller.

Organization Management Allows the user administrative access to the Exchange organization.

The user is also a member of the Domain Users group by default.

3. Perform the following steps on each Exchange Server that you want to back up, including all servers that are part of a database availability group (DAG):

a. Log on to the Exchange Server as a local Administrator.

b. In Computer Management > Local Users and Groups, add the new user to the Administrators group.

c. To apply the changes, log out of the Exchange Server.

d. Log on to the Exchange Server as the new user.

e. Launch the App Agent Exchange Admin Configuration tool.

f. In the App Agent Exchange Admin Configuration tool window, click Configure Admin User.

g. On the Configure Admin User page, perform the following actions:

a. Select Configure existing user.

b. Enter the credentials for the user created in step 1.

c. Select Skip Active Directory Authentication. Note: Do not select Assign Organization Management rights, otherwise the configuration will fail.

d. Click Configure.

Results

The user is set in the registry and assigned the non-administrative permissions that are required for Exchange backup and recovery.

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 41

Update Admin Password Click Update Admin Password to modify the Microsoft application agent Exchange administrator account password and update the registry.

Validating an existing administrator Use the App Agent Exchange Admin Configuration tool to verify whether a Microsoft application agent Exchange administrator account is correctly configured.

About this task

Note: Validating an existing administrator in a parent and child domain environment can fail because the tool might try to contact Active Directory to validate credentials from the registry.

Procedure

1. In the App Agent Exchange Admin Configuration window, click Validate an existing Admin.

2. In the User Name and Password fields, type the required information.

3. Click Validate.

A window that lists the Exchange servers in your environment opens.

4. Select each server that the user must back up or recover, and then click OK.

The window closes and the validate operation starts. The output window shows the status of the operation including any warning or error messages.

Results

The output window shows the results of the validate operation.

Create a configuration file Create a configuration file with any of the following parameters, as required.

General

The following table describes the parameters for the General configuration file category.

Table 4 General configuration file parameters

Parameter Description

CLIENT= Mandatory.

Specifies the FQDN of Exchange Server, to which you want to back up or restore the databases. In the case of a DAG (IP and IP-less) configuration, specify the FQDN of the DAG instance.

BACKUP_TYPE=BlockBasedBackup Mandatory.

Specifies that the backup will be a block based backup.

LOCKBOX_PATH= Optional.

Configuring the Microsoft Application Agent for Exchange Server

42 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Table 4 General configuration file parameters (continued)

Parameter Description

Specifies the complete directory pathname of the lockbox on the database or application host. For example, C:\Program Files\DPSAPPS\common\lockbox.

DEBUG_LEVEL= Optional.

Specifies whether the software writes debug messages to the debug log file. The default value is 0, in which no debug messages are generated. The highest level is 9, in which the most detailed debug messages are generated.

DELETE_DEBUG_LOGS_DAYS= Optional.

Deletes debug log files that are older than the specified number of days. The valid range is between 1 and 30. The default value is 30 days. Regularly deleting debug logs prevents the log folder on the installation drive from becoming too large. When this parameter is used in the backup operation, it will delete backup logs and when it is used in a restore operation, it will delete restore logs.

Note: This parameter only deletes debug logs named in the default format and located in the logs folder at \MSAPPAGENT\logs.

-Retention + {d | m | w | y} Optional.

Specifies the period in which to retain a backup. After the period passes, the backup expires.

The default retention period is 30 days. The maximum retention date is 2/7/2106.

The -Retention parameter accepts a + followed by an

integer followed by one of the following time indicators:

l d specifies a retention period in days.

l w specifies a retention period in weeks.

l m specifies a retention period in months.

l y specifies a retention period in years.

For example, -Retention +20d specifies to retain the

backup for 20 days.

Primary system

The following table describes the parameters for the Primary system configuration file category.

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 43

Table 5 Primary system configuration file parameters

Parameter Description

DDBOOST_USER= Mandatory.

Specifies the username of the DD Boost user.

You must register the hostname and the DD Boost username in the lockbox to enable Microsoft application agent to retrieve the password for the registered user.

DEVICE_HOST= Mandatory.

Specifies the name of the Data Domain server that contains the storage unit, to which you want to back up and restore the databases.

You must register the hostname and the DD Boost username in the lockbox to enable Microsoft application agent to retrieve the password for the registered user.

DEVICE_PATH= Mandatory.

Specifies the name and the path of the storage unit, to which you want to back up and restore the databases.

DDBOOST_FC={TRUE | FALSE} Optional.

Specifies whether a backup or restore on the primary Data Domain system uses a Fibre Channel (FC) or IP network connection. The default value is FALSE. Specify TRUE to use an FC network connection during backup and restore.

Note: If this parameter is set to TRUE, the primary Data Domain system must be configured to support an FC connection.

DEVICE_FC_SERVICE= Mandatory when the DDBOOST_FC parameter is set to TRUE

Specifies the name of the FC service configured on the primary Data Domain system to be used for a backup or restore.

DDVDISK_USER= Optional.

Specifies the Data Domain vdisk user. If you do not specify this parameter, the value defaults to the DDBOOST_USER.

BACKUP_PREFERENCE={preferred | passive | active} Optional.

This parameter applies only to federated backups of an Exchange DAG.

Specifies the preference of the backup method. The following values are valid:

l preferred (default): Backs up the passive copy or

replica of each database in the DAG. The Exchange Server, on which each passive database will be backed up

Configuring the Microsoft Application Agent for Exchange Server

44 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Table 5 Primary system configuration file parameters (continued)

Parameter Description

will be determined by the server order list. If there are no passive databases (either there is no replica or if all the current replicas are suspended or dismounted), then the active databases will be backed up.

l passive: Backs up only passive databases in the DAG.

l active: Backs up only active databases in the DAG.

SERVER_ORDER_LIST= Optional.

This parameter applies only to federated backups of an Exchange DAG.

Specifies the order in which the databases on each Exchange Server in the DAG are backed up. If you do not specify a list, the coordinating node distributes the backups according to an unordered list of the Exchange Servers in the DAG.

INCLUDE_STANDALONE_DATABASES={TRUE | FALSE} Optional.

This parameter applies only to federated backups of an Exchange DAG.

Specifies whether to include public folders and stand-alone databases. The default value is TRUE. Specifying FALSE excludes public folders and stand-alone databases.

Example configuration file contents

For example, create the C:\config.cfg file with the following contents:

DDBOOST_USER=DD163_user DEVICE_HOST=ledmd035.lss.example.com DEVICE_PATH=/SU_DD163 LOCKBOX_PATH="C:\Program Files\DPSAPPS\common\lockbox" DDVDISK_USER=DD163_user CLIENT=mw2k8x64exch2.appagentdev.com

Import the configuration file Use the Import-ExchangeBackupConfigFile cmdlet to import the configuration file to an object.

Import the configuration file to an object that you can use to perform operations such as backups, listing backups, mounting backups, and restores by using corresponding cmdlets.

Use the following syntax to import a configuration file with the Import- ExchangeBackupConfigFile cmdlet:

= Import-ExchangeBackupConfigFile [-file] [ ]

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 45

where:

Specifies the object that contains the configuration file information to use with other cmdlets.

- file

Specifies the configuration file.

Specifies any combination of the following common PowerShell parameters:

l Verbose l Debug l ErrorAction l ErrorVariable l WarningAction l WarningVariable l OutBuffer l PipelineVariable l OutVariable The following Microsoft article provides information about the common PowerShell parameters:

http://go.microsoft.com/fwlink/?LinkID=113216

Example 4 Example configuration file import command

$serverinfo = Import-ExchangeBackupConfigFile E:\configuration.txt

Configuring the lockbox The lockbox is an encrypted file that the Microsoft application agent uses to store confidential data, such as login credentials, and protect that data from unauthorized access.

Registering a Data Domain or PowerProtect X400 server to a new lockbox creates the PersistedSettings.xml file in the lockbox folder. Registering a server to or removing a server from the lockbox updates the PersistedSettings.xml file.

The PersistedSettings.xml file contains the Data Domain or PowerProtect X400 server information, such as the server name, communication protocol, FC service name, username of the DD Boost user, and storage unit.

Note: For a PowerProtect X400 system, the PowerProtect Data Manager creates a storage unit and automatically configures the lockbox on the application host. For each PowerProtect protection policy, a source lockbox and replication target lockbox are created and configured on the application host.

For a Data Domain system, you can configure one of the following lockbox types according to the environmental requirements.

Configuring the Microsoft Application Agent for Exchange Server

46 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Single lockbox

In a stand-alone environment, create a single lockbox on the host.

Shared lockbox

In an environment with multiple instances, you can configure a single lockbox in a shared location and grant each remote host individual access to the lockbox.

Note: Do not use a single shared lockbox to perform remote backup operations in a cluster environment. The backup will fail. Use multiple lockboxes in a cluster environment.

Multiple lockboxes

In an environment with multiple instances, you can configure a lockbox on each instance in the environment.

Commands to create and manage the lockbox Lockbox operations are administered using the msagentadmin administration command.

Note: The user running the lockbox operations must be an administrator.

When the PowerProtect Data Manager centrally manages the SQL host, the PowerProtect Data Manager automatically performs the lockbox configuration when the PowerProtect protection policy is created and configured.

The following sections describe the commands for creating, registering, and managing the lockbox.

Create a lockbox

To create a lockbox, run the following command:

msagentadmin administration --createLB [--lockbox ] [--debug 9]

If you don't specify a lockbox directory, the default directory is used, which is C:\Program Files\DPSAPPS\common\lockbox.

Register credentials to the lockbox

To register credentials to the lockbox, run the following command:

msagentadmin administration --registerLB --config [--confirm] [--debug 9]

Unregister credentials from the lockbox

To delete credentials from the configuration file and lockbox, run the following command:

msagentadmin administration --deleteLB --config [--confirm] [--debug 9]

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 47

Grant a remote host access to the lockbox

To grant a remote host access to the lockbox, run the following command

msagentadmin administration --grantLB [--lockbox ] [-a "LOCKBOX_REMOTE_HOST= "] [- a "VIRTUAL_HOST=yes"] [--debug 9]

Revoke access that a remote host has to the lockbox

To revoke access that a remote host has to the lockbox, run the following command

msagentadmin administration --revokeLB [--lockbox ] [-a "LOCKBOX_REMOTE_HOST= "] [--debug 9]

Reset the lockbox

To reset the lockbox, run the following command:

msagentadmin administration --updateLB [--lockbox ] [--debug 9]

Create a custom passphrase

To create a custom passphrase for the lockbox, run the following command:

msagentadmin administration --updateLB -a SET_LOCKBOX_PASSPHRASE=TRUE -a LOCKBOX_PATH=

After typing this command, the following prompts appear. Use the prompts to set the passphrase.

Enter a passphrase (refer to the administration guide for passphrase complexity requirements): Confirm the passphrase:

The following output appears:

The passphrase for the lockbox ' ' in the directory ' ' has been updated.

Note: The custom passphrase must meet the following complexity requirements:

l Minimum length of nine characters.

l Minimum of one uppercase character.

l Minimum of one lowercase character.

l Minimum of one special character.

l Minimum of one digit.

Use the custom passphrase to reset the lockbox

The passphrase may be used to restore access to a host that cannot access the lockbox.

Configuring the Microsoft Application Agent for Exchange Server

48 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

To use the custom passphrase to reset the lockbox, run the following command:

msagentadmin administration --updateLB -a USE_LOCKBOX_PASSPHRASE=TRUE -a LOCKBOX_PATH=

After typing this command, the following prompt appears. Use the prompt to set the passphrase.

Enter a previously set passphrase:

The following output appears:

The lockbox ' ' in the directory ' ' has been reset.

Create a custom security option for a lower system stable values (SSV) threshold

To create a custom security option for lower security in the system stable values (SSV) threshold for the lockbox, run the following command:

msagentadmin administration --updateLB -a SET_LOCKBOX_SECURITY="custom" -a LOCKBOX_PATH=

This command is useful when the lockbox becomes frequently inaccessible after regular system upgrades. However, it is recommended that you use the passphrase to reset the lockbox instead of customizing the security level.

Import the lockbox

To import the lockbox, run the following command:

msagentadmin administration --updateLB -a LOCKBOX_IMPORT=yes -a LOCKBOX_PATH=

This command is useful when the lockbox is created in a non-default directory and the lockbox needs to be upgraded (imported) to the latest version.

Create a lockbox Use the following steps to create a lockbox and add credentials to it.

Procedure

1. Create the lockbox using the following command:

msagentadmin administration --createLB

For example, to create a lockbox in the folder C:\Lockboxes type the following command:

msagentadmin administration --createLB --lockbox C:\Lockboxes

If you don't specify a folder, the lockbox is created in the default directory, which is C:\Program Files\DPSAPPS\common\lockbox.

Configuring the Microsoft Application Agent for Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 49

NOTICE When the Microsoft application agent is integrated with PowerProtect, the lockbox must be located in the default directory.

2. Create a configuration file that contains the appropriate credentials.

For example, type the following command to edit config.cfg:

notepad c:\Lockboxes\config.cfg

Then add the appropriate configurations to the configuration file. For example, to register a Data Domain server, add the following credentials:

LOCKBOX_PATH=C:\Lockboxes DDBOOST_USER=ddvdisk DEVICE_HOST=ledmd034.lss.emc.com DEVICE_PATH=/ddbdatest/mattp/pp

3. Use the configuration file to register the credentials with the lockbox by typing the following command:

msagentadmin administration --registerLB --config " "

For example:

msagentadmin.exe administration --registerLB --config "C:\lockbox-config-details.cfg"

You are prompted for any required passwords for the configured user accounts.

Import the EMCExchangeBackupRestore PowerShell modules to Exchange Server 2010

For the backup and restore cmdlets to function on Exchange Server 2010, you must manually import the EMCExchangeBackupRestore modules.

Run the following commands in the Exchange Management Shell on Exchange Server 2010:

Import-Module EMCExchangeBackupRestore.psm1

Import-Module EMCExchangeBackupRestore.dll

Update-FormatData -AppendPath "C:\Program Files\DPSAPPS\MSAPPAGENT \PowerShell\Modules\EMCExchangeBackupRestore \EMCExchangeBackupRestore.Format.ps1xml"

Note: You are only required to import the EMCExchangeBackupRestore modules with Exchange Server version 2010.

Configuring the Microsoft Application Agent for Exchange Server

50 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

CHAPTER 2

Backing Up Exchange Server

This chapter includes the following sections:

l Overview of Application Direct with Exchange Server backups..........................52 l Best practices to back up Exchange Server with Application Direct...................53 l Back up Exchange Server with the Windows PowerShell backup cmdlet...........54 l Listing backups and save files............................................................................ 58 l Move and recall save sets on a Data Domain Cloud Tier ....................................65 l Deleting backups ...............................................................................................69 l Deleting expired backups .................................................................................. 75 l Reading the backup object from Windows PowerShell cmdlet output................78

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 51

Overview of Application Direct with Exchange Server backups

Application Direct with Exchange Server backups are VSS-based backups that use block-based backup technology to move data to a protection storage.

The Microsoft application agent uses the block-based backup technology to back up Exchange Server databases in the stand-alone and DAG environments. The block based technology tracks changed blocks of the Exchange database and log files. A full backup backs up each selected Exchange database and log files. An incremental backup backs up only the changed blocks.

Block-based backups are fast backups with reduced backup times because the backup process respectively backs up only the occupied disk blocks and changed disk blocks of Exchange database and log files.

Block-based backups provide instant access to the backups. These backups enable you to mount the backups by using the same file systems that you used to back up the data.

Block-based backups use the following technologies:

l The Volume Shadow Copy Service (VSS) snapshot capability on Windows to create consistent copies of the source volume for backups.

l The Virtual Hard Disk (VHDx), which is sparse, to back up data to the target device.

Federated backups of a DAG A database availability group (DAG) environment can contain multiple passive copies of databases that are distributed across multiple Exchange Servers.

In a DAG environment, you can perform the federated backups by using the DAG name or the DAG node name as the client name.

When you back up either active or passive database copies in the DAG environment, all DAGs use the federated backup method to best handle fail-over scenarios. The federated backup method provides the following benefits:

l Allows backups of passive database copies to continue even when the passive database copies move among Exchange servers.

l Enables you to back up all DAG members, including stand-alone and public folder mailbox databases, by using a single save set. You do not require to perform a separate backup of each node.

The Microsoft application agent supports federated backups of Exchange Server IP DAG (with an administrative access point) and IP-less DAG (with no administrative access point).

The following figure illustrates federated backups in the Exchange DAG environment.

Backing Up Exchange Server

52 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Figure 1 Federated backups in the Exchange DAG environment

Best practices to back up Exchange Server with Application Direct

The following are the best practices to back up Exchange Server with Application Direct.

Set backup retention preferences

By default, the Microsoft application agent for Exchange server retains a backup for 30 days. After 30 days, the backup expires. You can set a custom retention period in the configuration file or in the backup command. It is recommended that you regularly clean up expired backups using the ddbmexptool.exe tool.

Use supported characters

The Microsoft application supports locale-specific date and time processing and setting the date and time display language can be set to non-English characters. However, database and path names must be written in ASCII characters only.

Configure Data Domain quota limits

The Microsoft application agent does not have a parameter to control the total size that it consumes. The quota limits can only be set on the Data Domain system on a per-MTree (storage unit) basis.

An MTree's quota limits are calculated based on the logical size, which is the size before compression and de-duplication of the data.

The quota limits impact only backup operations.

Configuring usage limits of Data Domain resources on page 27 provides more information about quota limit, impact of exceeding the limits, and configuring the usage limits.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 53

Configure usage limits for Data Domain streams

Configure a sufficient number of Data Domain streams for better performance of backups and restores. The streams control backup and restore parallelism for each database.

Configuring usage limits of Data Domain streams on page 30 provides more information about streams limit, impact of exceeding the limits, and configuring the usage limits.

Back up Exchange Server with the Windows PowerShell backup cmdlet

The Microsoft application agent supports full and incremental block-based backups.

Use the Backup-Exchange PowerShell cmdlet to back up Exchange Server to a Data Domain server.

To perform specific backup-related and restore-related operations, the Microsoft application agent also supports the ddbmadmin.exe command besides the msagentadmin.exe command. However, the ddbmadmin.exe command is deprecated.

All cmdlets support the standard common PowerShell parameters. https:// technet.microsoft.com/en-us/library/dd901844(v=vs.85).aspx provides the list of common parameters and their description.

Note: In the syntaxes, the parameters that are enclosed in square brackets, that is, [ and ] are optional.

Syntax to perform standalone server backups Use the following syntax to back up a standalone Exchange Server:

[ ] | Backup-Exchange - BackupViaBlockBasedBackup -ClientName - DataDomainHost -DataDomainHostPath Data_Domain_Storage_Path> -DataDomainUser [ ]

where:

(Optional) Specifies the configuration file object that was imported using the Import-ExchangeBackupConfigFile cmdlet.

-ClientName

Specifies the FQDN of the Exchange Server to use for indexing the backup. You can use the -C or -CN alias for the -ClientName parameter.

-BackupViaBlockBasedBackup

Specifies that the backup is a block-based backup. You can use the -BBB alias for the -BackupViaBlockBasedBackup parameter.

-DataDomainHost

Specifies the Data Domain server name.

Backing Up Exchange Server

54 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

You can use the -S, -SH, -DDHost or -StorageHost alias for the - DataDomainHost parameter.

-DataDomainHostPath

Specifies the full path to the Data Domain storage unit for the backup. The Data Domain user must have appropriate access rights to this path. You can use the -Path, -DevicePath, -StoragePath, -StorageHostPath, or -DataDomainPath alias for the -DataDomainHostPath parameter.

-DataDomainUser

Specifies the Data Domain username. Full credentials are retrieved from the lockbox to authenticate with the host. - DDUser, -StorageUser You can use the -DDUser or -StorageUser alias for the -DataDomainUser parameter.

Example 5 Example standalone backup command to the Data Domain host ledmd035.lss.example.com

Backup-Exchange -ClientName ledmf175.msapp.com - BackupViaBlockBasedBackup -DataDomainHost ledmd035.lss.example.com - DataDomainPath /SU_DD163 -DataDomainUser DD163_user

Example 6 Example standalone backup command with a configuration file

$serverinfo | Backup-Exchange

Syntax to perform federated backups Use the following syntax to perform a federated backup of a database availability group:

[ ] | Backup-Exchange - BackupViaBlockBasedBackup -ClientName -DataDomainHost -DataDomainHostPath / -DataDomainUser {[-BackupActive] | [-BackupPassive] | [-BackupPreferred]} [- IncludeStandaloneDatabases] [-ServerOrderList ] [ ]

where:

(Optional) Specifies the configuration file object that was imported using the Import-ExchangeBackupConfigFile cmdlet.

-ClientName

Specifies the FQDN of the database availability group instance to use for indexing the backup. You can use the -C or -CN alias for the -ClientName parameter.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 55

-BackupViaBlockBasedBackup

Specifies that the backup is a block-based backup. You can use the -BBB alias for the -BackupViaBlockBasedBackup parameter.

-DataDomainHost

Specifies the Data Domain server name. You can use the -S, -SH, -DDHost or -StorageHost alias for the - DataDomainHost parameter.

-DataDomainHostPath

Specifies the full path to the Data Domain storage unit for the backup. The Data Domain user must have appropriate access rights to this path. You can use the -Path, -DevicePath, -StoragePath, -StorageHostPath, or -DataDomainPath alias for the -DataDomainHostPath parameter.

-DataDomainUser

Specifies the Data Domain username. Full credentials are retrieved from the lockbox to authenticate with the host. - DDUser, -StorageUser You can use the -DDUser or -StorageUser alias for the -DataDomainUser parameter.

{-BackupActive | -BackupPassive | -BackupPreferred}

(Optional) Specifies that the database backup preference is either active (- BackupActive), passive (-BackupPassive), or preferred (- BackupPreferred).

-IncludeStandaloneDatabases

(Optional) Specifies to include stand-alone databases and public folder databases in back up.

-ServerOrderList

(Optional) Specifies the preferred Exchange Server order list if you have to select multiple copies. Separate multiple servers with commas.

Example 7 Example federated backup command

The following command backs up the database TestDB and the Mailbox Database 1250665181 in DAG1 to the Data Domain host ledmd035.lss.example.com:

Backup-Exchange -Identity TestDB,'Mailbox Database 1250665181' - ClientName DAG1.msapp.com -BackupViaBlockBasedBackup - DataDomainHost ledmd035.lss.example.com -DataDomainPath /SU_DD163 - DataDomainUser DD163_user -Preferred -ServerOrderList node1, node2 - IncludeStandaloneDatabases

Example 8 Example federated backup command with a configuration file

The following command backs up the Exchange Server by using a configuration file object:

Backing Up Exchange Server

56 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Example 8 Example federated backup command with a configuration file (continued)

$serverinfo | Backup-Exchange -Identity TestDB,'Mailbox Database 1250665181'

Optional parameters for the Backup-Exchange cmdlet The following list describes the optional parameters for the Backup-Exchange cmdlet:

-Incremental

Specifies that the backup level is a block-based incremental backup. If you don't specify this parameter, the backup is taken at level full.

-Retention + { d | m | w | y}

Specifies the period in which to retain a backup. After the period passes, the backup expires. The default retention period is 30 days. The maximum retention date is 2/7/2106. The -Retention parameter accepts a + followed by an integer followed by one of the following time indicators:

l d specifies a retention period in days.

l w specifies a retention period in weeks.

l m specifies a retention period in months.

l y specifies a retention period in years.

For example, -Retention +20d specifies to retain the backup for 20 days.

-Identity

Specifies the identity of the database to back up. If you do not specify this parameter, the operation backs up all databases.

-DataDomainFibreChannelHost

Specifies the hostname of the Fibre Channel to use in the backup operation.

-DataDomainVDiskUser

Specifies the Data Domain vdisk user. If you do not specify this parameter, the value defaults to the - DataDomainUser value. Full credentials are retrieved from the lockbox to authenticate with the host. You can use the -DDVDiskUser, -VDiskUser, or -VDU alias for the - DataDomainVDiskUser parameter.

-LockBoxPath

Specifies the folder that contains the lockbox file, which contains encrypted information about the registered hosts and the corresponding usernames in pairs. Each pair is associated with a password that backups use. You can use the -LB or -LBPath alias for the -LockBoxPath parameter.

-DebugLevel <1_through_9>

Specifies the debug level for the backup. The default value is 0 (zero). You can use the -DL or -D alias for the -DebugLevel parameter.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 57

-DeleteDebugLogsInDays

Deletes debug log files that are older than the specified number of days. The valid range is between 1 and 32767 By default, debug logs are not deleted. Regularly deleting debug logs prevents the log folder on the installation drive from becoming too large. This parameter only deletes debug logs named in the default format and located in the logs folder at \MSAPPAGENT\logs.

-Verbose

Indicates the verbose output. In this context, the standard output stream of the Microsoft application agent appears. You can use the -vb alias for the -Verbose parameter.

-VeryVerbose {True | False}

Increases the volume of the verbose output. To use this parameter, you must also specify the -Verbose parameter. The default value is False.

-ExeFileName

Specifies the full path to the application program executable, that is, msagentsv.exe. Use this option only to diagnose. In normal operations, the cmdlet automatically locates the installed application.

-AsJob {$true | $false}

Runs the cmdlet as a background job. The command returns an object that represents the job, and then displays the command prompt. You can continue to work in the session during the job. You can use the -AJ or -Job alias for the -AsJob parameter.

-JobName

Specifies a friendly name for the job when you use this parameter with the - AsJob parameter. If you do not specify the -AsJob parameter, the -JobName parameter is ignored. You can use the name to identify the job against other job cmdlets such as, Stop-Job.

Listing backups and save files You can list backups and save files with the Windows PowerShell Get- ExchangeBackup cmdlet or with the msagentadmin administration list commands.

List backups with the Get-ExchangeBackup cmdlet To list Exchange Server backups, use the Get-ExchangeBackup cmdlet.

Use the Get-ExchangeBackup PowerShell cmdlet with the following syntax to list Exchange Server backups on a Data Domain server:

[ ] | Get-ExchangeBackup - BackupViaBlockBasedBackup -DataDomainHost - DataDomainUser -DataDomainHostPath

Backing Up Exchange Server

58 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Data_Domain_Storage_Path> -ClientName [ ]

where:

(Optional) Specifies the configuration file object that was imported using the Import-ExchangeBackupConfigFile cmdlet.

-BackupViaBlockBasedBackup

Specifies to list the block-based backups. You can use the -BBB or -BlockBasedBackup alias for the - BackupViaBlockBasedBackup parameter.

-ClientName

Specifies the FQDN of the standalone Exchange Server or database availability group instance to use for listing the backup. You can use the -C or -CN alias for the -ClientName parameter.

-DataDomainHost

Specifies the Data Domain server name. You can use the -S, -SH, -DDHost or -StorageHost alias for the - DataDomainHost parameter.

-DataDomainHostPath

Specifies the full path to the Data Domain storage unit to query for the backups. The Data Domain user must have appropriate access rights to this path. You can use the -Path, -DevicePath, -StoragePath, -StorageHostPath, or -DataDomainPath alias for the -DataDomainHostPath parameter.

-DataDomainUser

Specifies the Data Domain username. Full credentials are retrieved from the lockbox to authenticate with the host. - DDUser, -StorageUser You can use the -DDUser or -StorageUser alias for the -DataDomainUser parameter.

Note: Depending on the number of backups and network performance, the Get- ExchangeBackup cmdlet may require significant time to list the backups.

Optional parameters for the Get-ExchangeBackup cmdlet

The following list describes the additional parameters for the Get-ExchangeBackup cmdlet:

-ExcludeClientNameResolution

Uses the client name that is provided as-is without converting it to the fully qualified domain name (FQDN). Use this parameter to list backups taken with Microsoft application agent version 4.5 or earlier that use the short name as the client name. You can use the -ExcludeCNResolution alias for the - ExcludeClientNameResolution parameter.

-Before

Lists only the backups that were taken on or before the given date or time.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 59

If you do not specify a value, the value defaults to the current date and time.

-After

Lists only the backups that were taken on or after the given date or time.

-Limit

Limits the results to the specified number of backups.

-LockBoxPath

Specifies the folder that contains the lockbox file, which contains encrypted information about the registered hosts and the corresponding usernames in pairs. Each pair is associated with a password that backups use. If you do not specify this parameter, the default installation path is used, which is C:\Program Files\DPSAPPS\common\lockbox. You can use the -LB or -LBPath alias for the -LockBoxPath parameter.

-Debug

Indicates the PowerShell debug, which enables the debug output. By default, the cmdlet pauses on every debug output. You can use the -db alias for the -Debug parameter.

-DebugLevel <1_through_9>

Specifies the debug level. The default value is 0 (zero). You can use the -DL or -D alias for the -DebugLevel parameter.

-Verbose

Indicates the verbose output. In this context, the standard output stream of the Microsoft application agent appears. You can use the -vb alias for the -Verbose parameter.

-VeryVerbose {True | False}

Increases the volume of the verbose output. To use this parameter, you must also specify the -Verbose parameter. The default value is False.

-ExeFileName

Specifies the full path to the application program executable file, that is, msagentadmin.exe. Use this option only to diagnose. In normal operations, the cmdlet automatically locates the installed application.

-AsJob {$true | $false}

Runs the cmdlet as a background job. The command returns an object that represents the job, and then displays the command prompt. You can continue to work in the session during the job. You can use the -AJ or -Job alias for the -AsJob parameter.

-JobName

Specifies a friendly name for the job when you use this parameter with the - AsJob parameter. If you do not specify the -AsJob parameter, the -JobName parameter is ignored. You can use the name to identify the job against other job cmdlets such as, Stop-Job.

Backing Up Exchange Server

60 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Examples of the Get-ExchangeBackup cmdlet

Consider the following examples of using the Get-ExchangeBackup cmdlet to list backups.

Example 9 List backups taken between five and two days ago

The following command lists backups between five and two days ago:

Get-ExchangeBackup -BackupViaBlockBasedBackup -DataDomainHost dd.lss.emc.com -DataDomainUser user -DataDomainPath /path - ClientName host.lss.emc.com -After (Get-Date).AddDays(-5) -Before (Get-Date).AddDays(-2)

Example 10 List backups taken between five and two days ago by using the configuration file object

The following command lists backups between five and two days ago by using the configuration file object:

$serverinfo | Get-ExchangeBackup -After (Get-Date).AddDays(-5) - Before (Get-Date).AddDays(-2)

Example 11 List the five most recent block-based backups taken more than seven days ago

The following command lists the five most recent block-based backups taken more than seven days ago:

Get-ExchangeBackup -BackupViaBlockBasedBackup -DataDomainHost dd.lss.emc.com -DataDomainUser user -DataDomainPath /path - ClientName host.lss.emc.com -Before (Get-Date).AddDays(-7) -Limit 5

Example 12 List the five most recent backups taken within seven days

The following command lists the five most recent backups taken within seven days:

Get-ExchangeBackup -BackupViaBlockBasedBackup -DataDomainHost dd.lss.emc.com -DataDomainUser user -DataDomainPath /path - ClientName host.lss.emc.com -After (Get-Date).AddDays(-7) -Limit 5

Example 13 List and save the backup information in a PowerShell variable

The following command saves the backup information in a PowerShell variable to use later:

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 61

Example 13 List and save the backup information in a PowerShell variable (continued)

$backups = Get-ExchangeBackup -DataDomainHost dd.lss.emc.com - DataDomainUser user -DataDomainPath /path -ClientName host.lss.emc.com

List backups and save files with the msagentadmin administration command The Microsoft application agent supports list commands to view backups and save files.

List backups or save files using the msagentadmin administration command with the following syntax:

msagentadmin administration {--list | --listfiles} --ddhost " " --ddpath "<name_and_path_of_storage_unit>" --dduser "<DD_Boost_username>" --appID " msapp_bbb" [ ]

where:

{--list | --listfiles}

Specifies the type of list operation. You must only specify one of the following parameters:

l --listfiles specifies to list save files on the storage unit.

l --list specifies to list backups. You can use the -s alias for the list parameter.

--ddhost " "

Specifies the name of the server that contains the storage unit, to which you backed up the databases.

--ddpath "/ "

Specifies the name and the path of the storage unit, to which you backed up the databases.

--dduser " "

Specifies the username of the DD Boost user.

--appID "msapp_bbb"

Specifies the application ID (namespace) to locate backups. Specify msapp_bbb for Exchange Server. You can use the -n alias for the --appID parameter.

Optional parameters for the msagentadmin administration command

The following list describes the optional parameters you can use with msagentadmin administration commands.

--config " "

Specifies the full path to the configuration file. You can use the -z alias for the --config parameter.

Backing Up Exchange Server

62 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

--lockbox

Specifies the folder that contains the lockbox file, which contains encrypted information about the registered hosts and the corresponding usernames in pairs. Each pair is associated with a password that backups use. If you do not specify a value, the path defaults to the installation path, which is typically C:\Program Files\DPSAPPS\common\lockbox.

--tier

Specifies to display the location of the save sets in either the Data Domain system (active tier) or the Data Domain Cloud Tier.

--client

Specifies the application server hostname that contains the server instance that was backed up. You can use the -c alias for the --client parameter.

--before

Lists only the backups that were taken on or before the given date and time, date, day, or time. If you do not specify a value, the value defaults to the current date and time. For example, now, 3/31/2016 15:00:00, or Tuesday. You can use the -e alias for the --before parameter.

--after

Lists only the backups that were taken on or after the date and time, date, day, or time. For example: 3/31/2016 15:00:00 or Tuesday. You can use the -b alias for the --after parameter.

--limit

Specifies to limit the list results to the specified number.

--debug

Specifies the debug level for listing backups. The default value is 0 (zero). You can use the -D alias for the --debug parameter.

--deleteDebugLog

Deletes debug log files that are older than the specified number of days. The valid range is between 1 and 32767. By default, debug logs are not deleted. Regularly deleting debug logs prevents the log folder on the installation drive from becoming too large. This parameter only deletes debug logs named in the default format and located in the logs folder at \MSAPPAGENT\logs

--help

Prints a brief help message. You can use the -h alias for the --help parameter.

--confirm

Specifies to skip the user confirmation prompts for the operation.

-a " "

Specifies the keyword and value of an option that is also specified in the configuration file. For example, -a "CLIENT= ".

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 63

Examples of the msagentadmin list command Consider the following examples of the msagentadmin administration list commands.

Example 14 List all backups

The following command lists all the backups:

msagentadmin administration --list --ddhost datadomain.myapp.com -- ddpath "/dd/backups" --dduser "dduser" --appid msapp_bbb -e -- client myserver.myapp.com

Example 15 List all files in a storage unit

The following command lists all files in the /dd/backups storage unit:

msagentadmin administration --listFiles --ddhost datadomain.myapp.com --ddpath "/dd/backups" --dduser "dduser" -- appid msapp_bbb --client myserver.myapp.com

Example 16 Limit the list results to a certain number

The following command lists the five most recent backups:

msagentadmin administration --list --ddhost datadomain.myapp.com -- ddpath "/dd/backups" --dduser "dduser" --appid msapp_bbb --client myserver.myapp.com --limit 5

Example 17 Limit the list results to a certain date

The following command lists the backups that are performed after March 30, 2017:

msagentadmin administration --list --ddhost datadomain.myapp.com -- ddpath "/dd/backups" --dduser "dduser" --client myserver.myapp.com --appid msapp_bbb --after '3/30/2017'

Example 18 Limit the list results to a day of this week

The following command lists the backups that were performed before this Tuesday:

Backing Up Exchange Server

64 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Example 18 Limit the list results to a day of this week (continued)

msagentadmin administration --list --ddhost datadomain.myapp.com -- ddpath "/dd/backups" --dduser "dduser" --appid msapp_bbb --client myserver.myapp.com --before Tuesday

Move and recall save sets on a Data Domain Cloud Tier Use the msagentadmin.exe administration command to perform the following tasks:

l Mark Exchange Server backups to move from a Data Domain storage unit to a Data Domain Cloud Tier.

l Recall save sets from a Data Domain Cloud Tier to a Data Domain storage unit. The Microsoft application agent supports the following types of recall:

n Seamless or automatic: When a restore operation needs the save sets that are present on a Data Domain Cloud Tier, the Microsoft application agent automatically recalls the save sets to the active tier on Data Domain. However, when you use Elastic Cloud Storage (ECS) with DD OS 6.1 or later, the Microsoft application agent restores the save sets on the cloud tier device directly from ECS to the client without recalling to the active tier. The Data Domain documentation provides more details and recommendations for restore operations directly from ECS.

n Manual: When both of the following conditions exist, recall the save sets manually before you perform a restore operation:

When a restore operation needs the save sets that are present on a Data Domain Cloud Tier.

When you do not want the Microsoft application agent to automatically recall and restore the save sets.

Move save sets to the Data Domain Cloud Tier Use the msagentadmin administration command with the --move parameter to move save sets to a Data Domain Cloud Tier device.

To move save sets to a Data Domain Cloud Tier, type the following command:

msagentadmin.exe administration --move --ddhost "<Data_Domain_server_name>" --ddpath "<name_and_path_of_storage_unit>" --dduser "<DDBoost_username>" -- appID "msapp_bbb" [ ]

where:

--move

Specifies an operation to move save sets. You can use the -m alias for the --move parameter.

--ddhost " "

Specifies the name of the Data Domain server that contains the storage unit, to which you backed up the databases.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 65

--ddpath "/ "

Specifies the name and the path of the storage unit, to which you backed up the databases.

--dduser " "

Specifies the username of the DD Boost user.

--appID "msapp_bbb"

Specifies the application ID (namespace) to locate backups. Specify msapp_bbb for Exchange Server. You can use the -n alias for the --appID parameter.

NOTICE When you subsequently mark save sets, do not mark the previously marked save sets with the --after and --before parameters. If you mark the previously marked save sets, it can impact the performance of the data movement.

Consider the following example commands to mark save sets to move them from a Data Domain storage unit to a Data Domain Cloud Tier:

Example 19 Cloud tier move command without a configuration file

msagentadmin administration --move --tier cloud --before "30 days ago" --appID msapp_bbb --ddhost "10.70.102.111" --ddpath "/mt1" -- dduser "ost" --client ledmf175.msapp.com --debug 9

Example 20 Cloud tier move command with a configuration file

msagentadmin.exe administration --move --tier cloud --before "30 days ago" -appID msapp_bbb --config c:\temp\config_pp.txt --debug 9

Recall save sets from the Data Domain Cloud Tier Use the msagentadmin administration command with the --recall parameter to recall save sets from a Data Domain Cloud Tier device.

To recall save sets from the Data Domain Cloud Tier device to the Data Domain storage unit, type the following command:

msagentadmin.exe administration --recall --ddhost "<Data_Domain_server_name>" --ddpath "<name_and_path_of_storage_unit>" --dduser "<DDBoost_username>" -- appID "msapp_bbb" [ ]

where:

--recall

Specifies an operation to recall save sets. You can use the -r alias for the --recall parameter.

Backing Up Exchange Server

66 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

--ddhost " "

Specifies the name of the Data Domain server that contains the storage unit, to which you backed up the databases.

--ddpath "/ "

Specifies the name and the path of the storage unit, to which you backed up the databases.

--dduser " "

Specifies the username of the DD Boost user.

--appID "msapp_bbb"

Specifies the application ID (namespace) to locate backups. Specify msapp_bbb for Exchange Server. You can use the -n alias for the --appID parameter.

Consider the following example commands to mark save sets to move them from a Data Domain storage unit to a Data Domain Cloud Tier:

Example 21 Cloud tier recall command without a configuration file

msagentadmin administration --recall --tier --after 1481104962 -- before 1481105533 --appID msapp_bbb --ddhost "10.70.102.111" -- ddpath "/mt1" --dduser "ost" --client ledmf175.msapp.com --debug 9

Example 22 Cloud tier recall command with a configuration file

msagentadmin.exe administration --recall --tier --after 1481104962 --before 1481105533 --appID msapp_bbb --config c:\temp \config_pp.txt --debug 9

Optional parameters for the msagentadmin administration command The following list describes the optional parameters you can use with msagentadmin administration commands.

--config " "

Specifies the full path to the configuration file. You can use the -z alias for the --config parameter.

--lockbox

Specifies the folder that contains the lockbox file, which contains encrypted information about the registered hosts and the corresponding usernames in pairs. Each pair is associated with a password that backups use. If you do not specify a value, the path defaults to the installation path, which is typically C:\Program Files\DPSAPPS\common\lockbox.

--tier

Specifies to display the location of the save sets in either the Data Domain system (active tier) or the Data Domain Cloud Tier.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 67

--client

Specifies the application server hostname that contains the server instance that was backed up. You can use the -c alias for the --client parameter.

--before

Lists only the backups that were taken on or before the given date and time, date, day, or time. If you do not specify a value, the value defaults to the current date and time. For example, now, 3/31/2016 15:00:00, or Tuesday. You can use the -e alias for the --before parameter.

--after

Lists only the backups that were taken on or after the date and time, date, day, or time. For example: 3/31/2016 15:00:00 or Tuesday. You can use the -b alias for the --after parameter.

--limit

Specifies to limit the list results to the specified number.

--debug

Specifies the debug level for listing backups. The default value is 0 (zero). You can use the -D alias for the --debug parameter.

--deleteDebugLog

Deletes debug log files that are older than the specified number of days. The valid range is between 1 and 32767. By default, debug logs are not deleted. Regularly deleting debug logs prevents the log folder on the installation drive from becoming too large. This parameter only deletes debug logs named in the default format and located in the logs folder at \MSAPPAGENT\logs

--help

Prints a brief help message. You can use the -h alias for the --help parameter.

--confirm

Specifies to skip the user confirmation prompts for the operation.

-a " "

Specifies the keyword and value of an option that is also specified in the configuration file. For example, -a "CLIENT= ".

Backing Up Exchange Server

68 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Deleting backups You can delete backups with the Windows PowerShell Remove-ExchangeBackup cmdlet or with the msagentadmin administration delete command.

Delete backups with the Remove-ExchangeBackup cmdlet To remove Exchange Server backups, use the Remove-ExchangeBackup cmdlet.

Use the Remove-ExchangeBackup PowerShell cmdlet with the following syntax to remove Exchange Server backups on a Data Domain server:

[ ] | Remove-ExchangeBackup -ClientName -DataDomainHost - DataDomainHostPath -DataDomainUser {-BackupID | -Backup } [ ]

where:

(Optional) Specifies the configuration file object that was imported using the Import-ExchangeBackupConfigFile cmdlet.

-ClientName

Specifies the FQDN of the standalone Exchange Server or database availability group instance to use for listing the backup. You can use the -C or -CN alias for the -ClientName parameter.

-DataDomainHost

Specifies the Data Domain server name. You can use the -S, -SH, -DDHost or -StorageHost alias for the - DataDomainHost parameter.

-DataDomainHostPath

Specifies the full path to the Data Domain storage unit to query for the backups. The Data Domain user must have appropriate access rights to this path. You can use the -Path, -DevicePath, -StoragePath, -StorageHostPath, or -DataDomainPath alias for the -DataDomainHostPath parameter.

-DataDomainUser

Specifies the Data Domain username. Full credentials are retrieved from the lockbox to authenticate with the host. - DDUser, -StorageUser You can use the -DDUser or -StorageUser alias for the -DataDomainUser parameter.

{-BackupID | -Backup }

Specifies the backup to delete. You must specify only one of the following parameters:

l -BackupID specifies the backup using a backup ID.

l -Backup specifies the backup using a backup object.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 69

Retrieve the backup object or backup ID from the Backup-Exchange or Get- ExchangeBackup cmdlet output.

Optional parameters for the Remove-ExchangeBackup cmdlet

The following list describes the optional parameters for the Remove- ExchangeBackup cmdlet:

-Confirm:{$true | $false}

This parameter is the standard PowerShell Confirm parameter. The default value is -Confirm:$true.

-DataDomainVDiskUser

Specifies the Data Domain vdisk username. You can use the -DDVDiskUser, -VDiskUser, or -VDU alias for the - DataDomainVDiskUser parameter.

-LockBoxPath

Specifies the folder that contains the lockbox file, which contains encrypted information about the registered hosts and the corresponding usernames in pairs. Each pair is associated with a password that backups use. If you do not specify this parameter, the default installation path is used, which is C:\Program Files\DPSAPPS\common\lockbox. You can use the -LB or -LBPath alias for the -LockBoxPath parameter.

-Debug

Indicates the PowerShell debug, which enables the debug output. By default, the cmdlet pauses on every debug output. You can use the -db alias for the -Debug parameter.

-DebugLevel <1_through_9>

Specifies the debug level. The default value is 0 (zero). You can use the -DL or -D alias for the -DebugLevel parameter.

-Verbose

Indicates the verbose output. In this context, the standard output stream of the Microsoft application agent appears. You can use the -vb alias for the -Verbose parameter.

-VeryVerbose {True | False}

Increases the volume of the verbose output. To use this parameter, you must also specify the -Verbose parameter. The default value is False.

-ExeFileName

Specifies the full path to the application program executable file, that is, msagentadmin.exe. Use this option only to diagnose. In normal operations, the cmdlet automatically locates the installed application.

-AsJob {$true | $false}

Runs the cmdlet as a background job. The command returns an object that represents the job, and then displays the command prompt. You can continue to work in the session during the job. You can use the -AJ or -Job alias for the -AsJob parameter.

Backing Up Exchange Server

70 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

-JobName

Specifies a friendly name for the job when you use this parameter with the - AsJob parameter. If you do not specify the -AsJob parameter, the -JobName parameter is ignored. You can use the name to identify the job against other job cmdlets such as, Stop-Job.

Examples of the Remove-ExchangeBackup cmdlet using a backup ID

Example 23 Remove a backup by using a backup ID

Remove-ExchangeBackup -BackupID msapp_bbb:1458138556 -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com - DataDomainHostPath /SU_DD163 -DataDomainUser DD163_user

Example 24 List backups taken between five and two days ago by using the configuration file object

$serverinfo | Remove-ExchangeBackup -BackupID msapp_BBB:1458138556

Examples of the Remove-ExchangeBackup cmdlet using a backup ID from a variable

You must first retrieve the list of backups to a variable, $backups by using the Get- ExchangeBackup cmdlet:

$backups = Get-ExchangeBackup Optional parameters for the Get-ExchangeBackup cmdlet on page 59 provides information about the supported parameters for the Get-ExchangeBackup cmdlet.

Example 25 Remove a backup by using a backup ID

Remove-ExchangeBackup -BackupID $backups[0].BackupID -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com - DataDomainHostPath /SU_DD163 -DataDomainUser DD163_user

Example 26 Remove a backup using a configuration file object and backup ID

$serverinfo | Remove-ExchangeBackup -BackupID $backups[0].BackupID

Examples of the Remove-ExchangeBackup cmdlet using a backup object

Example 27 Remove backups using a backup object

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 71

Example 27 Remove backups using a backup object (continued)

Remove-ExchangeBackup -Backup $backups[0] -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com - DataDomainHostPath /SU_DD163 -DataDomainUser DD163_user

Example 28 Remove backups using a backup object and configuration file object

$serverinfo | Remove-ExchangeBackup -Backup $backups[0]

Example 29 Remove a subset of backup objects from a backup object list

Remove-ExchangeBackup -Backup $backups[2..5] -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com - DataDomainHostPath /SU_DD163 -DataDomainUser DD163_user

Example 30 Remove all backups in a backup object

Remove-ExchangeBackup -Backup $backups -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com - DataDomainHostPath /SU_DD163 -DataDomainUser DD163_user

Examples of running the Remove-ExchangeBackup cmdlet by piping from the Get- ExchangeBackup cmdlet

Example 31 Remove backups in a time range by piping

$serverinfo | Get-ExchangeBackup -After 'Jan 1, 2016' -Before 'Feb 1, 2017' | Remove-ExchangeBackup

Example 32 Remove backups in a time range by piping with a backup object

$serverinfo | Remove-ExchangeBackup -Backup ($serverinfo | Get- ExchangeBackup -After 'Jan 1, 2016' -Before 'Feb 1, 2017')

Backing Up Exchange Server

72 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Delete backups with the msagentadmin administration command The Microsoft application agent supports the msagentadmin administration command to delete backups and save sets. The command first lists the backups, and then deletes them.

Note: When backup copies on a Data Domain or PowerProtect X400 system are managed through the PowerProtect Data Manager protection policy schedule, the expired backup copies are deleted according to the schedule. These backup copies must not be deleted through the msagentadmin administration command.

If you try to use the command to delete the backup copies that are managed by PowerProtect Data Manager, an error message appears.

To delete save sets or backups, run the msagentadmin administration command with the following syntax:

msagentadmin administration --delete --ddhost " " --ddpath "/ " --dduser " " --appID "msapp_bbb"

where:

--delete

Specifies a delete operation.

--ddhost " "

Specifies the name of the Data Domain server that contains the storage unit, to which you backed up the databases.

--ddpath "/ "

Specifies the name and the path of the storage unit, to which you backed up the databases.

--dduser " "

Specifies the username of the DD Boost user.

--appID "msapp_bbb"

Specifies the application ID (namespace) to locate backups. Specify msapp_bbb for Exchange Server. You can use the -n alias for the --appID parameter.

Optional parameters for the msagentadmin administration command

The following list describes the optional parameters you can use with msagentadmin administration commands.

--config " "

Specifies the full path to the configuration file. You can use the -z alias for the --config parameter.

--lockbox

Specifies the folder that contains the lockbox file, which contains encrypted information about the registered hosts and the corresponding usernames in pairs. Each pair is associated with a password that backups use.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 73

If you do not specify a value, the path defaults to the installation path, which is typically C:\Program Files\DPSAPPS\common\lockbox.

--tier

Specifies to display the location of the save sets in either the Data Domain system (active tier) or the Data Domain Cloud Tier.

--client

Specifies the application server hostname that contains the server instance that was backed up. You can use the -c alias for the --client parameter.

--before

Lists only the backups that were taken on or before the given date and time, date, day, or time. If you do not specify a value, the value defaults to the current date and time. For example, now, 3/31/2016 15:00:00, or Tuesday. You can use the -e alias for the --before parameter.

--after

Lists only the backups that were taken on or after the date and time, date, day, or time. For example: 3/31/2016 15:00:00 or Tuesday. You can use the -b alias for the --after parameter.

--limit

Specifies to limit the list results to the specified number.

--debug

Specifies the debug level for listing backups. The default value is 0 (zero). You can use the -D alias for the --debug parameter.

--deleteDebugLog

Deletes debug log files that are older than the specified number of days. The valid range is between 1 and 32767. By default, debug logs are not deleted. Regularly deleting debug logs prevents the log folder on the installation drive from becoming too large. This parameter only deletes debug logs named in the default format and located in the logs folder at \MSAPPAGENT\logs

--help

Prints a brief help message. You can use the -h alias for the --help parameter.

--confirm

Specifies to skip the user confirmation prompts for the operation.

-a " "

Specifies the keyword and value of an option that is also specified in the configuration file. For example, -a "CLIENT= ".

Backing Up Exchange Server

74 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Example of the msagentadmin delete command Consider the following example of the msagentadmin administration delete command.

Example 33 Delete backups taken before a specified date and time

The following command deletes all backups that were taken before 1461267170:

msagentadmin administration --delete --appid msapp_bbb --config C:\Program Files\DPSAPPS\MSAPPAGENT\config\msappagent.cfg --before 1461267170

Deleting expired backups Once backups expire, use the ddbmexptool.exe tool to delete the expired backups.

Backups expire once they pass the retention period. The default retention period is 30 days. However, you can customize a different retention period in the configuration file or in backup command.

Prerequisites Ensure that you meet the following requirements before you delete the expired backups by using the expiry tool:

l You have a log of the backups that you performed.

l You have manually checked whether the expired backup that you want to delete has dependent non-expired backups.

Note: You must not delete an expired backup if it has dependent non-expired backups. The expiry tool does not check for the dependent backups.

l You have created a configuration file.

For example, create the C:\ddconfig.cfg configuration file with the following contents:

DEVICE_PATH=/artitest DDBOOST_USER=ost DEVICE_HOST=10.31.192.10 CLIENT=mw2k8x64sql2.nmmdev.com DEBUG_LEVEL=0 LOCKBOX_PATH="C:\Program Files\DPSAPPS\common\lockbox"

Note: For the DEVICE_HOST variable, specify either the same hostname or the same IP address that you specified in the DataDomain Server field when you added or configured the Data Domain server. The hostname must be in the FQDN format. For example, test1.contoso.com.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 75

Delete expired backups with the ddbmexptool.exe tool About this task

To delete expired backups, run the following command:

ddbmexptool -k -n msapp_bbb -a "DDBOOST_USER= " -a "DEVICE_PATH= " -a "DEVICE_HOST= " -a "CLIENT= " [ ]

where:

-k

Specifies to delete expired backups.

-n msapp_bbb

Specifies to delete Exchange Server application save sets.

-a "DEVICE_HOST= "

Specifies the name of the Data Domain server that contains the storage unit, to which you backed up the databases.

-a "DEVICE_PATH= "

Specifies the name and the path of the storage unit, to which you backed up the databases.

a "DDBOOST_USER= "

Specifies the username of the DD Boost user.

-a "CLIENT= "

Specifies the Exchange Server hostname that was specified for the backup.

Note: If you do not specify the -b and -e options, the command deletes all the expired backups. However, the command does not delete the metadata files that the Microsoft application agent creates during backups. The size of the metadata files is negligible, and does not affect the performance of the host. To delete the metadata files, use the -d option.

Consider the following examples of the ddbmexptool.exe command:

l The following command deletes all expired backups:

ddbmexptool.exe -k -n msapp_bbb -a "DDBOOST_USER=ost" -a "DEVICE_PATH=aru42" -a "DEVICE_HOST=10.31.194.120" -a "CLIENT=hmytest2.contoso.com"

l The following command deletes all the expired save sets with the name EXCHANGE$DEST2008:testdb1:

ddbmexptool.exe -k -n msapp_bbb -a "DDBOOST_USER=ost" -a "DEVICE_PATH=msappstu7" -a "DEVICE_HOST=10.31.140.205" -a "CLIENT=vclus33.joy.com" -N EXCHANGE$DEST2008:testdb1

l The following command uses a configuration file:

ddbmexptool.exe -k -n msapp_bbb -z C:\DD-Config-Details.txt

Backing Up Exchange Server

76 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Note: You can add the ddbmexptool.exe command to a batch script that is scheduled through the Windows scheduler to delete the expired backups automatically according to the schedules.

Optional parameters for the ddbmexptool expiry tool The following list describes the optional parameters for the ddbmexptool expiry tool.

-v

Displays the verbose output on the console.

-D

Generates detailed logs that you can use to troubleshoot the backup issues. The default value is 0 (zero).

-p

Deletes debug log files that are older than the specified number of days. The valid range is between 1 and 32767. By default, debug logs are not deleted. Regularly deleting debug logs prevents the log folder on the installation drive from becoming too large. This parameter only deletes debug logs named in the default format and located in the logs folder at \MSAPPAGENT \logs.

-b

Specifies the lower boundary of the save time of the backup. Specify the time in either the


: :
, format or the relative time format. The supported relative time formats are now, days ago, months ago, years ago, and days.

If you do not specify the -b option, the command considers 1/1/1970 as the lower boundary.

-e

Specifies the upper boundary of the save time of the backup. Specify the time in either the


: :
, format or the relative time format. The supported relative time formats are now, days ago, months ago, years ago, and days.

If you do not specify the-e option, the command considers the current time as the upper boundary.

The best practice is to set the value of -e to the same value as the expiration policy time period that was specified at the backup time.

-N

Specifies a particular save set name to either display or display and delete. For example, -N MARS$DEST2008:testdb1.

-z

Specifies the full path to the configuration file.

-a "parameter=value"

Specifies a key-value pair, that is, -a "key = value" for options present in the configuration file. For example, -a "DEVICE_HOST = bu- ddb890.lss.emc.com"

-Y

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 77

Specifies to skip the user confirmation prompt when deleting backups.

Reading the backup object from Windows PowerShell cmdlet output

Learn how to read the Windows PowerShell cmdlet output.

The output of the cmdlets to perform backups (Backup-Exchange), list backups (Get-ExchangeBackup), and remove backups (Remove-ExchangeBackup) is a backup object.

The Get-ExchangeBackup and Remove-ExchangeBackup cmdlets list arrays of backup objects.

Output formats Learn about the various output formats available for Windows PowerShell cmdlets for backup operations.

Table Format

The default format of the EMCExchangeBackupRestore.BackupData.ExchangeBackup object is a table, which contains the BackupDateTimeUTC, BackupID, ClientName, Successful, and BackupDatabases columns.

Consider the following example:

Example 34 Table format output from the Get-ExchangeBackup cmdlet

$serverinfo | Get-ExchangeBackup -BackupViaBlockBasedBackup

BackupDate TimeUTC BackupID ClientName Successful BackupDatabases -------- -------- ---------- ---------- -------- -------- 3/14/2016 4:38:54 PM 1457973534 exchangehost.myorg.com True {TestDB, Mailbox Database 1250665181}

List format

The list format displays all attributes with the backup date and time according to the local time zone, except the static image information.

Use the Format-List parameter to enable the list format output.

Consider the following example:

Example 35 Table format output from the Get-ExchangeBackup cmdlet

$serverinfo | Get-ExchangeBackup -BackupViaBlockBasedBackup | Format-List

Backing Up Exchange Server

78 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Example 35 Table format output from the Get-ExchangeBackup cmdlet (continued)

ExchangeVersion : 2013 BackupDateTimeUTC : 10/20/2016 4:37:16 PM BackupDatabases : {183c4310-6910-4c0f-bf8c-d152560035d9, 82da2fb5-866e-4b26-a360-0f15ddfec475, 6efb90ca-279e-4e52-9784- e0861ec5c362} Level : full BackupID : msapp_bbb:1476981436 Successful : True ClientName : ledmf175.msapp.com DataDomainHost : ledmd035.lss.example.com DataDomainHostPath : /SU_DD163 RecoverPointHost : Bookmarks : {}

Wide format

The wide format displays only the BackupDateTimeUTC attribute.

Use the Format-Wide parameter to enable the wide format output.

Consider the following example:

Example 36 Wide format output from the Get-ExchangeBackup cmdlet

$serverinfo | Get-ExchangeBackup -Before (Get-Date).AddDays(-5) - Limit 3 | Format-Wide

6/10/2016 12:45:18 PM 6/10/2016 12:43:36 PM 6/3/2016 3:39:53 PM

EMCExchangeBackupRestore.BackupData.ExchangeBackupDatabase object attributes

The EMCExchangeBackupRestore.BackupData.ExchangeBackupDatabase object lists information for a single database.

The following table lists the attributes that the EMCExchangeBackupRestore.BackupData.ExchangeBackupDatabase object contains:

Table 6 Attributes of the EMCExchangeBackupRestore.BackupData.ExchangeBackupDatabase object

Attribute Description

Identity The identity of the database.

Guid The GUID of the database.

BackupID The backup ID of the individual database.

Though you can use this attribute to restore an individual database, the Microsoft application agent recommends you to use the general or overall BackupID to perform restores.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 79

Table 6 Attributes of the EMCExchangeBackupRestore.BackupData.ExchangeBackupDatabase object (continued)

Attribute Description

DatabaseFileBackupID The backup ID of the EDB backup. In the case of a block based backup, this attribute is different from the BackupID attribute.

You cannot use this backup ID to perform restores.

LogFilesBackupID The backup ID of the log folder backup. In the case of a block based backup, this attribute is different from the BackupID attribute.

You cannot use this backup ID to perform restores.

EdbFilePath The original path of the backed up EDB file. This attribute corresponds to Get-Datatabase | Format-Table EdbFilePath during the backup.

LogFolderPath The original folder of the backed up log files. This attribute corresponds to Get-Database | Format-Table LogFolderPath during the backup.

EMCExchangeBackupRestore.BackupData.ExchangeBackup object attributes The EMCExchangeBackupRestore.BackupData.ExchangeBackup object lists an array of database backup objects.

The following table lists the attributes that the EMCExchangeBackupRestore.BackupData.ExchangeBackup object contains:

Table 7 Attributes of the EMCExchangeBackupRestore.BackupData.ExchangeBackup object

Attribute Description

BackupDateTimeUTC The date and time of the backup in UTC.

BackupDatabases An array of EMCExchangeBackupRestore.BackupData.ExchangeBackupDatabase objects.

BackupID The ID of the backup. Each ID has the backup technology and a colon as the prefix.

In the case of block based backups, the prefix is msapp_bbb:.

If you do not specify a prefix for a backup ID in any of the Exchange Server backup operations, the default prefix is msapp_pp:.

BookmarkName Empty list.

ClientName The FQDN of the Exchange Server.

DataDomainHost The Data Domain server name.

DataDomainHostPath The full path to the Data Domain storage unit.

ExchangeVersion The version of the Exchange Server.

Level The backup level, which is always FULL even in the case of incremental block based backups.

Backing Up Exchange Server

80 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Table 7 Attributes of the EMCExchangeBackupRestore.BackupData.ExchangeBackup object (continued)

Attribute Description

StaticImages An array of EMCExchangeBackupRestore.BackupData.ExchangeBackupDDStaticImag e objects.

Successful $true, if the backup is successful.

Backing Up Exchange Server

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 81

Backing Up Exchange Server

82 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

CHAPTER 3

Restoring Exchange Server Backups

This chapter includes the following sections:

l Best practices to restore Exchange Server with Application Direct................... 84 l Prerequisite for Exchange restore operations.................................................... 84 l Restoring Exchange Server databases............................................................... 84 l Performing granular-level restores..................................................................... 91 l Performing Exchange Server disaster recovery................................................. 97

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 83

Best practices to restore Exchange Server with Application Direct

The following are the best practices to restore Exchange Server with Application Direct.

Re-create deleted databases in the same location

If you want to re-create a deleted database, you must re-create the database in the same location where the deleted database was present.

Check that the destination host has sufficient space

Always ensure that a destination host has sufficient space to restore data.

Configure usage limits for Data Domain streams

Configure a sufficient number of Data Domain streams for better performance of backups and restores. The streams control backup and restore parallelism for each database.

Configuring usage limits of Data Domain streams on page 30 provides more information about streams limit, impact of exceeding the limits, and configuring the usage limits.

Prerequisite for Exchange restore operations You must run the set-mailboxdatabase cmdlet to allow an Exchange database to be restored from a backup.

Run the set-mailboxdatabase PowerShell cmdlet with the following syntax prior to any restore operation:

set-mailboxdatabase -AllowFileRestore $true

where:

Specifies the name of the database that is the target for the restore operation.

-AllowFileRestore $true

Specifies to allow restore operations for the database.

Note: Run this command for each target database for the restore operation.

The Microsoft documentation provides more information on the set- mailboxdatabase cmdlet.

Restoring Exchange Server databases The Microsoft application agent supports the following types of database restores:

l Normal restore: Restore of a database to the original source database.

l Alternate database restore: Restore of a database to another database that is different from the source database.

Restoring Exchange Server Backups

84 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

You can view the list of backups and then restore only the required backups by using the backup IDs. Listing backups and save files on page 58 provides information about how to list backups.

Restore a backup to the source database Use the Restore-Exchange cmdlet with the following syntax to restore a database to the source location (normal restore):

[ ] | Restore-Exchange -NormalRestore {- BackupID [-Identity ] | -Backup } -ClientName - DataDomainHost -DataDomainHostPath Data_Domain_Storage_Path> -DataDomainUser

where:

(Optional) Specifies the configuration file object that was imported using the Import-ExchangeBackupConfigFile cmdlet.

-NormalRestore

Specifies that the database is being restored to the original source location. You can use the -Restore alias for the -NormalRestore parameter.

{-BackupID [-Identity ] | -Backup }

Specifies the backup to restore using either the backup identity or object. You must specify only one of the following options:

l Specify -BackupID to use a backup ID. Optionally, specify - Identity with -BackupID to specify the identity of one or more databases to restore.

l Specify -Backup to use a backup object.

You can retrieve the backup ID and object from the Backup-Exchange or Get- ExchangeBackup cmdlet output.

-ClientName

Specifies the client name that was used for the backup. You can use the -C or -CN alias for the -ClientName parameter.

-DataDomainHost

Specifies the name of the Data Domain server that contains the backups. You can use the -S, -SH, -DDHost or -StorageHost alias for the - DataDomainHost parameter.

-DataDomainHostPath

Specifies the full path of the Data Domain storage unit that contains the backups.The Data Domain user must have appropriate access rights to this path. You can use the -Path, -DevicePath, -StoragePath, -StorageHostPath, or -DataDomainPath alias for the -DataDomainHostPath parameter.

-DataDomainUser

Specifies the Data Domain username. Full credentials are retrieved from the lockbox to authenticate with the host. - DDUser, -StorageUser

Restoring Exchange Server Backups

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 85

You can use the -DDUser or -StorageUser alias for the -DataDomainUser parameter.

Examples of normal restores using a backup ID and an identity

Example 37 Restore database TestDB by using a backup ID

Restore-Exchange -NormalRestore -BackupID msapp_bbb:1458138556 - Identity TestDB -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com -DataDomainHostPath /SU_DD163 - DataDomainUser DD163_user

Example 38 Restore database TestDB and the Mailbox Database 1250665181 by using a backup ID

Restore-Exchange -NormalRestore -BackupID msapp_bbb:1458138556 - Identity TestDB,'Mailbox Database 1250665181' -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com - DataDomainHostPath /SU_DD163 -DataDomainUser DD163_user

Example 39 Restore all the databases of a backup by using a backup ID

Restore-Exchange -NormalRestore -BackupID msapp_bbb:1458138556 - ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com -DataDomainHostPath /SU_DD163 - DataDomainUser DD163_user

Examples of normal database restores using a backup ID and an identity from a variable

You must first retrieve the list of backups to a variable, $backups by using the Get- ExchangeBackup cmdlet:

$backups = Get-ExchangeBackup Optional parameters for the Get-ExchangeBackup cmdlet on page 59 provides information about the Get-ExchangeBackup cmdlet and the supported parameters.

In the following examples, $backups[0] contains a list of backups, the database TestDB is at index 0, that is, $backups[0].BackupDatabases[0], and the and Mailbox Database 1250665181 is at index 1.

Example 40 Restore TestDB using a configuration file object

$serverinfo | Restore-Exchange -NormalRestore -Backup $backups[0] - Identity $backups[0].BackupDatabases[0].Identity

Restoring Exchange Server Backups

86 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Example 41 Restore TestDB and Mailbox Database 1250665181 using a backup ID

Restore-Exchange -NormalRestore -BackupID $backups[0].BackupID - Identity $backups[0].BackupDatabases[0].Identity,$backups[0].BackupDatabases[ 1].Identity -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com -DataDomainHostPath /SU_DD163 - DataDomainUser DD163_user

Examples of normal restores using a backup object

Example 42 Restore all the databases of a backup by using a backup object

Restore-Exchange -NormalRestore -Backup $backups[0] -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com - DataDomainHostPath /SU_DD163 -DataDomainUser DD163_user

Example 43 Restore all the databases of a backup by using a backup object and a configuration file object

$serverinfo | Restore-Exchange -NormalRestore -Backup $backups[0]

Example 44 Restore the most recent backup taken seven or more days ago

$serverinfo | Restore-Exchange -NormalRestore -Backup ($serverinfo | Get-ExchangeBackup -Before (Get-Date.AddDays(-7)) -Limit 1)

Restore a backup to an alternate database

Note: Before you perform a copy or alternate database restore, ensure that the target database exists.

Use the Restore-Exchange cmdlet with the following syntax to restore a database to an alternate location (copy restore):

[ ] | Restore-Exchange -CopyRestore - BackupID -Identity -RestoreDatabaseIdentity -ClientName - DataDomainHost -DataDomainHostPath Data_Domain_Storage_Path> -DataDomainUser [ ]

where:

Restoring Exchange Server Backups

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 87

(Optional) Specifies the configuration file object that was imported using the Import-ExchangeBackupConfigFile cmdlet.

-CopyRestore

Specifies that the database is being restored to an alternate location. You can use the -Alternate alias for the -CopyRestore parameter.

-BackupID

Specifies the backup ID to restore. You can retrieve the backup ID from the Backup-Exchange or Get-ExchangeBackup cmdlet output.

-Identity

Specifies the identity of one or more databases to restore.

-RestoreDatabaseIdentity

Specifies the target identity of the alternate database to restore to. You can use the -RestoreDB, -Target, -RDB, or -RestoreDatabaseID alias for the -CopyRestore parameter.

-ClientName

Specifies the client name that was used for the backup. You can use the -C or -CN alias for the -ClientName parameter.

-DataDomainHost

Specifies the name of the Data Domain server that contains the backups. You can use the -S, -SH, -DDHost or -StorageHost alias for the - DataDomainHost parameter.

-DataDomainHostPath

Specifies the full path of the Data Domain storage unit that contains the backups.The Data Domain user must have appropriate access rights to this path. You can use the -Path, -DevicePath, -StoragePath, -StorageHostPath, or -DataDomainPath alias for the -DataDomainHostPath parameter.

-DataDomainUser

Specifies the Data Domain username. Full credentials are retrieved from the lockbox to authenticate with the host. - DDUser, -StorageUser You can use the -DDUser or -StorageUser alias for the -DataDomainUser parameter.

Examples of alternate restores The following example commands restore a database to an alternate destination using a backup ID.

Example 45 Restore the database TestDB to an alternate database AlternateDB using a backup ID

Restore-Exchange -CopyRestore -BackupID msapp_bbb:1458138556 - Identity TestDB -RestoreDatabaseIdentity AlternateDB -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com - DataDomainHostPath /SU_DD163 -DataDomainUser DD163_user

Restoring Exchange Server Backups

88 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Example 46 Restore the database TestDB to an alternate database AlternateDB using a backup ID and a configuration file object

$serverinfo | Restore-Exchange -CopyRestore -BackupID msapp_BBB:1458138556 -Identity TestDB -RestoreDatabaseIdentity AlternateDB

Example 47 Restore the database TestDB and Mailbox Database 1250665181 to the alternate databases AlternateTestDB and AlternatePrimaryDB

Restore-Exchange -CopyRestore -BackupID msapp_bbb:1458138556 - Identity TestDB,'Mailbox Database 1250665181' - RestoreDatabaseIdentity AlternateTestDB,AlternatePrimaryDB - ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com -DataDomainHostPath /SU_DD163 - DataDomainUser DD163_user

Optional parameters for the Restore-Exchange cmdlet The following list details the optional parameters for the Restore-Exchange cmdlet:

-ExcludeClientNameResolution

Uses the client name that is provided as-is without converting it to the fully qualified domain name (FQDN). Use this parameter to restore a backup taken with Microsoft application agent version 4.5 or earlier that uses the short name as the client name. You can use the -ExcludeCNResolution alias for the - ExcludeClientNameResolution parameter.

-Confirm:{$true | $false}

Specifies whether to enable confirmation prompts for the operation. The default value is $true.

-PointInTime:{$true | $false}

Specifies whether to perform a point-in-time-restore operation. The default value is $true. You can use the -PIT alias for the -PointInTime parameter.

-ExchangeServer

Specifies the short name of the Exchange Server, for example, ledmf999, if the name is different from the local hostname. If you do not specify a value, the parameter takes the local hostname by default.

-DataDomainVDiskUser

Specifies the Data Domain vdisk user. If you do not specify this parameter, the value defaults to the - DataDomainUser value. Full credentials are retrieved from the lockbox to authenticate with the host. You can use the -DDVDiskUser, -VDiskUser, or -VDU alias for the - DataDomainVDiskUser parameter.

Restoring Exchange Server Backups

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 89

-LockBoxPath

Specifies the folder that contains the lockbox file, which contains encrypted information about the registered hosts and the corresponding usernames in pairs. Each pair is associated with a password that backups use. You can use the -LB or -LBPath alias for the -LockBoxPath parameter.

-Debug

Specifies to enable the PowerShell debug output. By default, the cmdlet pauses on every debug output.

-DebugLevel <1_through_9>

Specifies the debug level for the backup. The default value is 0 (zero). You can use the -DL or -D alias for the -DebugLevel parameter.

-DeleteDebugLogsInDays

Deletes debug log files that are older than the specified number of days. The valid range is between 1 and 32767 By default, debug logs are not deleted. Regularly deleting debug logs prevents the log folder on the installation drive from becoming too large. This parameter only deletes debug logs named in the default format and located in the logs folder at \MSAPPAGENT\logs.

-Verbose

Indicates the verbose output. In this context, the standard output stream of the Microsoft application agent appears. You can use the -vb alias for the -Verbose parameter.

-VeryVerbose {True | False}

Increases the volume of the verbose output. To use this parameter, you must also specify the -Verbose parameter. The default value is False.

-ExeFileName

Specifies the full path to the application program executable, that is, msagentrc.exe. Use this option only to diagnose. In normal operations, the cmdlet automatically locates the installed application.

-AsJob {$true | $false}

Runs the cmdlet as a background job. The command returns an object that represents the job, and then displays the command prompt. You can continue to work in the session during the job. You can use the -AJ or -Job alias for the -AsJob parameter.

-JobName

Specifies a friendly name for the job when you use this parameter with the - AsJob parameter. If you do not specify the -AsJob parameter, the -JobName parameter is ignored. You can use the name to identify the job against other job cmdlets such as, Stop-Job.

Restoring Exchange Server Backups

90 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Performing granular-level restores To recover granular-level Exchange Server data, you must first mount the backup using the Mount-ExchangeBackup PowerShell cmdlet. Once the backup is mounted, you can browse and recover granular items, such as mailboxes or folders, with ItemPoint for Microsoft Exchange Server.

Mount backups To perform granular-level restores, you must first mount the backups.

Use the Mount-ExchangeBackup cmdlet with the following syntax to mount backups:

[ = ] Mount-ExchangeBackup {-BackupID [-Identity ] | -Backup } -ClientName - DataDomainHost -DataDomainHostPath Data_Domain_Storage_Path> -DataDomainUser [ ]

where:

(Optional) Specifies the name of the mount object when using a configuration file.

(Optional) Specifies the configuration file object that was imported using the Import-ExchangeBackupConfigFile cmdlet.

{-BackupID [-Identity ] | -Backup }

Specifies the backup to restore using either the backup identity or object. You must specify only one of the following options:

l Specify -BackupID to use a backup ID. Optionally, specify - Identity with -BackupID to specify the identity of one or more databases to restore.

l Specify -Backup to use a backup object.

You can retrieve the backup ID and object from the Backup-Exchange or Get- ExchangeBackup cmdlet output.

-ClientName

Specifies the client name that was used for the backup. You can use the -C or -CN alias for the -ClientName parameter.

-DataDomainHost

Specifies the name of the Data Domain server that contains the backups. You can use the -S, -SH, -DDHost or -StorageHost alias for the - DataDomainHost parameter.

-DataDomainHostPath

Specifies the full path of the Data Domain storage unit that contains the backups.The Data Domain user must have appropriate access rights to this path.

Restoring Exchange Server Backups

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 91

You can use the -Path, -DevicePath, -StoragePath, -StorageHostPath, or -DataDomainPath alias for the -DataDomainHostPath parameter.

-DataDomainUser

Specifies the Data Domain username. Full credentials are retrieved from the lockbox to authenticate with the host. - DDUser, -StorageUser You can use the -DDUser or -StorageUser alias for the -DataDomainUser parameter.

Result

The backup is mounted in a path similar to the following:

C:\Program Files\DPSAPPS\MSAPPAGENT\tmp\BBBMountPoint \131248297060279537_{4A60AF18-86ED-4BBD- A1C9-2618F1AC1041}_5832\Program Files\Microsoft\Exchange Server \V15\Mailbox\DB2\ The mounted items are unmounted after you restart the host.

Optional parameters for the Mount-ExchangeBackup cmdlet

The following list details the optional parameters for the Mount-ExchangeBackup cmdlet:

-ExcludeClientNameResolution

Uses the client name that is provided as-is without converting it to the fully qualified domain name (FQDN). Use this parameter to restore a backup taken with Microsoft application agent version 4.5 or earlier that uses the short name as the client name. You can use the -ExcludeCNResolution alias for the - ExcludeClientNameResolution parameter.

-ExchangeServer

Specifies the short name of the Exchange Server, for example, ledmf999, if the name is different from the local hostname. If you do not specify a value, the parameter takes the local hostname by default.

-DataDomainVDiskUser

Specifies the Data Domain vdisk user. If you do not specify this parameter, the value defaults to the - DataDomainUser value. Full credentials are retrieved from the lockbox to authenticate with the host. You can use the -DDVDiskUser, -VDiskUser, or -VDU alias for the - DataDomainVDiskUser parameter.

-LockBoxPath

Specifies the folder that contains the lockbox file, which contains encrypted information about the registered hosts and the corresponding usernames in pairs. Each pair is associated with a password that backups use. You can use the -LB or -LBPath alias for the -LockBoxPath parameter.

-Debug

Specifies to enable the PowerShell debug output. By default, the cmdlet pauses on every debug output.

-DebugLevel <1_through_9>

Restoring Exchange Server Backups

92 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Specifies the debug level for the backup. The default value is 0 (zero). You can use the -DL or -D alias for the -DebugLevel parameter.

-DeleteDebugLogsInDays

Deletes debug log files that are older than the specified number of days. The valid range is between 1 and 32767 By default, debug logs are not deleted. Regularly deleting debug logs prevents the log folder on the installation drive from becoming too large. This parameter only deletes debug logs named in the default format and located in the logs folder at \MSAPPAGENT\logs.

-Verbose

Indicates the verbose output. In this context, the standard output stream of the Microsoft application agent appears. You can use the -vb alias for the -Verbose parameter.

-VeryVerbose {True | False}

Increases the volume of the verbose output. To use this parameter, you must also specify the -Verbose parameter. The default value is False.

-ExeFileName

Specifies the full path to the application program executable, that is, msagentrc.exe. Use this option only to diagnose. In normal operations, the cmdlet automatically locates the installed application.

-AsJob {$true | $false}

Runs the cmdlet as a background job. The command returns an object that represents the job, and then displays the command prompt. You can continue to work in the session during the job. You can use the -AJ or -Job alias for the -AsJob parameter.

-JobName

Specifies a friendly name for the job when you use this parameter with the - AsJob parameter. If you do not specify the -AsJob parameter, the -JobName parameter is ignored. You can use the name to identify the job against other job cmdlets such as, Stop-Job.

Examples of the Mount-ExchangeBackup cmdlet

Example 48 Mount all databases of a backup using a backup object

Mount-ExchangeBackup -Backup $backups[0] -ClientName ledmf175.msapp.com -DataDomainHost ledmd035.lss.example.com - DataDomainHostPath /SU_DD163 -DataDomainUser DD163_user

Example 49 Mount all databases of a backup using a backup object and configuration file object

Restoring Exchange Server Backups

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 93

Example 49 Mount all databases of a backup using a backup object and configuration file object (continued)

$mount = $serverinfo | Mount-ExchangeBackup -Backup $backups[0]

Example 50 Mount a single mailbox database database3 using a backup object and identity

$mount = $serverinfo | Mount-ExchangeBackup -Backup $backup[0] - Identity database3

Reading the mount object from the Mount-ExchangeBackup cmdlet output The output of the cmdlets to perform mounts (Mount-ExchangeBackup) is an array of EMCExchangeBackupRestore.MountData.ExchangeMount objects, in no particular order.

EMCExchangeBackupRestore.MountData.ExchangeMount object attributes

The following table lists the attributes that the EMCExchangeBackupRestore.MountData.ExchangeMount object contains:

Table 8 Attributes of the EMCExchangeBackupRestore.MountData.ExchangeMount object

Attribute Description

BackupID The DatabaseFileBackupID or LogFilesBackupID from the databases in the backup object.

Bookmark Empty list.

MountPath The full path to the mounted folder, that is, the volume that was backed up. Depending on how the volume is organized, the data of your interest can be in a sub-folder.

OriginalVolumeName Null.

RecoveryGroup Null.

RecoveryPool Null.

ShadowName Null.

SnapshotDeviceObject Null.

SnapshotID Null.

SnapshotSetID Null.

WWN Null.

Output format

The default format of the EMCExchangeBackupRestore.MountData.ExchangeMount object is a table, which contains the MountPath and BackupID columns.

Restoring Exchange Server Backups

94 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Browse and recover granular-level data with ItemPoint for Microsoft Exchange Server

Before you begin

Before you use ItemPoint for granular-level recovery, ensure that the backup is mounted.

About this task

The ItemPoint for Exchange Server User Guide provides more information on performing granular-level recovery of Exchange data.

Procedure

1. Launch ItemPoint.

2. In ItemPoint, launch the Restore wizard.

3. On the Source Selection page, select the source and specify the EDB and log file path from the mounted volume that contains the Exchange backup data as shown in the following figure, and then click Next.

Figure 2 Selecting the source path in ItemPoint for Exchange Server

4. On the Target Selection page, click Skip.

Restoring Exchange Server Backups

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 95

Figure 3 Selecting target path in ItemPoint for Exchange Server

5. Follow the Data Wizard prompts to complete the granular-level recovery.

The ItemPoint for Exchange Server User Guide provides more information.

After you finish

Once the granular-level recovery is complete, dismount the backup.

Managing mounted backups with the Mount Service system tray icon After a mount operation succeeds, the Mount Service system tray icon appears as shown in the following figure.

Figure 4 Mount Service system tray icon

Right-click the Mount Service icon, and select any of the following options to perform corresponding tasks according to your requirement:

l Dismount Backups: Dismounts the mounted backups.

l Mount Details: Lists the mounted backups with mount details.

l Extend Timeout: Extends the timeout of the mount. The default value is 8 hours.

List Exchange Server mounted backups using the Mount Service system tray icon To list the mounted block-based backups, right-click the Mount Service system tray icon, and click Mount Details.

Restoring Exchange Server Backups

96 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Dismount Exchange Server backups using the Mount Service system tray icon To dismount the mounted block-based backups, right-click the Mount Service system tray icon, and then click Unmount Backups.

Performing Exchange Server disaster recovery When a disaster scenario occurs, the Microsoft application agent supports disaster recovery of data located on both a Data Domain server and Data Domain Cloud Tier.

Perform Exchange Server disaster recovery The Microsoft application agent for Application Direct supports disaster recovery.

About this task

To perform a disaster recovery, perform the following steps on the new disaster recovery host.

Procedure

1. Start the Exchange Server application and the required services.

2. Create the databases that existed before the disaster and ensure that the databases are in the mounted state.

3. Perform a restore of the databases.

l For backups located on a Data Domain storage unit, Restoring Exchange Server databases on page 84 provides information.

l For backups located on a Data Domain Cloud Tier device, Perform disaster recovery from the Data Domain Cloud Tier on page 97 provides information.

Perform disaster recovery from the Data Domain Cloud Tier The Microsoft application agent provides a command line tool to complete disaster recovery of save sets that are located in a Data Domain Cloud Tier.

After an Mtree is recovered according to the disaster recovery procedure described in Perform Exchange Server disaster recovery on page 97, you must restore the backup indexes from the Data Domain Cloud Tier.

When the Microsoft application agent moves a backup to the cloud, the index files are maintained on the active tier. A copy of the index files is created and moved to the cloud tier for long-term retention.

After an MTree is restored during a disaster recovery, all the files that resided only on the active tier are lost and unavailable. Only the files that were moved to the cloud are available.

In this case, you must run msagentadmin administration with the --dr- recall parameter to restore the indexes.

After the indexes are recalled to the active tier, the data save sets for the same time range are also recalled unless you type n when prompted with Continue with the recall of the found save sets [y/n]. If you choose to not recall the save sets, you can manually recall the save sets later.

Restoring Exchange Server Backups

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 97

Type the msagentadmin administration command with the following syntax to recall the indexes to the active tier:

msagentadmin.exe administration --dr-recall --ddhost " " --ddpath "<name_and_path_of_storage_unit>" --dduser "<DDBoost_username>" -- appID <application_ID>

where:

--dr-recall

Specifies an operation to recall save sets for disaster recovery. You can use the -M alias for the --dr-recall parameter.

--ddhost " "

Specifies the name of the Data Domain server that contains the storage unit, to which you backed up the databases.

--ddpath "/ "

Specifies the name and the path of the storage unit, to which you backed up the databases.

--dduser " "

Specifies the username of the DD Boost user.

--appID " "

Specifies the application ID (namespace) to locate backups. Specify msapp_bbb for Exchange Server. You can use the -n alias for the --appID parameter.

Consider the following example commands to perform disaster recovery of Exchange Server with data located on a Data Domain Cloud Tier device:

Example 51 Cloud tier disaster recovery recall command without a configuration file

msagentadmin administration --dr-recall --tier --after 1481104962 -- before 1481105533 --appID msapp_bbb --ddhost "10.70.102.111" -- ddpath "/mt1" --dduser "ost" --confirm --client ledmf175.msapp.com --debug 9

Example 52 Cloud tier disaster recovery recall command with a configuration file

msagentadmin.exe administration --dr-recall --tier --after 1481104962 --before 1481105533 --appID msapp_bbb --confirm --config c:\temp\config_pp.txt --debug 9

Optional parameters for the msagentadmin administration command

The following list describes the optional parameters you can use with msagentadmin administration commands.

--config " "

Restoring Exchange Server Backups

98 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

Specifies the full path to the configuration file. You can use the -z alias for the --config parameter.

--lockbox

Specifies the folder that contains the lockbox file, which contains encrypted information about the registered hosts and the corresponding usernames in pairs. Each pair is associated with a password that backups use. If you do not specify a value, the path defaults to the installation path, which is typically C:\Program Files\DPSAPPS\common\lockbox.

--tier

Specifies to display the location of the save sets in either the Data Domain system (active tier) or the Data Domain Cloud Tier.

--client

Specifies the application server hostname that contains the server instance that was backed up. You can use the -c alias for the --client parameter.

--before

Lists only the backups that were taken on or before the given date and time, date, day, or time. If you do not specify a value, the value defaults to the current date and time. For example, now, 3/31/2016 15:00:00, or Tuesday. You can use the -e alias for the --before parameter.

--after

Lists only the backups that were taken on or after the date and time, date, day, or time. For example: 3/31/2016 15:00:00 or Tuesday. You can use the -b alias for the --after parameter.

--limit

Specifies to limit the list results to the specified number.

--debug

Specifies the debug level for listing backups. The default value is 0 (zero). You can use the -D alias for the --debug parameter.

--deleteDebugLog

Deletes debug log files that are older than the specified number of days. The valid range is between 1 and 32767. By default, debug logs are not deleted. Regularly deleting debug logs prevents the log folder on the installation drive from becoming too large. This parameter only deletes debug logs named in the default format and located in the logs folder at \MSAPPAGENT\logs

--help

Prints a brief help message. You can use the -h alias for the --help parameter.

--confirm

Specifies to skip the user confirmation prompts for the operation.

-a " "

Restoring Exchange Server Backups

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 99

Specifies the keyword and value of an option that is also specified in the configuration file. For example, -a "CLIENT= ".

Restoring Exchange Server Backups

100 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

CHAPTER 4

Troubleshooting

This chapter includes the following sections:

l Debug logs for troubleshooting Exchange backup and recovery issues.............102 l Error codes in the msagentadmin administration command output...................102 l App Agent Exchange Admin Configuration tool fails in a parent-child domain...103

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 101

Debug logs for troubleshooting Exchange backup and recovery issues

Use debug log files to troubleshoot issues that occur during Exchange Server backup and recovery operations.

Debug logs are generated when backup and recovery operations are run with a debug level set to 1 or higher. Debug logs contain error messages that help identify issues that occur during a backup or recovery operation.

The debug logs are written to the following folder:

\DPSAPPS \MSAPPAGENT\logs The following table describes the debug log file names for each operation.

Table 9 Debug log file names

Operation Log file name format Example log file name

Backup msagentsv_ .

Recovery msagentrc_ .

Error codes in the msagentadmin administration command output

The Microsoft application agent enables the msagentadmin administration command to report the severity of the error and the unique message IDs that associate with the error.

The following table lists the return codes and description:

Table 10 Return codes and description

Return code Description

0 Success

1 Error or notice

2 Warning

3, 4, or 5 Major error

Only the return code 0 indicates that the operation has succeeded. Other return codes indicate failure.

Note: The return codes are mapped to the severity, which is set when the error occurs. Potential errors, which you cannot control, can occur at any time. The severity of only a few errors are consistently or correctly set. So, use the return codes only as a hint or a guide.

Troubleshooting

102 Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide

App Agent Exchange Admin Configuration tool fails in a parent-child domain

Issue

You cannot create and configure an administrator user account with the App Agent Exchange Admin Configuration tool in a parent-child domain.

Workaround

1. Manually create an administrator user with the required permissions.

2. In the App Agent Exchange Admin Configuration tool, click Configure Admin User.

3. In the App Agent Exchange Admin Configuration - Configure Admin User dialog box, select Configure existing user.

4. In the User Name and Password fields, type the username and the password of the administrator user that you have manually created.

5. Select Skip Active Directory Authentication.

6. Click Configure.

Troubleshooting

Dell EMC PowerProtect Microsoft Application Agent Exchange Server User Guide 103

Troubleshooting </

Manualsnet FAQs

If you want to find out how the 19.1 Dell works, you can view and download the Dell Microsoft App Agent 19.1 Data Protection Exchange Server User Guide on the Manualsnet website.

Yes, we have the Exchange Server User Guide for Dell 19.1 as well as other Dell manuals. All you need to do is to use our search bar and find the user manual that you are looking for.

The Exchange Server User Guide should include all the details that are needed to use a Dell 19.1. Full manuals and user guide PDFs can be downloaded from Manualsnet.com.

The best way to navigate the Dell Microsoft App Agent 19.1 Data Protection Exchange Server User Guide is by checking the Table of Contents at the top of the page where available. This allows you to navigate a manual by jumping to the section you are looking for.

This Dell Microsoft App Agent 19.1 Data Protection Exchange Server User Guide consists of sections like Table of Contents, to name a few. For easier navigation, use the Table of Contents in the upper left corner.

You can download Dell Microsoft App Agent 19.1 Data Protection Exchange Server User Guide free of charge simply by clicking the “download” button in the upper right corner of any manuals page. This feature allows you to download any manual in a couple of seconds and is generally in PDF format. You can also save a manual for later by adding it to your saved documents in the user profile.

To be able to print Dell Microsoft App Agent 19.1 Data Protection Exchange Server User Guide, simply download the document to your computer. Once downloaded, open the PDF file and print the Dell Microsoft App Agent 19.1 Data Protection Exchange Server User Guide as you would any other document. This can usually be achieved by clicking on “File” and then “Print” from the menu bar.