A Technical Overview of System Center Data Protection Manager 2007 Protecting SQL, Exchange, and other Windows data Oren Cohen Shuki Klainshtain DPM April 30, 2007 שוקי קלינשטיין מנהל פרויקטים תים מחשבים כהן אורן מנהל פרויקטים תים מחשבים

Data Protection Manager (DPM 2007)

Simplified Forefront + System Center IT SecurityIT Management Common Management Infrastructure & Platform Productive Integrated Client Security Application Server Security Network Edge Security Secure Remote Access Change & Configuration Management Backup & Recovery Virtual Machine Management Systems Monitoring

Agenda Customer backup pain Introduction to Data Protection Manager (DPM 2007) Demo :Configure DPM 2007 How does DPM protect Exchange and SQL Demo :Protect MS SQL 2005 Beta 2 additions Closing remarks

Customer Backup Pains Better nightly backups needed Tape is inefficient Lack of application support WAN not feasible for centralized backups Disk-based backup consumes large amounts of space Remote and branch-office data protection is expensive and cumbersome Customers want one vendor to manage everything

Customer Backup Pains Better nightly backups needed Tape is inefficient Lack of application support (Exchange & SQL 200x, Sharepoint) WAN not feasible for centralized backups Disk-based backup consumes large amounts of space Remote and branch-office data protection is expensive and cumbersome Customers want one vendor to manage everything

DPM 2006 Centralized Backup of Branch Offices Rapid & Reliable Recovery — from disk instead of tape End user recovery without IT intervention DPM 2006 Clients Active Directory® File Servers Third-Party Tape DPM 2006 Servers Snapshots

DPM 2007 Continuous Data Protection for Windows Application and File Servers Rapid & Reliable Recovery from disk instead of tape Advanced Technology for enterprises of all sizes DPM 2007 Clients Active Directory® File Servers with Tape Library DPM 2007 Servers Online Snapshots Exchange Servers SQL Servers SharePoint Servers including clusters Disk-based Recovery Offline tape Tape-based Archive Virtual Servers

הדגמה 1: סביבת ניהול מערכת ה DPM 2007 והגדרות בסיסיות

Microsoft systems protection

DPM 2007 Beta 1– Protected Platforms Windows 2003 File Services Exchange 2003 Exchange 2007 SQL Server 2000 SQL Server 2005 DPM HourTime between Synchronizations 64Number of Shadow Copies

DPM 2007 Beta 2– Protected Platforms Windows 2003 File Services Longhorn File Services Exchange 2003 Exchange 2007 SQL Server 2000 SQL Server 2005 DPM 2007 SharePoint 2007 Virtual Server 2005 R2 +SP1 XP & Vista DPM 15 MinTime between Synchronizations 512Number of Shadow Copies

Exchange 2003 Cluster Active Passive Automatic Failover Protection continues seamlessly DPM detects cluster configuration DPM MSCS Exchange 2003 Cluster E2003 Passive-node E2003 Active-node

Exchange 2007 – CCR in DPM BETA-2 Cluster Continuous Replication Redundant exchange servers and redundant databases Can be geo-diverse Databases logs are replicated Node Preferred backup (Secondary) Exchange 2007 CCR Exch2007 Active DPM Exch2007 Passive

Exchange 2007 – LCR Local Continuous Replication One exchange server with redundant copy of database Failover to redundant copy in case of database corruption or drive loss Backup from Active DB drive Exchange 2007 LCR Exchange 2007 Active Backup DPM

SQL Server Mirrored Database SQL DPM Database mirrored SQL cluster SQL Secondary SQL Primary

SQL Server SQL Log Shipping SQL DPM Mirrored Database Log shipping

SQL Server DPM MSCS SQL Cluster SQL Passive-node SQL Active-node Mirrored Database Log shipping MSCS SQL Cluster

SharePoint 2007 Restore Options Restore the Farm ! Config DB Content DB Site & Site Collection

Microsoft Confidential Exchange 2003 Exchange 2007 SQL Server 2005 Virtual Server 2005 R2 sp1 VSSVR Guest OS instances Linux02 NT4-CustomApp Win2003-SQL2005 Virtual Servers

Online backups no downtime VSS consistent inside Windows 2003 sp1 New VM Additions VSS consistent outside VHD VSS writer Virtual Server 2005 R2 sp1 VSSVR Guest OS instances Linux02 NT4-CustomApp Win2003-SQL2005

Virtual Servers Online backups no downtime VSS consistent inside Windows 2003 sp1 New VM Additions VSS consistent outside VHD VSS writer Offline backups Pause virtual machine Save state of CPU (vsv) VSS shadow copy of VHD(s) Un-pause Block level synchronization of VHD changed blocks Virtual Server 2005 R2 sp1 VSSVR Guest OS instances Win2003-SQL2005 Linux02 NT4-CustomApp

Agent deployment options Push Agent – DPM 2006, 2007 beta 1 and beyond Pre-installed OS SMS 2003 System Center Configuration Manager 2007 Group Policy WSUS v3

Media Encryption Encryption defined per Protection Group User defined key Imported into Certificate Server AES/DES 256bit Hardware support via CAPI (Crypto API) Software support

הדגמה 2: הגדרת DPM 2007 בסביבת SQL 2005

Make Sure to Auto-Start the Production Servers’ SQL Server VSS Writer

v2 v2 הדגמה 3: שחזור בסיס נתונים SQL 2005

DPM 2007 – Beta2 additions

Continuous Application Protection Exchange Server SG, database, mailbox & public folder recovery SQL Database protection & recovery SharePoint -- Beta2 feature System State & Bare Metal Recovery -- Beta2 feature v2 v2 Microsoft Application and File Servers with Tape Library DPM Servers

Disk to Disk to Tape (D2D2T) in addition to D2D & D2T Local agent install, SMS/WSUS integration Command Line Interface and PowerShell commandlets Support for protecting servers across trusted domains File/folder exclusions, encrypted files… Media Encryption Protection Groups Other Key Enhancements Microsoft Application and File Servers with Tape Library DPM Servers Online Snapshots Disk-based Recovery Offline tape Tape-based Archive v2 v2

Off-site backups & Disaster Recovery With DPM All data protected at every Sync - 15min Important Data Sync / 4 hours File RPO = daily (63d) App RP = 512 weeks with 15m RP’s dpm2dpm4dr OFFSITE TAPE BACKUP Ability to Backup behind Firewall’s

Top Reasons To Plan for DPM No more failed recoveries 2.Near zero data loss for Exchange, SQL, and SharePoint 3.Seamless Disk-to-Disk-to-Tape for backups 4.Recoveries within minutes instead of hours 5.Unified policy allows protection of multiple data types to any media – in one schedule and with common tuning options 6.Eliminate the backup window of your production servers 7.Shrink potential data loss down to 15 minutes 8.Application recovery direct from backup UI – no pre-staging 9.Enable end-users to perform their own recoveries

DPM 2007 plan DPM 2007 BETA 1 – September 27, 2006 Exchange SQL Integrated Disk & Tape functionality DPM 2007 BETA 2 – May 2007 SharePoint Virtual Server Windows Vista & XP desktops DPM 2 DPM 4 DR – Disaster Recovery System State SCCM (sms 2007) / SMS / WSUS deployment of client Command-line & Windows PowerShell control Bare metal Restore RTM & General Availability – 2007 H2

© 2006 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. DPM תודה ובתאבון