Wednesday, October 26, 2011

DPM–Protecting Exchange (Replica is Inconsistent)

The DPM will not be able to backup the Exchange if the Replica is Inconsistent .

Firstly is to check if the Space Allocated is sufficient in the DPM.  If it’s not then you have to allocate more space or to reduce the short term retention period to gain more space.

I tried to simulate a situation that one of the environment is facing the issue. 

The “Run Eseutil to check data integrity” was checked in the DPM, however the logs in the DPM prompted as “Replica is inconsistent

All protection group activities for the data source will fail until the replica is synchronized with consistency check.  The error would be 0x800700D8 and a reference to ID 30146.

After some investigation, found that the Eseutil.exe and Ese.dll that are installed in the Exchange is different version from the DPM.

So what I did was to copy the Eseutil.exe and Ese.dll files from the Exchange to the
"<drive>:\Program Files\Microsoft Data Protection Manager\DPM\Bin" directory on the Data Protection Manager server

Take note :  One thing to take note is the version of Exchange.  You have to copy the correct version (32-bit or 64-bit) of the Eseutil.exe & Ese.dll to the DPM server.  If have upgraded to the Exchange Service Pack, then you have to copy the latest Eseutil.exe & Ese.dll from the Exchange Server to the DPM directory as mentioned above in green above.

Thank you and hope this helps.  The findings above is from the Technet & Forums.

keynote : DPM, replica inconsistent, replica inconsistent, DPM protecting Exchange 2007, Exchange 2010 replica inconsistent. Error 0x800700D8, ID 30146, Eseutil.exe, Ese.dll. Storage group always “Inconsistent”

Wednesday, October 12, 2011

DPM–Access denied in Windows Explorer after mountvol in CMD

Here I am login in as a domain user  that is also a member of the of the LOCAL ADMINISTRATORS group in a server. 

I manage to MOUNTVOL and assign a letter K to the volume.  It’s for a site-to-site replica manual transfer.  For those of you that is interested in the site-to-site replica manual transfer, it’s in my blog too .

Before I go further, here’s some short explanation on the UAC from Technet :

To help prevent malicious software from silently installing and causing computer-wide infection, Microsoft developed the UAC feature. Unlike previous versions of Windows, when an administrator logs on to a computer running Windows Server 2008, the user’s full administrator access token is split into two access tokens: a full administrator access token and a standard user access token.

During the logon process, authorization and access control components that identify an administrator are removed, resulting in a standard user access token. The standard user access token is then used to start the desktop, the Explorer.exe process.

Because all applications inherit their access control data from the initial launch of the desktop, they all run as a standard user as well.

After an administrator logs on, the full administrator access token is not invoked until the user attempts to perform an administrative task.

Anyway, if you have the LOCAL ADMINISTRATOR’s password you can go through the steps mentioned earlier in my blog.  However, in some situation there’s no way to have the LOCAL ADMINISTRATOR’s password. I’m already assigned as part of the local administrators group.

So after some snooping around and found that the issue is with the User Access Control (UAC).

So what I did is to edit the registry of the DPM server :

MYKUL0750-SCR218

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Change the EnableLUA from 1 to 0

Reboot the server.

Login with the user that is part of the Local Administrators Group.

Perform the steps to MOUNTVOL & then from the Windows Explorer, you can be able to access the volume with the letter assigned.  Copy the necessary data out to external drive to transport out to second site and copy the data from the external drive to the secondary DPM server.

More information on the UAC is in here.

Please note : That should make admins run as admins all of the time. This is dangerous and I would recommend that you enable this feature back on for day to day use.

Thank you & hope this helps you Smile.

keynote : Windows Explorer access denied after MOUNTVOL, mountvol for DPM, replica, manual transfer of site to site, DPM site to site manual data transfer