NetBackup105 AdminGuide MSExchg Win
NetBackup105 AdminGuide MSExchg Win
Exchange Server
Administrator's Guide
for Windows
Release 10.5
NetBackup™ for Microsoft Exchange Server
Administrator’s Guide
Last updated: 2024-09-20
Legal Notice
Copyright © 2024 Veritas Technologies LLC. All rights reserved.
Veritas, the Veritas Logo, Veritas Alta, and NetBackup are trademarks or registered trademarks
of Veritas Technologies LLC or its affiliates in the U.S. and other countries. Other names may
be trademarks of their respective owners.
This product may contain third-party software for which Veritas is required to provide attribution
to the third party (“Third-party Programs”). Some of the Third-party Programs are available
under open source or free software licenses. The License Agreement accompanying the
Software does not alter any rights or obligations you may have under those open source or
free software licenses. Refer to the Third-party Legal Notices document accompanying this
Veritas product or available at:
https://www.veritas.com/about/legal/license-agreements
The product described in this document is distributed under licenses restricting its use, copying,
distribution, and decompilation/reverse engineering. No part of this document may be
reproduced in any form by any means without prior written authorization of Veritas Technologies
LLC and its licensors, if any.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq.
"Commercial Computer Software and Commercial Computer Software Documentation," as
applicable, and any successor regulations, whether delivered by Veritas as on premises or
hosted services. Any use, modification, reproduction release, performance, display or disclosure
of the Licensed Software and Documentation by the U.S. Government shall be solely in
accordance with the terms of this Agreement.
Technical Support
Technical Support maintains support centers globally. All support services will be delivered
in accordance with your support agreement and the then-current enterprise technical support
policies. For information about our support offerings and how to contact Technical Support,
visit our website:
https://www.veritas.com/support
You can manage your Veritas account information at the following URL:
https://my.veritas.com
If you have questions regarding an existing support agreement, please email the support
agreement administration team for your region as follows:
Japan [email protected]
Documentation
Make sure that you have the current version of the documentation. Each document displays
the date of the last update on page 2. The latest documentation is available on the Veritas
website:
https://sort.veritas.com/documents
Documentation feedback
Your feedback is important to us. Suggest improvements or report errors or omissions to the
documentation. Include the document title, document version, chapter title, and section title
of the text on which you are reporting. Send feedback to:
You can also see documentation information or ask a question on the Veritas community site:
http://www.veritas.com/community/
https://sort.veritas.com/data/support/SORT_Data_Sheet.pdf
Contents
Configuring the logon account for the NetBackup Client Service ............. 67
Feature Description
Tight NetBackup Tight integration with NetBackup allows for the following:
integration
■ An administrator already familiar with NetBackup procedures and software can easily
configure and use NetBackup to perform Exchange Server backup and restore operations.
■ Features and strengths of the NetBackup product suite are available to the Exchange
Server backup user. These features include software data compression and encryption,
scheduled and user-directed operations, backups of multiple data streams, and in-line
tape copy.
Central administration Administrators can define, back up, and restore Exchange Servers and other NetBackup
client computers from a central location.
Media management Exchange Server backups can be saved directly to a wide variety of storage devices that the
NetBackup primary server supports.
Minimal backup time An administrator has the choice of to perform full or incremental backups. A full backup may
take considerable time, so it may be performed infrequently. In the interim, any updates that
occurred since the full backup can be quickly and incrementally backed up through a
transaction log backup. In the event of a failure, the full backups and incremental backups
would be restored.
During recovery, the Exchange Server updates the databases and applies each of the logged
transactions to the database. After the Exchange Server recovery completes, the system is
brought back to the state as it existed when the last incremental backup was performed.
Exchange Server NetBackup supports all Exchange Server backup methods: full backups, cumulative
Backup methods incremental backups, and differential incremental backups. User backups function as copy
backups.
Online backups Exchange Server data and transaction logs can be backed up without taking the Exchange
Server offline. Exchange services and data remain available during the Exchange Server
backup.
Automated backups Administrators can set up schedules for automatic, unattended backups for local or remote
clients across the network. These backups can be full or incremental and are managed
entirely by the NetBackup server from a central location. The administrator can also manually
back up the clients.
Restore operations An administrator using the Backup, Archive, and Restore interface can browse backups and
select the ones to be restored.
Introducing NetBackup for Exchange 12
Features of NetBackup for Exchange
Feature Description
Support for VMware Users can create consistent full backups of virtual machines running Exchange Server. By
backups that protect default, NetBackup provides protection of the active databases in a DAG. You can restore
Exchange Exchange databases and individual database objects from a VMware image. NetBackup
provides support for VMware policies that use Replication Director to manage snapshots and
snapshot replicas (storage lifecycle policy).
Exchange standalone NetBackup for Exchange supports backups of Exchange standalone servers and Database
server and DAG Availability Groups (DAGs). VSS is the only backup Microsoft supports for Exchange backups.
support
For a DAG, NetBackup supports backups of the active and the passive VSS writer of a
Database Availability Group (DAG). When NetBackup backs up the data that is replicated
the benefit is that I/O effect is reduced on the active Exchange server. NetBackup accesses
the replicated data and leaves the active (or live) Exchange server alone. NetBackup can
back up the passive copy on a specific server, based on the list of preferred servers.
Enhancements to For snapshot backups, NetBackup uses the Microsoft consistency check API to check the
consistency checks of consistency of databases and transaction logs and to provide additional details. This speeds
snapshot backups up a snapshot backup, because it allows the backup to proceed in parallel with the consistency
check. For an Exchange DAG, you can disable the consistency check or ignore the check
and continue with the backup.
Snapshot backups and NetBackup for Exchange can perform Exchange backups and restores with snapshot
restores methodology. With a separate Snapshot Client license, you can perform off-host backups,
Instant Recovery backups, and backups with a hardware provider.
Restores of individual When a backup uses GRT, users can restore individual mailbox and public folder items
items using Granular directly from any full database backup.
Recovery Technology
See “About Exchange backups and Granular Recovery Technology (GRT)” on page 44.
(GRT)
Redirected restores of You can restore mailboxes, mailbox folders, mailbox messages, public folders, and public
mailbox objects folder items to a new location.
Redirected restores of Backups can be restored to another database on the local server or on a different server.
databases
Support for NetBackup NetBackup Accelerator can potentially increase the speed of full VMware backups. By reducing
Accelerator with the backup time, it is easier to perform the VMware backup within the backup window.
VMware backups Accelerator support for Exchange currently restricts backups to the full schedule type. This
restriction also exists for a VMware backup that protects Exchange without Accelerator.
Introducing NetBackup for Exchange 13
NetBackup for Exchange terminology
Feature Description
Compression of Compression increases backup performance over the network and reduces the size of the
backups backup image that is stored on the disk or tape. NetBackup does not support GRT for any
backups that use compression.
Encryption The encryption feature encrypts the backup for the clients that are listed in the policy.
NetBackup does not support GRT for any backups that use encryption.
Cluster support The NetBackup for Exchange Server agent supports clustered Exchange servers; however,
the agent is not cluster-aware. For information on the cluster solutions that are supported
with Exchange Server, refer to your Exchange documentation.
Multi-tenant Backup and recovery of Exchange Server databases are fully supported in a multi-tenant
environments environment. NetBackup does not support restoring mailbox items into tenant mailboxes in
a multi-tenant Exchange environment. To recover items pertaining to a tenant mailbox, redirect
the recovery to a non-tenant mailbox.
Exchange Server, Exchange In the NetBackup for Microsoft Exchange Server documentation, “Microsoft
Exchange Server” is referred to as “Exchange Server” or “Exchange”.
Granular Recovery Technology (GRT) Allows a user to restore individual mailbox and public folder items from full
database backups.
Microsoft consistency check API Refers to the Microsoft CHKSGFILS API or interface.
Account for NetBackup Exchange An Active Directory user account that is associated with a unique Exchange
operations mailbox that has sufficient roles or group memberships to perform backups
and restores.
NetBackup File System daemon The NetBackup File System daemon on the NetBackup media server is a
(NBFSD) process that allows NetBackup clients to mount, browse, and read nbtar
images. This process is used with a client for GRT operations. These
operations include backups, browsing for backup images, restores, and
duplication.
NetBackup for Microsoft Exchange In the NetBackup for Microsoft Exchange Server documentation, “NetBackup
Server for Microsoft Exchange Server ” is referred to as “NetBackup for Exchange
Server” or “NetBackup for Exchange”.
Introducing NetBackup for Exchange 14
NetBackup for Exchange terminology
Snapshot Refers to backups and restores performed with snapshot technology. In the
NetBackup for Exchange Server documentation, “VSS” is synonymous with
“snapshot”.
VSS Refers to the software provider used to perform snapshot backups and
restores. In the NetBackup for Exchange Server documentation, “snapshot”
is synonymous with “VSS”.
Chapter 2
Installing NetBackup for
Exchange
This chapter includes the following topics:
Step 1 Verify the operating system and See “Verifying the operating system and platform compatibility”
platform compatibility. on page 16.
Installing NetBackup for Exchange 16
Verifying the operating system and platform compatibility
Step 2 Verify the NetBackup software See “NetBackup server requirements for NetBackup for
requirements for NetBackup for Exchange” on page 17.
Exchange.
See “NetBackup client requirements for NetBackup for
Exchange” on page 17.
Step 3 Verify the Exchange software See “Exchange server software requirements for NetBackup for
requirements for NetBackup for Exchange” on page 18.
Exchange.
Step 4 For snapshot operations, verify the See “Snapshot Client configuration and licensing requirements
requirements for this type of backup. for Exchange snapshot backups” on page 18.
Step 5 For VMware backups that protect On each ESX server that hosts the database, add the NetBackup
Exchange Server, verify the for Exchange license and the Enterprise Client license.
requirements for this type of backup.
Install the NetBackup client software on the virtual machines
that have Exchange running.
See “Installing the Veritas VSS provider for vSphere” on page 20.
Step 6 Verify that primary server has a valid See “License for NetBackup for Exchange” on page 20.
license for NetBackup for Exchange
and any NetBackup options.
3 For information on support for Snapshot Client, see the Snapshot Client section
in the following document:
Hardware and Cloud Storage Compatibility List (HCL).
4 For information on support for VMware, see the following document:
Support for NetBackup in a Virtual Environment
■ For VMware operations, when you upgrade the client software you must install
the latest version of the Veritas VSS provider. If you have an existing version
of the provider, you must first uninstall the old version.
■ If you use Veritas Storage Foundation for Windows (SFW), verify that you have
the supported software level.
■ The following snapshot options or Exchange configurations require a separate
Snapshot Client license:
■ Instant recovery
■ Off-host backups
■ Backups using a hardware provider
A Snapshot Client license is not required for any Exchange snapshot backups
that use the Microsoft default provider or SFW.
■ Additional installation requirements apply for Instant Recovery and off-host
backups.
See “Requirements for Exchange off-host backups” on page 19.
See “Requirements for Exchange Instant Recovery backups” on page 20.
■ If you want to restore individual items from database backups (granular recovery),
additional installation requirements apply and other configuration is necessary.
See “Configuring an Exchange backup that uses Granular Recovery Technology
(GRT) (non-VMware backups)” on page 50.
To use the Veritas VSS provider you must install it manually following installation
of the NetBackup for Windows client. If the VMware VSS provider is installed, the
installation program removes it and may require a restart of the computer.
To install the Veritas VSS provider
1 Browse to the following location:
install_path\Veritas\NetBackup\bin\goodies\
For a NetBackup cluster, a valid license for NetBackup for Exchange must exist on
each node where NetBackup server resides.
Chapter 3
Configuring Exchange
client host properties
This chapter includes the following topics:
■ Exchange properties
■ About backing up all or only uncommitted Exchange transaction log files with
snapshot backups
Note: For clustered or replicated environments you must configure the same
settings on each node. If you change the attributes for the virtual name of the
client, only the DAG host server is updated.
Exchange properties
To access this setting, in the web UI select Hosts > Host properties. Select the
Windows client. If necessary click Connect, then click Edit client. Click Windows
client > Exchange.
The Exchange properties apply to the currently selected Windows client . For
clustered or replicated environments, configure the same settings for all nodes. If
you change the attributes for the virtual server name, only the DAG host server is
updated.
For complete information on these options, see the NetBackup for Exchange Server
Administrator's Guide.
The Exchange host properties contain the following settings.
Configuring Exchange client host properties 24
Exchange properties
Property Description
See “About backing up all or only uncommitted Exchange transaction log files
with snapshot backups” on page 25.
You can specify a different Windows system to act as a proxy for the source client
when you duplicate or browse a backup (with bplist) that uses GRT. Use a
proxy if you do not want to affect the source client or if it is not available.
See “About truncating Exchange transaction logs with Instant Recovery backups”
on page 27.
Perform consistency check Disable this option if you do not want to perform a consistency check during a
before backup with Microsoft DAG backup. If you select Continue with backup if consistency check fails,
Volume Shadow Copy Service NetBackup continues to perform the backup even if the consistency check fails.
(VSS)
See “About consistency checks options for an Exchange backup” on page 28.
Configuring Exchange client host properties 25
About backing up all or only uncommitted Exchange transaction log files with snapshot backups
Property Description
Provide the credentials for the account for NetBackup Exchange operations. This
account must have the necessary permissions to perform Exchange restores.
The permissions that are required depend on the Exchange version that you have.
The account also needs the right to “Replace a process level token.”
See “About the Exchange credentials in the client host properties” on page 28.
See “About configuring the account for NetBackup Exchange operations with the
right to Replace a process level token” on page 35.
See “About using the command line to browse or restore Exchange granular backup
images” on page 138.
NetBackup determines the granular proxy host in the following order:
■ The host that is specified with the -granular_proxy option on the command
line
■ The granular proxy host that you specify in the host properties for the source
client
■ The source client
To specify a proxy, configure the Exchange granular proxy host in the Exchange
properties for the client. More information is available about how to configure the
client host properties.
See “Configuring Exchange client host properties” on page 22.
See “Creating a minimal NetBackup account for Exchange operations” on page 33.
Note the following:
■ In NetBackup 10.0 and later, credentials are stored in the Credential Management
System (CMS).
See “Reviewing the auto-discovered mappings” on page 40.
■ To use GRT, configure the Exchange credentials on all granular clients.
Alternatively, you can configure the Exchange credentials only on the granular
clients that perform restores. In this case, for the entire domain add “Exchange
Servers” to the “View-Only Organization Management” role group. Perform this
configuration in the Exchange Administration Center (EAC) or in Active Directory.
See the following Microsoft article for more information:
http://technet.microsoft.com/en-us/library/jj657492
See “Configuring an Exchange backup that uses Granular Recovery Technology
(GRT) (non-VMware backups)” on page 50.
See “Configuring Granular Recovery Technology (GRT) with a VMware backup
that protects Exchange” on page 142.
■ The account that you configured for the Exchange credentials must also have
the right to “Replace a process level token.”
See “About configuring the account for NetBackup Exchange operations with
the right to Replace a process level token” on page 35.
■ For database restores from VMware backups, the Exchange credentials that
you provide must have permissions to restore VM files.
■ If you want to restore from a VMware snapshot copy that was created with
Replication Director, do the following:
■ Provide the Exchange credentials in the Domain\user and Password fields.
■ Configure the NetBackup Client Service with an account that has access to
the CIFS shares that are created on the NetApp disk array.
See “Configuring NetBackup with access to the CIFS share on the NetApp
disk array” on page 149.
■ If you specify the minimal NetBackup account for the Exchange credentials in
the client host properties, NetBackup can back up only active copies of the
Exchange databases. If you select Passive copy only in the Exchange
database backup source field when you create a policy, any backups fail. The
failure occurs because the Microsoft Active Directory Service Interface does not
provide a list of database copies for a minimal account.
Chapter 4
Configuring the account
for NetBackup for
Exchange operations
This chapter includes the following topics:
■ About configuring the account for NetBackup Exchange operations with the right
to Replace a process level token
perform backups and restores. Use the account for NetBackup Exchange operations
for the Exchange credentials in the Exchange client host properties.
Step 1 Perform the following steps on the applicable In a cluster or replicated environment, perform the
Exchange granular clients. steps on each database node in the cluster.
Step 2 On the applicable Exchange granular clients, Configure the account as follows:
create an Exchange mailbox for NetBackup (or
■ Veritas recommends that you create a uniquely
account for NetBackup Exchange operations).
named mailbox. Verify that this mailbox is not
hidden.
■ See the specific procedure for the Exchange
version you have.
See “Creating a privileged NetBackup user
account for EWS access” on page 32.
See “Creating a minimal NetBackup account
for Exchange operations” on page 33.
Step 3 Configure the account with the right to “Replace See “About configuring the account for NetBackup
a process level token.” Exchange operations with the right to Replace a
process level token” on page 35.
Step 4 On the applicable Exchange granular clients, See “About the Exchange credentials in the client
configure the Exchange credentials with the host properties” on page 28.
account you created previously.
To use EWS to restore individual items, the client throttling policy should be modified
for the resource credentials you specify for the restore job. The client throttling
policy is located on the destination client and enforces connection bandwidth and
activity limits on the Exchange server. When NetBackup executes under a highly
privileged account, it automatically creates a throttling policy and assigns it to the
account. NetBackup cannot perform these actions with an account with minimal
privileges. In that case, you need to create and assign the throttling policy when
you set up the account.
If the user account is a domain administrator or Exchange organization administrator,
NetBackup also creates an impersonation role and a role assignment for Exchange
Impersonation. Exchange Impersonation role assignment associates the
impersonation role with the NetBackup resource credentials you specify for the
restore job. NetBackup creates and assigns the following roles:
■ SymantecEWSImpersonationRole
■ SymantecEWSImpersonationRoleAssignment
A minimal NetBackup user account does not have the privilege to make these
assignments. Follow the instructions to create this type of account.
Note: If you specify the minimal NetBackup account for the Exchange credentials
in the client host properties, NetBackup can back up only active copies of the
Exchange databases. If you select Passive copy only in the Exchange database
backup source field when you create a policy, any backups fail. The failure occurs
because the Microsoft Active Directory Service Interface does not provide a list of
database copies for a minimal account.
If the policy specifies Passive copy if available, or use active copy in the
Exchange database backup source field, NetBackup backs up the active copy
of each database.
Note: If the account does not have the necessary privileges, an administrator
needs to perform these tasks.
Where NetBackupUser is the name of the Active Directory account you created
in 1.
Configuring the account for NetBackup for Exchange operations 35
About configuring the account for NetBackup Exchange operations with the right to Replace a process level
token
6 To perform restores with Granular Recovery Technology (GRT), also run the
following commands with the Exchange Management shell:
7 Provide the credentials for this account in the Exchange client host properties.
See “About the Exchange credentials in the client host properties” on page 28.
8 Configure this account with the right to “Replace a process level token.”
See “About configuring the account for NetBackup Exchange operations with
the right to Replace a process level token” on page 35.
To configure the account for NetBackup Exchange operations with the right
to Replace a process level token (Local Security Policy)
1 Open the Local Security Policy.
2 Click Local Policies.
3 In the User Rights Assignment, add the account for NetBackup Exchange
operations to the Replace a process level token property.
4 Run the group policy update command (group policy update) for this change
to take effect:
gpupdate /Force
Table 5-1 Example entries for Exchange hosts for a non-VMware backup
(continued)
Table 5-2 Example entries for Exchange hosts for a VMware backup
(continued)
■ For an Exchange Database Availability Group (DAG), each node in the DAG is
associated with the DAG name.
These mappings are configured in the Security > Host mappings node in the
NetBackup web UI. You can also use the nbhostmgmt command to manage the
mappings. See the NetBackup Security and Encryption Guide and NetBackup Web
UI Administrator's Guide for more details.
client01.lab04.com client01
client01.lab04.com clustername
client01.lab04.com clustername.lab04.com
client02.lab04.com client02
client02.lab04.com clustername
client02.lab04.com clustername.lab04.com
4 Review the mappings for the host and click Approve if you want to use the
discovered mappings.
For example, if the following mappings are valid for client01.lab04.com, then
you approve them.
5 When you finish approving the valid mappings for the hosts, click on the Hosts
tab.
For hosts client01.lab04.com and client02.lab04.com, you see entries
for Mapped host or IP address that are similar to the following:
6 If you need to add a mapping that NetBackup did not automatically discover,
you can add it manually.
■ About installing and configuring Network File System (NFS) for Exchange
Granular Recovery
■ Disabling the cataloging for duplications of Exchange backups that use Granular
Recovery Technology (GRT)
You can restore individual items using GRT from the following types of backups:
■ Full or user-directed backups
NetBackup lets you create a complete policy for disaster recovery, with all the
various types of schedules. However, you cannot restore individual items from
an incremental backup.
■ VMware backups that protect Exchange
■ Local snapshot backups
■ Off-host snapshot backups
■ Instant recovery backups, when the schedule copies the snapshot to a storage
unit
■ Replica snapshot backups
This type of backup applies to a Database Availability Group (DAG).
■ The clients must have the same version of Windows as the client from which
the backup is made.
■ If you use an Exchange granular proxy server, the mailbox servers and the proxy
host must also meet the following additional requirements:
■ Have the same NetBackup version
■ Use the same NetBackup primary server
■ Both use a Windows version that is supported for that version of Exchange
See the Application/Database Agent Compatibility List for more information.
Step 1 Verify that you have a supported Exchange Server See the Application/Database Agent Compatibility
configuration and have a media server platform that List.
supports GRT.
See the Software Compatibility List (SCL).
Step 2 Ensure that requirements are met for the NetBackup See “NetBackup server requirements for NetBackup
server and the Exchange Server software. for Exchange” on page 17.
Step 3 Determine which clients require configuration and See “Exchange granular clients and non-VMware
ensure that requirements are met for the NetBackup backups ” on page 45.
clients.
See “NetBackup client requirements for NetBackup
for Exchange” on page 17.
Step 5 Enable or configure NFS for your environment on the See “About configuring Services for Network File
following: System (NFS)” on page 53.
■ All granular clients See “Configuring a UNIX media server and Windows
■ The NetBackup media server clients for backups and restores that use Granular
Recovery Technology (GRT)” on page 64.
Configuring Exchange Granular Recovery 51
Configuring an Exchange backup that uses Granular Recovery Technology (GRT) (non-VMware backups)
Step 6 On all Exchange mailbox servers, create an account See “About configuring the account for NetBackup
for Exchange operations (a unique mailbox) for Exchange operations” on page 30.
NetBackup.
Step 7 On all Exchange mailbox servers, configure the Use the credentials for the account for NetBackup
Exchange credentials. Exchange operations.
http://technet.microsoft.com/en-us/library/jj657492
Step 8 Create a MS-Exchange-Server policy as follows: See the NetBackup Hardware compatibility list.
■ Select a supported disk storage unit. For more information on how to create a policy with
■ Select Enable granular recovery on the GRT, see the following:
Attributes tab. See “About configuring snapshot backups of
Exchange Server” on page 86.
Step 9 On the NetBackup server, configure the mappings For backups in a DAG or cluster or if you use a proxy
for distributed application restores. host or off-host client, you must map the application
hosts and component hosts in your environment. For
example, each DAG node must be able to access a
backup image using the DAG name. Configure these
mappings in the Distributed application restore
mapping host property on the primary server.
Step 10 On the NetBackup server, review the auto-discovered In certain scenarios, a NetBackup host has additional
mappings for the hosts in your environment. host names or shares a particular name with other
hosts. For example, each DAG node must be mapped
to the DAG name. Approve each valid
auto-discovered mapping that NetBackup discovers
in your environment. Perform this configuration in the
Security > Host mappings node in NetBackup web
UI.
Step 1 Configure NFS on the media Before you configure NFS, review the requirements for the media server.
server.
See “Exchange granular operations and the NetBackup media server”
on page 49.
On the media server do the following:
See “Enabling Services for Network File System (NFS) on a client” on page 57.
Configuring Exchange Granular Recovery 54
About installing and configuring Network File System (NFS) for Exchange Granular Recovery
3 In the Add Roles and Features Wizard, on the Before You Begin page, click
Next.
Configuring Exchange Granular Recovery 55
About installing and configuring Network File System (NFS) for Exchange Granular Recovery
5 Click Next.
6 On the Server Selection page, click Select a server from the server pool
and select the server. Click Next.
Configuring Exchange Granular Recovery 56
About installing and configuring Network File System (NFS) for Exchange Granular Recovery
7 On the Server Roles page, expand File and Storage Services and File and
iSCSI Services.
8 Click File Server and Server for NFS. When you are prompted, click Add
Features. Click Next.
9 If the media server is also an Exchange client, on the Features page, click
Client for NFS. Click Next.
Configuring Exchange Granular Recovery 57
About installing and configuring Network File System (NFS) for Exchange Granular Recovery
3 In the Add Roles and Features Wizard, on the Before You Begin page, click
Next.
Configuring Exchange Granular Recovery 59
About installing and configuring Network File System (NFS) for Exchange Granular Recovery
5 Click Next.
6 On the Server Selection page, click Select a server from the server pool
and select the server. Click Next.
3 Click Services.
4 In the right pane, right-click on Server for NFS and click Stop.
5 In the right pane, right-click on Server for NFS and click Properties.
Configuring Exchange Granular Recovery 62
About installing and configuring Network File System (NFS) for Exchange Granular Recovery
6 In the Server for NFS Properties dialog box, from the Startup type list, click
Disabled.
7 Click OK.
8 Repeat this procedure for the media server and for each Exchange granular
client.
3 Click Services.
4 In the right pane, right-click on Client for NFS and click Stop.
5 In the right pane, right-click on Client for NFS and click Properties.
Configuring Exchange Granular Recovery 64
About installing and configuring Network File System (NFS) for Exchange Granular Recovery
6 In the Client for NFS Properties dialog box, from the Startup type list, click
Disabled.
7 Click OK.
HKEY_LOCAL_MACHINE\SOFTWARE\Veritas\NetBackup\CurrentVersion\Config
More information is available on the disk storage units that are supported with GRT.
See NetBackup Enterprise Server and Server - Hardware and Cloud Storage
Compatibility List.
Duplication of a backup that uses Granular Recovery Technology (GRT) takes extra
time. NetBackup requires this extra time to catalog the granular Exchange
information. You can choose not to catalog the granular information so that the
duplication is performed more quickly. However, then users are not able to browse
for individual items on the image that was duplicated if the disk copy expires.
During the duplication process, NetBackup writes log entries periodically to show
the progress of the job.
To disable the cataloging of Exchange backups that use Granular Recovery
Technology
1 Open the NetBackup web UI and sign into the primary server.
2 On the left, click Host > Host properties.
3 Select the primary server.
4 If necessary, click Connect. Then click Edit primary server.
5 Click General server.
6 Uncheck Enable message-level cataloging when duplicating Exchange
images that use Granular Recovery Technology.
7 Click Save.
Configuring Exchange Granular Recovery 67
Cataloging an Exchange backup or VMware backup that uses Granular Recovery Technology (GRT)
See the NetBackup Command Reference Guide for the options that may apply.
For example, without options this command operates on all images within a default
date range. This command works only on the primary copy of an Exchange image
or Exchange view of a VMware image.
If you specify a granular proxy host with the bpduplicate command, configure the
Exchange hosts in the primary server host properties.
See “Configuring mappings for restores of a distributed applications, clusters, or
virtual machines ” on page 37.
By default, the NetBackup Client Service uses “Local System” account to log on.
A different account, called the account for NetBackup Exchange operations, is
required for GRT operations. This account gives NetBackup permissions to perform
Exchange backups and restores. See the following topics for information on how
to create this account.
See “Creating a privileged NetBackup user account for EWS access” on page 32.
Configuring Exchange Granular Recovery 68
Configuring the logon account for the NetBackup Client Service
See “Creating a minimal NetBackup account for Exchange operations” on page 33.
Note the following when you configure the logon account for the NetBackup Client
Service:
■ Configure the NetBackup Client Service with the credentials for the account for
NetBackup Exchange operations.
See “About configuring the account for NetBackup Exchange operations”
on page 30.
■ Configure each client that performs granular operations. To determine which
clients to configure, see the following topics:
See “Exchange granular clients and non-VMware backups ” on page 45.
See “Exchange granular clients and VMware backups” on page 47.
■ If you use Replication Director to manage your VMware snapshots and snapshot
replication, different configuration is required. You cannot configure the
NetBackup Client Service with the credentials for the NetBackup Exchange
operations account.
See “About configuring a VMware backup that protects Exchange Server, using
Replication Director” on page 146.
■ If you use NetBackup for Exchange on a SAN client, use the same account for
the NetBackup Client Service and the SAN Client Fibre Transport Service. The
account must also be a local administrator. Alternatively, you can provide the
Exchange credentials in the client host properties. In that case, you do not need
to use the same credentials for the SAN Client Fibre Transport Service.
To configure the logon account for the NetBackup Client Service
1 Open the Windows Services application.
2 Double-click on the NetBackup Client Service entry.
3 Click on the Log On tab.
4 Provide the name of the account for NetBackup Exchange operations. To
change the Log on as account, you must have administrator group privileges.
The account must include the domain name, followed by the user account,
domain_name\account. For example, recovery\netbackup.
5 Type the password.
6 Click OK.
7 Stop and start the NetBackup Client Service.
8 Close the Services control panel application.
Chapter 7
Configuring Exchange
backup policies
(non-VMware)
This chapter includes the following topics:
A backup policy for a database defines the backup criteria for a specific group of
one or more clients.
These criteria include the following:
■ Storage unit and media to use
■ Policy attributes
■ Backup schedules
■ Clients to be backed up
■ Items (database objects) to be backed up
Configuring Exchange backup policies (non-VMware) 71
About configuring a backup policy for Exchange Server
Table 7-1 Example policy that backs up all databases in an Exchange DAG
Daily Incremental
Enable granular recovery Optional. Enable this option if you want to restore individual
mailbox and public folder objects from the database backup.
Configuring Exchange backup policies (non-VMware) 72
About configuring a backup policy for Exchange Server
Table 7-1 Example policy that backs up all databases in an Exchange DAG
(continued)
You can include multiple clients on the Clients tab. The client
names are the DAG names.
Table 7-2 Example policy that backs up a database for an Exchange DAG
Daily Incremental
Enable granular recovery Optional. Enable this option if you want to restore individual
mailbox and public folder objects from the database backup.
You can only include one client on the Clients tab. A DAG
is the client for the policy.
Refer to the following recommendations when you create policies for an Exchange
standalone server:
■ Create a policy that backs up the Information Store or individual databases. This
policy supports full, incremental, and user-directed backups.
■ To perform a backup with Granular Recovery Technology (GRT), select the
Enable granular recovery option.
You can restore databases and individual mailbox and public folder items. You
cannot restore individual mailbox or public folder items from any incremental
backups that use GRT.
■ The example policies include the basic policy settings for an Exchange backup.
For information on how to create snapshot backup policies, see the following:
See “About configuring snapshot backups of Exchange Server” on page 86.
Configuring Exchange backup policies (non-VMware) 73
About configuring a backup policy for Exchange Server
Daily Incremental
Enable granular recovery Optional. Enable this option if you want to restore individual
mailbox and public folder objects from the database backup.
Daily Incremental
Enable granular recovery Recommended. Enable this option if you want to restore
individual mailbox and public folder objects from the database
backup.
Attribute Description
Policy type Determines the types of clients that can be backed up with the policy. For Exchange
databases, select the policy type MS-Exchange-Server.
Policy storage Note that in a Database Availability Group (DAG) environment where the Exchange server
is a both a client and a media server, policy storage is treated differently. If you want to back
up to the local Exchange client that is also a media server, specify a storage unit group.
NetBackup automatically selects the local storage unit from the storage unit group during the
backup processing. If you specify a single storage unit, all backups use this storage unit.
Allow multiple data Specifies that NetBackup can divide automatic backups for each client into multiple jobs.
streams Each job backs up only a part of the list of backup selections. The jobs are in separate data
streams and can occur concurrently. The number of available storage units, multiplex settings,
and the maximum jobs parameters determine the total number of streams and how many
can run concurrently. Not all directives in the backup selections list allow for multiple database
streams.
Enable granular Allows restores of individual items using Granular Recovery Technology (GRT). Users can
recovery only restore individual items from a full backup. (You can perform incremental backups using
GRT, but the backup does not save granular information and you cannot restore individual
items from an incremental backup.)
You can restore individual items only if the backup image resides on a disk storage unit. If
you want to retain a granular backup on tape, you must duplicate the image. If you want to
restore from a granular backup that was duplicated to tape and the disk image expired, you
must duplicate it back to a disk storage unit.
If you expire all the copies of the backup image and then import the data files back into the
catalog, the mailbox lists are not re-created and you can no longer use that image for granular
restore.
See “Disk storage units supported with Exchange Granular Recovery Technology (GRT)”
on page 65.
Keyword phrase A textual description of a backup. Useful for browsing backups and restores.
Configuring Exchange backup policies (non-VMware) 75
About configuring a backup policy for Exchange Server
Table 7-5 Policy attribute for NetBackup for Exchange policies (continued)
Attribute Description
Snapshot Client and This group contains the options that enable backups with Snapshot Client and Replication
Replication Director Director.
For Exchange backups, you must enable the option Perform snapshot backups for all
backup policies. For VMware backups, this option is enabled automatically.
See “About configuring a VMware backup that protects Exchange Server” on page 141.
See “Configuring VMware application backups that use Replication Director” on page 148.
Microsoft Exchange Indicates what database backup source you want to use for a DAG. You can also indicate a
Server DAG preferred server list.
See “Exchange database backup source for a Database Availability Group (DAG) backup ”
on page 93.
See “Configuring a preferred server list for a Database Availability Group (DAG)” on page 93.
Full backup This schedule type backs up the Exchange Server database and associated transaction
logs. Exchange truncates all committed transaction logs after NetBackup notifies it that the
backup succeeded. In replicated environments, the truncation is scheduled and does not
occur immediately.
By default, transaction logs are not truncated for Instant Recovery backups. You can enable
the truncation of logs for this type of backup or you can perform a backup to a storage unit.
See “About truncating Exchange transaction logs with Instant Recovery backups” on page 27.
Differential incremental Includes the changes since the last full or differential incremental backup. After NetBackup
backup notifies it that the backup succeeded, Exchange truncates all committed transaction logs.
The truncation of the transaction logs sets the context for the next backup.
For backups of databases or the entire Information Store, the backup only includes the
transaction logs. Individual items cannot be restored for this type of backup if Enable granular
recovery is enabled.
To perform a full restore the data that is needed is contained in multiple NetBackup images.
One image for the full backup and another image for each differential incremental that was
performed.
Cumulative incremental Includes the changes since the last full backup or differential incremental backup. (However,
backup most configurations do not mix cumulative and differential incremental backups between
full backups.) Exchange does not truncate the logs when the backup is completes. When
a series of cumulative incremental backups follows a full backup, transaction logs remain
intact since the last full backup.
For backups of databases or the entire Information Store, the backup only includes the
transaction logs. Individual items cannot be restored for this type of backup if Enable granular
recovery is enabled.
Consider an Exchange Server data recovery scenario where the transaction logs are all
intact. You only need to restore the database from the last full backup and the last
cumulative-incremental backup. During recovery, Exchange Server replays all the logs that
are in the log folder.
Configuring Exchange backup policies (non-VMware) 77
About configuring a backup policy for Exchange Server
User backup A user backup is not automatically scheduled and is initiated on the target client computer.
It is like a snapshot (or a copy backup) of the databases at a given point in time. This backup
does not affect the content of ongoing full and incremental backups.
You may want to consider creating a separate policy for user backup schedule types. Then
you can easily separate user-directed and scheduled backups when you restore files. If you
decide to create separate policies for user backup schedule types, the considerations are
similar to those for automatic backups. A backup selections list is not needed because users
select the files to restore.
Schedule properties
This topic describes the schedule properties that have a different meaning for
database backups than for file system backups. Other schedule properties vary
according to your specific backup strategy and system configuration. Additional
information about other schedule properties is available. See the NetBackup
Administrator’s Guide, Volume I.
Property Description
Type of backup Specifies the type of backup that this schedule can control. The selection list shows only
the backup types that apply to the policy you want to configure.
Schedule type You can schedule an automatic backup in one of the following ways:
■ Frequency
Frequency specifies the period of time that can elapse until the next backup operation
begins on this schedule. For example, assume that the frequency is 7 days and a
successful backup occurs on Wednesday. The next full backup does not occur until the
following Wednesday. Typically, incremental backups have a shorter frequency than full
backups.
■ Calendar
The Calendar option lets you schedule the backup operations that are based on specific
dates, recurring week days, or recurring days of the month.
Property Description
Retention Specifies a retention period to keep backup copies of files before they are deleted. The
retention level also denotes a schedule priority within the policy. A higher level has a higher
priority. Set the time period to retain at least two full backups of your database. In this way,
if one full backup is lost, you have another full backup to restore. For example, if your
database is backed up once every Sunday morning, you should select a retention period
of at least 2 weeks.
■ Restores can be redirected to either a DAG virtual name or the physical node
name.
Note: In a backup policy, include directives from only one directive set. For example,
do not add Microsoft Exchange Database Availability Groups:\ (a DAG
directive) and Microsoft Information Store:\ (a standalone database directive)
to the same policy.
Table 7-8 NetBackup for Exchange Server directive sets and directives
Table 7-8 NetBackup for Exchange Server directive sets and directives
(continued)
MS_Exchange_ NEW_STREAM
Database_
Microsoft Exchange Database
Availability_Groups
Availability Groups:\
8 Click Add.
For more information on the multiple data streams feature, see the NetBackup
Administrator’s Guide, Volume I.
Note: Use explicit NEW_STREAM directives in a DAG only when you are confident
which servers will back up which databases.
Question mark (?) Use as a substitute for one or more characters in a name.
Left & right brackets ([ ... ]) These wildcard characters are not supported for the
Microsoft Information Store:\ directive or for
the Microsoft Exchange Database Availability
Groups:\ directive.
The following rules apply when wildcard characters are used in the backup selections
list:
■ Only one wildcard pattern per backup selections list entry is allowed.
■ If a wildcard pattern is not honored it is treated literally.
■ Wildcard patterns are honored only in the final segment of the path name. For
example:
Microsoft Information Store:\*
Microsoft Information Store:\Database*
Microsoft Information Store:\Data??se
Microsoft Exchange Database Availability Groups:\*
Microsoft Exchange Database Availability Groups:\Database*
Microsoft Exchange Database Availability Groups:\Data??se
See “Performing Exchange backups with multiple data streams” on page 81.
For more information on how to create an exclude list see one of the following:
■ See “Configuring exclude lists for Exchange clients” on page 84.
■ NetBackup Administrator’s Guide, Volume I
NetBackup excludes certain files and directories by default. These default exclusions
always appear in the exclude list.
You can exclude specific databases from a backup, both for the databases that
exist in a DAG or on a standalone Exchange server. You can specify the exclude
list for all policies or for a specific policy or schedule.
Table 7-10 provides an example of the Exchange entries that you can add to an
exclude list.
8 (Conditional) Repeat step 3 through step 7 for the other nodes in the
environment.
Perform this step if the NetBackup environment is clustered or replicated.
If you specify the name of the virtual client, only the DAG host server is updated.
For the changes to be effective throughout the cluster, repeat the configuration
steps on each node.
The database transaction log for the Information Store is named EXXYYYYYYYY.log.
XX is the database number (in hex). YYYYYYYY is the log file number (in hex).
The size of the transaction logs is 1 MB.
After every 1 MB of transaction log data is written, a new log is created. The log is
created even though the transaction data may not be committed to the database.
There may be several transaction logs that contain uncommitted data, therefore
they cannot be purged.
Transaction logs get committed to their database over time or when the services
are brought down. Any transactions that existed in log files and not in the database
file are committed to the database.
Do not manually purge log files. Instead, purge logs through the backup process.
For backups of a replicated copy (DAG), the log truncation is scheduled. It starts
with the active copy when Exchange has the resources to start truncation. It does
not happen instantly after a backup as with non-replicated copies.
For information on how transaction logs are truncated, see the following topics:
See “NetBackup for Exchange backup types” on page 75.
See “Adding schedules for Exchange Instant Recovery” on page 102.
Step 1 Review the configuration and the licensing See “Snapshot Client configuration and licensing
requirements for snapshot backups. requirements for Exchange snapshot backups”
on page 18.
Step 2 Additional configuration is required if you want to See “Configuring an Exchange backup that uses
restore mailbox items from a database backup (using Granular Recovery Technology (GRT) (non-VMware
Granular Recovery Technology or GRT). backups)” on page 50.
Step 3 If you want to perform off-host backups, review the See “Requirements for Exchange off-host backups”
installation requirements for that type of backup. on page 19.
Configuring Exchange backup policies (non-VMware) 87
About configuring snapshot backups of Exchange Server
Step 4 Review the general configuration requirements for See “Configuration requirements and
snapshot operations. recommendations for the Exchange Server when
performing snapshot operations” on page 89.
Step 5 Review the configuration requirements for Exchange See “Configuration requirements and
Server. recommendations for the Exchange Server when
performing snapshot operations” on page 89.
Step 6 Choose which transaction logs to back up. See “About backing up all or only uncommitted
Exchange transaction log files with snapshot backups”
on page 25.
Step 8 Configure an MS-Exchange-Server policy that has See “Configuring a snapshot policy for Exchange
the applicable snapshot attributes selected. Server” on page 90.
Step 9 For a Database Availability Group (DAG), choose See “Exchange database backup source for a
whether to back up the passive or the active copy. Database Availability Group (DAG) backup ”
You can also define a preferred server list from which on page 93.
to back up the passive copy.
See “Configuring a preferred server list for a
Database Availability Group (DAG)” on page 93.
Snapshot backup A snapshot is a disk image of the client's data. NetBackup backs
up the data from the snapshot volume, not directly from the client’s
original volume. Client operations and user access are allowed to
continue without interruption during the backup.
Makes the backups available for recovery from the local disk. The
snapshot can also be the source for an additional backup copy to
tape or other storage.
To perform an Instant Recovery, one of the following methods is
used:
■ Files are copied back from the snapped volume to the original
volume
■ The volume is rolled back
Off-host backup Shifts the burden of backup processing onto a separate backup
agent, reducing the backup impact on the client’s computing
resources. The backup agent sends the client’s data to the storage
device.
■ Data movers are not supported with off-host backups. Only alternate clients are
supported for off-host backups.
Management Tools on the alternate client. NetBackup performs the backup faster
with this configuration. If the Exchange System Management Tools are not installed
on the alternate client, the following occurs:
■ If you choose not to install the Exchange System Management Tools, the backup
may fail. You must install the VC9 run-time DLLs on the alternate client. These
DLLs can be downloaded from Microsoft x64 VC9 download page:
http://www.microsoft.com/downloads/details.aspx?familyid=BD2A6171-E2D6-4230-
B809-9A8D7548C1B6&displaylang=en
■ bpfis logs a message. The message indicates that the DLL cannot be loaded
and that eseutil is used for the consistency check.
■ NetBackup performs the consistency check during the snapshot import step.
More information is available about configuring consistency checks.
See “About consistency checks options for an Exchange backup” on page 28.
16 Use the Backup selections tab to enter the directives or browse for Exchange
objects.
Off-host backups with the SFW VSS provider require that you back up objects
only on the same SFW disk group.
17 Click Save.
Provider Type 0-auto The VSS Provider is automatically selected based on the providers
available for the snapshot volumes.
2-software Currently, the only software VSS Provider that is supported is SFW. If
this provider is not in control of one of the volumes that is required for
the backup, the backup fails.
3-hardware The applicable hardware VSS Provider is used for the volumes. If a
hardware provider is not available for one of the volumes that is required
for the backup, the backup fails.
Snapshot Attribute 0-unspecified The setting for this option depends on the configuration of the snapshot
volume.
1-differential
2-plex
Maximum Snapshots This option defines the number of snapshots that is retained for Instant
(Instant Recovery Recovery. When this threshold is reached, a snapshot is automatically
only) snapped back or deleted, depending on the VSS provider and its
configuration before another snapshot backup is performed.
Select a number that is appropriate for the number of volumes that you
have available to become snapshot volumes for your backup. If you use
the Microsoft VSS Provider, consider the amount of disk space available
for the virtual snapshots that it creates.
Configuring Exchange backup policies (non-VMware) 93
About configuring snapshot backups of Exchange Server
Passive copy only (or This option backs up the passive copy of a database or passive
passive copy from server if the database is all of the following: mounted, included in
preferred server list) the backup selections list, and healthy. For a DAG, you must also
configure a preferred server list. In that case, NetBackup backs
up the passive copy on a server in the preferred server list,
provided that the database meets the other criteria.
Active copy only This option backs up the active copy of a database or active server.
The preferred server list is ignored.
Passive copy if This option backs up the passive copy of a database or the passive
available, or use active server that is all of the following: mounted, included in the backup
copy selections list, and healthy. For a DAG, you can also configure a
preferred server list. In that case, NetBackup backs up the passive
copy on a server in the preferred server list, provided that the
database meets the other criteria. If the passive copy is not
available and healthy, NetBackup backs up the active copy.
You can let NetBackup choose the best server from which to back up the replicated
database copies or you can designate a preferred server list. Designating a preferred
server list gives you more control over your backup jobs. For example, you can
configure a list of preferred servers that are local to avoid having to back up
replicated data over your WAN. You can arrange the servers in order of preference.
Or you may have one node of a DAG that contains passive copies for all or most
of your databases and that is also a fast media server. Add only this server to your
preferred list to make the backup more efficient.
For each replicated database you select for backup, NetBackup picks a server as
follows:
■ The server is the one from which NetBackup most recently attempted to back
up the database.
■ The backup attempt on the server was successful.
NetBackup tracks the success or failure of backup attempts to determine which
Exchange node to perform a passive copy database backup from.
See “Backup status for Exchange Database Availability Groups (DAGs) and the
preferred server list” on page 95.
■ The server is included in the preferred server list.
If this algorithm does not choose a server, the database is not backed up. A message
appears in the progress log that identifies each database that is skipped for this
reason.
To configure a preferred server list
1 Open the NetBackup web UI.
2 Click the Attributes tab.
3 In the Microsoft Exchange Server DAG group, from the Exchange database
backup source list select Passive copy only.
See “Exchange database backup source for a Database Availability Group
(DAG) backup ” on page 93.
4 Click Edit preferred server list.
5 For the Server name, type the fully qualified domain name (FQDN) of the DAG
node you want to add to the list.
6 Click Add.
7 Add any other DAG nodes.
8 Use the Actions menu to indicate the order in which you want NetBackup to
select the servers.
9 Click Save.
Configuring Exchange backup policies (non-VMware) 95
About configuring snapshot backups of Exchange Server
If the last backup was successful and the NetBackup uses that same server.
last backup server exists in the preferred
server list...
If the last backup was successful but the NetBackup chooses a server from the list
last backup server does not exist in the based on the order they appear.
preferred server list...
If the last backup attempt failed... NetBackup chooses a server from the list
based on the order they appear. The last
failed server is effectively pushed to the
bottom of the list.
If no backup status exists for a database... NetBackup chooses a server from the list
based on the order they appear.
If no backup status exists for a database NetBackup ranks the health of the passive
copies of a database to determine the
and
server.
if the preferred server list is not configured
or if no servers in the preferred server list
are relevant for an Exchange database...
To have NetBackup use a particular server for the subsequent passive copy
database backup attempt, change the backup status for the database. Indicate that
the last successful backup came from the desired server with the following command:
bpclient -client DAG_Name -update -exdb
database_name:server_name:0:0:0
Configuring Exchange backup policies (non-VMware) 96
About configuring Instant Recovery backups of Exchange Server
Step 2 Review the configuration and the licensing See “Snapshot Client configuration and licensing
requirements for snapshot backups. requirements for Exchange snapshot backups”
on page 18.
Step 3 Review the installation requirements for Instant See “Requirements for Exchange Instant
Recovery backups. Recovery backups” on page 20.
Step 4 Review the general configuration requirements See “Configuration requirements and
for snapshot operations. recommendations for the Exchange Server
when performing snapshot operations”
on page 89.
Step 5 Review the configuration requirements for See “About configuration requirements for the
Exchange Server for Instant Recovery Exchange Server when you use Instant
operations. Recovery” on page 99.
Step 6 Choose which transaction logs to back up. See “About backing up all or only uncommitted
Exchange transaction log files with snapshot
backups” on page 25.
Step 7 Review the backup policy recommendations for See “Policy recommendations for Exchange
Instant Recovery backups. Instant Recovery” on page 98.
Step 8 Configure an MS-Exchange-Server policy that See “Configuring an Exchange snapshot policy
has the Instant Recovery attribute selected and with Instant Recovery” on page 100.
the Snapshot Client options that you want.
Volume rollback The entire volume is rolled back, or resynchronized, by using the
snapshot. This method overwrites the entire volume with the
snapped volume.
File copy back Individual files are copied back from the snapped volume to the
current volume.
To determine if a volume can be rolled back, checks are made to insure that the
same list of files exists in the following places:
■ The snapshot volume is compared with the cataloged list of files to restore.
These lists must match exactly. An example of a difference is a file that was
included in the snapshot, but was not cataloged because it is not an Exchange
file. The snapshot is not rolled back because that action overwrites the
non-Exchange file. Exchange files also may exist on the snapshot but not in the
catalog if the backup did not include all the databases on the volume.
■ The snapshot volume is compared with the current volume. All files on the current
volume must also exist in the snapshot. If there is a file that is not on the
snapshot, a rollback is not performed because that action does not restore that
file.
In both comparisons, NetBackup excludes certain files from consideration. For
example, unneeded Exchange transaction logs, files Exchange re-generates, or
any files that are artifacts of the NetBackup process. The bppfi log shows when
such a file difference is found and excluded from consideration.
The copy-back restore method is used in the following situations:
■ If the system provider is used and the snapshot selected for restore is not the
most recent snapshot
Configuring Exchange backup policies (non-VMware) 98
About configuring Instant Recovery backups of Exchange Server
Schedule 3: Every No This schedule provides fast, temporary backups because the
4 hours snapshot is not copied to the storage unit. In the Snapshot Client
group, click Options and set Maximum Snapshots to a small
number.
15 After you add all the clients, schedules, and backup selections you need, click
Save.
5 Click OK.
6 To close the dialog box, click OK.
Type of Backup Full or user Snaps the volumes that contain the Exchange database, system, and log
files.
Configuring Exchange backup policies (non-VMware) 103
About configuring Instant Recovery backups of Exchange Server
Differential or Snaps the volumes that contain the Exchange system and log files.
cumulative Differential backups require that the transaction logs are backed up to a
incremental storage unit and kept on the Instant Recovery snapshot volume. (Select the
Snapshots and copy snapshots to a storage unit option.)
Retention One week - infinity The retention level indicates the maximum time that the Instant Recovery
snapshot is retained. For full backups, select a retention level that ensures
a full backup is always available for restore. The snapshot can be deleted
before that time if the snapshot volume is required for another backup
attempt.
NetBackup creates a disk snapshot and backs up the client’s data to the
storage unit that is specified for the policy. This option is required if you want
to perform Instant Recovery backups with Granular Recovery Technology
(GRT).
Transaction logs are deleted when the backup (full or differential) to the
storage unit has completed.
Snapshots only The image is not backed up to tape or to other storage. NetBackup creates
a persistent snapshot only. Note that this persistent snapshot is not
considered a replacement for traditional backup.
Transaction logs are not deleted for this schedule option. To delete
transaction logs, you must perform a backup to a storage unit. Alternatively,
you can configure NetBackup to delete logs for any full Instant Recovery
backups that are snapshot only.
Note: A manual backup creates a real backup. Exchange logs are truncated, if
appropriate.
Option Description
NetBackup server To change the NetBackup server that you want to perform the
backup operation, select another server from the drop-down list.
8 In the All Folders pane, select the objects you want to back up.
See Table 8-4 on page 109.
For a DAG, you cannot select a specific server in the Backup, Archive, and
Restore interface from which to perform the backup. If you want to use a specific
server, specify it in the Preferred server list.
See “Exchange database backup source for a Database Availability Group
(DAG) backup ” on page 93.
All databases in the DAG, regardless of what server they reside on, are
displayed.
9 Click Actions > Backup.
10 In the Backup Files dialog box, click Start Backup.
11 To view the progress of the backup, click Yes.
If you do not want to view the progress of the backup, click No.
■ If you initiate a redirected restore from a NetBackup client, the destination client
must have permission to restore from the source client. See the NetBackup
Administrator’s Guide, Volume I for the configuration that is needed for a
redirected restore.
■ The following situations require that the clients have the same version of
Windows, as follows:
■ When you redirect a restore to a different client
■ When you select a destination client other than the source client when you
browse the backup image
another database in the same DAG the same destination client as the source
client. NetBackup redirects the restore to the
server that hosts the active copy of the
database.
another database in a different DAG the DAG name where the target database
exists. NetBackup redirects the restore to the
server that hosts the active copy of the
database.
the original client that performed the backup you do not need to change the client
Performing restores of Exchange Server, mailboxes, and public folders 113
About restoring Exchange database data
a different client the client you want from the list. If necessary,
first add the client name to the list.
backup set. Select the following options when you restore the last incremental
backup set: Commit after last backup set is restored and Mount database
after restore.
Option Description
Roll-Forward Retains the existing transaction logs. Exchange replays transaction logs that are part of the
Recovery (Replay all restore operation, followed by any transaction logs that currently exist.
log files)
See “About existing Exchange Server transaction logs” on page 114.
Point-in-Time Restores the database(s) and replaces only the transaction logs that existed at the time of
Recovery (Replay backup.
only restored log
A restore may require a full backup and one or more incremental backups. You can select
files)
all of the images and perform the restore in one job. Or you can restore each backup image
separately. In the latter case, only enable Point-in-Time Recovery for the first job. Otherwise,
each point-in-time recovery deletes the transaction logs from the preceding restore jobs.
Option Description
Dismount database Dismounts the database(s) before the restore begins. By default this option is not selected.
prior to restore
This option also sets the Database can be overwritten by a restore flag.
Note: Use this option with caution. Ensure that you selected the correct database to restore
before you choose to dismount it with this option.
Commit after last This option should only be set on the last job of a multi-job restore. This option enables the
backup set is restore operation to play through log files and roll back any uncompleted transactions. If this
restored option is not selected, the database needs to be mounted manually after the restore.
If Commit after last backup set is restored is selected when an intermediate backup is
applied, you cannot restore further backups. You must restart the restore operation from the
beginning.
Mount database after Mount database after restore is automatically selected if Commit after last backup set
restore is restored is selected. Otherwise, this option is disabled.
7 From the NetBackup History pane, click the backup image that contains the
objects you want to restore as follows:
■ The last full backup or user-directed backup
■ The last full backup and all subsequent differential backups
■ The last full backup and the last cumulative backup
8 In the All Folders pane, choose the objects you want to restore.
■ For restores from a VMware policy, Exchange databases are displayed
under the node Microsoft Exchange Database Availability Groups. You
can restore the following objects:
■ The Database Availability Group.
Expand Microsoft Exchange Database Availability Groups and select
DAG_Name. When you select this object, NetBackup restores all the
databases.
■ Databases.
Expand Microsoft Exchange Database Availability Groups >
DAG_Name > Microsoft Information Store. Then select the
database(s) and log files you want to restore.
6 From the NetBackup History pane, click the backup image that contains the
objects you want to restore as follows:
■ The last full backup or user-directed backup
■ The last full backup and all subsequent differential backups
■ The last full backup and the last cumulative backup
7 In the All Folders pane, select the objects you want to restore, as follows:
■ The Microsoft Information Store.
Click the checkbox next to the computer name or the Microsoft Information
Store.
■ Databases.
Expand the Microsoft Information Store node. Then select the database(s)
and log files you want to restore.
http://technet.microsoft.com/en-us/library/dd298159.aspx
2 The database or the recovery database must already exist.
To restore to the RDB, create the RDB on an Exchange server, if necessary.
Leave the RDB dismounted.
3 Open the Backup, Archive, and Restore interface.
4 Click File > Select Files and Folders to Restore > from Normal Backup.
5 Click File > Specify NetBackup Machines and Policy Type.
6 In the Specify NetBackup Machines and Policy Type dialog box, provide
the following information:
Server to use for backups Select the server that performed the restore.
and restores
Destination clients for To restore to another database in the same DAG, leave
restores the destination client the same as the source client.
NetBackup redirects the restore to the server that hosts
the active copy of the database.
Server to use for backups Select the server that performed the restore.
and restores
Destination clients for To restore to the RDB on a different server, change the
restores destination client to the Exchange server that hosts the
RDB. This client must be the Exchange server that hosts
the database to which you want to redirect the restore.
Also review the notes and limitations for redirecting to
a different client.
eseutil /r E0n /i
Character Translation
~ ~0
Performing restores of Exchange Server, mailboxes, and public folders 128
About restoring individual Exchange mailbox and public folder items
Character Translation
/ ~1
\ ~2
■ Exchange Server provides a feature to retain deleted items for a period of time
after you “permanently” delete them. Because the deleted items still exist,
Performing restores of Exchange Server, mailboxes, and public folders 129
About restoring individual Exchange mailbox and public folder items
NetBackup includes them in the backup image. NetBackup displays these items
when you browse the granular backup image and you can restore these items.
■ NetBackup does not support restoring mailbox items into tenant mailboxes in a
multi-tenant Exchange environment. To recover items pertaining to a tenant
mailbox, redirect the recovery to a non-tenant mailbox.
Table 9-4 Restore options for restores of Exchange Server mailbox objects
of public folder objects
Option Description
Do not restore the Does not restore mailbox messages if they already exist.
message(s)
Overwrite the Replaces the existing message with the one from the backup.
message
Note: Browse time for a backup that uses Granular Recovery Technology may take
longer than for a non-granular backup image. The media server gathers granular
information at this time and wait times may vary. Depending on the load on the
media server, you may need to increase the Client read timeout value. This option
is located in the Client host properties in the Timeouts tab.
Note: Do not restore in the same restore job any backups that use Granular
Recovery Technology with any backups that do not.
Performing restores of Exchange Server, mailboxes, and public folders 130
About restoring individual Exchange mailbox and public folder items
8 In the All Folders pane, select objects you want to restore from the following:
■ Mailboxes
■ Mailbox folders
■ Mailbox objects
■ Public folders
■ Documents in a public folder
You can ignore the DLLs folder.
Performing restores of Exchange Server, mailboxes, and public folders 131
About restoring individual Exchange mailbox and public folder items
All objects appear as folders and messages. You can identify some
non-message objects by the subject line. For example, if you create a Calendar
event named Appointment1, that name appears in the subject line for that
object.
However, some objects such as Forms and Views do not have a subject line
(even though they can be named). They may not be so easily identified.
9 Click Actions > Restore.
Performing restores of Exchange Server, mailboxes, and public folders 132
About restoring individual Exchange mailbox and public folder items
Caution: Public Folders require Publisher Editor permissions at the folder level on
the target folder to allow restore to another folder.
9 On the Microsoft Exchange tab, select the restore options you want.
See “Options for restores of Exchange Server mailbox objects or public folder
objects” on page 129.
■ When you restore public folders, change the public folder name to the folder
to which you want to restore. This folder does not have to exist.
8 On the Microsoft Exchange tab, select the restore options you want.
See “Options for restores of Exchange Server mailbox objects or public folder
objects” on page 129.
9 On the General tab, click Restore individual folders and files to different
locations option.
Each row under Restore individual folders and files to different locations
is associated with an individual folder, message, or document.
10 Double-click a row to modify the restore destination.
Performing restores of Exchange Server, mailboxes, and public folders 138
About restoring individual Exchange mailbox and public folder items
11 In the New Destination box, indicate the mailbox or folder where you want to
restore the object(s).
To redirect a mailbox folder or message, the destination can be any existing
mailbox or mailbox folder. To redirect a public folder or document, the
destination can be a new or existing public folder. You must indicate an explicit
path (or full path).
For example, consider that you want to restore the contents of Inbox in Mailbox
1 to the folder Other in the same mailbox. Specify one of the following in the
Destination box:
12 Click OK.
13 Click Start Restore.
■ Use the “-granular_proxy” option with the bpduplicate command or the bplist
command to specify a proxy host for a duplication operation
See “Configuring the Exchange granular proxy host” on page 26.
The following example shows how you can specify a proxy host with the bplist
command:
■ From one VMware backup, choose from these restore options: Disk-level restore,
file-level recovery, database restore, or granular-level restore (GRT).
Point-in-time restores are not supported.
■ Restore to the recovery database or another database.
■ Restore and recover databases from VMware backups to alternate clients. The
target destination client can be a physical computer or a virtual machine.
can then be significantly reduced. Accelerator support for database agents currently
restricts backups to the full schedule type.
To periodically establish a new baseline of change detection on the client, create
a separate policy schedule with the Accelerator forced rescan option enabled.
For more details on Accelerator with VMware backups, see the NetBackup for
VMware Administrator's Guide.
Step 1 If you want to restore individual mailbox and public See “Configuring Granular Recovery Technology
folder items from the VMware backup, review the (GRT) with a VMware backup that protects
requirements for granular recovery. Exchange” on page 142.
Step 2 Configure a VMware policy. See “Configuring a VMware backup policy to protect
Exchange Server” on page 144.
Step 3 On the NetBackup server, configure the mappings For backups in a DAG or cluster or if you use a
for distributed application restores. proxy host, you must map the application hosts and
component hosts in your environment.
Step 4 On the NetBackup server, review the In certain scenarios, a NetBackup host has
auto-discovered mappings for the hosts in your additional host names or shares a particular name
environment. with other hosts.
Step 1 Verify that you have a supported Exchange Server See the Application/Database Agent Compatibility
configuration and have a media server platform that List.
supports GRT.
See the Software Compatibility List (SCL).
Protecting Exchange Server data with VMware backups 143
About configuring a VMware backup that protects Exchange Server
Step 2 Determine which clients require configuration and See “Exchange granular clients and non-VMware
ensure that requirements are met for the NetBackup backups ” on page 45.
clients.
See “NetBackup client requirements for NetBackup
for Exchange” on page 17.
Step 4 On all granular clients, enable or configure NFS for In a cluster or replicated environment, perform the
your environment. steps on each database node in the cluster. For an
Exchange DAG, configure the nodes that browse for
backups. This configuration is not needed to capture
the data during backups of the virtual machine.
Step 5 On all granular clients, create an account for Make sure that the account is a local administrator
Exchange operations (a unique mailbox) for and has the right to replace a process level token on
NetBackup. each server.
Step 6 On all granular clients, configure the Exchange See “About the Exchange credentials in the client
credentials. host properties” on page 28.
Step 7 Create a policy as follows: For complete details on how to configure Replication
Director with VMware backups, see the NetBackup
■ Select the VMware policy type.
Replication Director Solutions Guide.
■ Select a supported disk storage unit.
See “Configuring VMware application backups that
use Replication Director” on page 148.
Protecting Exchange Server data with VMware backups 144
About configuring a VMware backup that protects Exchange Server
Step 8 On the NetBackup server, configure the mappings For backups in a DAG or cluster or if you use a proxy
for distributed application restores. host, you must map the application hosts and
component hosts in your environment.
Step 9 On the NetBackup server, review the auto-discovered In certain scenarios, a NetBackup host has additional
mappings for the hosts in your environment. host names or shares a particular name with other
hosts.
7 If you want to exclude certain disks from the VMware backup, click the Exclude
disks tab.
NetBackup excludes those disks from the VMware backup that protects
Exchange Server. Be sure that any disks that you exclude do not contain
database data.
8 Click Save to save the policy.
If you do not want to truncate transaction logs, no further action is necessary.
If you want to truncate transaction logs, continue with step 9.
Protecting Exchange Server data with VMware backups 146
About configuring a VMware backup that protects Exchange Server, using Replication Director
Step 1 Configure your VMware environment and add the See the NetBackup for VMware Administrator's Guide.
necessary licenses.
On each ESX server that hosts the database, add the
NetBackup for Exchange license and the Enterprise
Client license.
Step 2 Install the Veritas VSS provider. See “Installing the Veritas VSS provider for vSphere”
on page 20.
Step 3 Create a storage lifecycle policy (SLP). See the NetBackup Replication Director Solutions
Guide.
Step 4 Configure the NetBackup Client Service to log on To browse and restore granular items in the VMware
with an account that has access to the NetApp backup snapshot copy, you must configure the logon
filer. account for NetBackup Client Service.
Step 5 If you want to restore individual mailbox and public See “Configuring granular recovery for VMware
folder items from the VMware backup, review the application backups that use Replication Director”
requirements for granular recovery. on page 147.
Step 6 Configure a VMware policy with an SLP storage See “Configuring VMware application backups that
unit and enable Replication Director. use Replication Director” on page 148.
Step 7 On the NetBackup server, configure the mappings For backups in a DAG or cluster or if you use a proxy
for distributed application restores. host, you must map the application hosts and
component hosts in your environment..
Step 8 On the NetBackup server, review the In certain scenarios, a NetBackup host has additional
auto-discovered mappings for the hosts in your host names or shares a particular name with other
environment. hosts.
Step 1 Verify that you have a supported Exchange Server Application/Database Agent Compatibility List
configuration and have a media server platform that
Software Compatibility List (SCL)
supports GRT.
Step 2 On all Exchange mailbox servers, create an See “About configuring the account for NetBackup
Exchange mailbox for NetBackup (or account for Exchange operations” on page 30.
NetBackup Exchange operations).
Protecting Exchange Server data with VMware backups 148
About configuring a VMware backup that protects Exchange Server, using Replication Director
Step 3 On all Exchange mailbox servers, configure the Configure the Exchange credentials with the account
Exchange credentials. you created in the previous step.
To configure NetBackup with access to the CIFS shared on the NetApp disk
array
1 Open the Windows Services application.
2 Double-click on the NetBackup Client Service entry.
3 Click on the Log On tab.
4 Add the account that has access to the CIFS shares that are created on the
NetApp disk array. To change the Log on as account, you must have
administrator group privileges.
The account must include the domain name, followed by the user account,
domain_name\account. For example, recovery\netbackup.
5 Type the password.
6 Click OK.
7 Stop and start the NetBackup Client Service.
8 Close the Services control panel application.
General notes
Note the following for VMware backups that protect Exchange.
■ The backup history is not saved for a VMware application backup of Exchange.
It does not apply with VMware backups because NetBackup protects only the
databases whose active copy is on the virtual machine.
Protecting Exchange Server data with VMware backups 151
About restoring Exchange data from a VMware backup
■ When you restore Exchange from a VMware backup, you can recover to a
recovery database, another database, or an alternate server (the target server
can be a virtual computer or physical computer.). You cannot perform a
point-in-time restore.
HKEY_LOCAL_MACHINE\SOFTWARE\Veritas\NetBackup\CurrentVersion\Agents
■ Dynamic enforcement of path length limit for Exchange backups and restores
operations. Debug logging is also available for Exchange Server backup and restore
operations.
See the following topics for information on how to create the logs and how to control
the amount of information written to the logs.
See “Enabling the debug logs for a NetBackup for Exchange client automatically”
on page 155.
See “Debug logs for NetBackup for Exchange backup operations” on page 155.
See “Debug logs for NetBackup for Exchange restore operations” on page 156.
See “Setting the debug level on a NetBackup for Exchange Windows client”
on page 160.
After you determine the cause of the problem, disable debug logging by removing
the previously created debug logging directories. Details are available on the
contents of these debug logs.
See the NetBackup Logging Reference Guide.
Additional information about NetBackup client logs and NetBackup primary server
logs is available.
See the online help for the Backup, Archive, and Restore interface.
See the NetBackup Administrator’s Guide, Volume I.
Note: When debug logging is enabled, the files can become large. The same files
are used by normal file backups.
install_path\NetBackup\logs\mklogdir.bat
■ bpbkar
For off-host backups, the bpbkar log exists on the alternate client.
■ bpfis
For off-host backups, the bpfis log exists on the alternate client and the primary
client
■ nbdisco
For discovery information, review this log on all mailbox clients. On the primary
server NetBackup logs information for the discovery database in
install_path\NetBackup\db\discovery.
■ bpbkar
■ bpfis
■ nbdisco
For discovery information, review this log on all mailbox clients. On the primary
server NetBackup logs information for the discovery database in
install_path\NetBackup\db\discovery.
■ ncfnbcs
For ASC issues and failures, this log is created on the VM that is backed up.
■ bpbkar
■ bpresolver
This log is written to the DAG node. To determine the DAG host server node, see
the following:
See “Finding the current host server of the Database Availability Group (DAG)”
on page 165.
For details on both unified logging and legacy logging, see the NetBackup Logging
Reference Guide.
■ beds
■ bpcd
This log appears on the destination or the proxy client. It applies to GRT browse
operations.
■ bpdbm
■ bpbrm
This log appears on the media server.
■ bprd
■ nbfsd
This log appears on the client and the media server. This log does not apply for
browse and restore operations from VMware snapshot copies (using Replication
Director).
■ ncflbc
This log is for nblbc.exe. It appears on the destination client or proxy client.
■ ncfgre
This log is for nbgre.exe. It appears on the destination client.
Troubleshooting backups and restores of Exchange Server 158
About NetBackup for Exchange debug logging
■ bpbkar
■ bpdbm
■ bprd
■ bpresolver
This log is written to the DAG node or other destination client, if specified. To
determine the active node, see the following:
See “Finding the current host server of the Database Availability Group (DAG)”
on page 165.
HKEY_LOCAL_MACHINE\SOFTWARE\Veritas\NetBackup\CurrentVersion\Config
to:
BeVssRequestor.exe -pre2 -logscreen !SkipExReplica! !SkipSQL!
!VMBackupType! !ExcludeList! -log
to:
BeVssRequestor.exe -post2 -logscreen !SkipExReplica! !SkipSQL!
!VMBackupType! !ExcludeList! -log
To set the debug level for the processes that use unified logging on a
NetBackup for Exchange client
1 Newer NetBackup processes such as ncfgre use Veritas Unified Logging
(VxUL). To increase VxUL logging level, run the following:
install dir\NetBackup\bin\vxlogcfg -a -p 51216 -o OID -s
DebugLevel=6 -s DiagnosticLevel=6
For a list of all OID values, see the NetBackup Logging Reference Guide.
2 To reset the VxUL logging level default value, run the following command:
install dir\NetBackup\bin\vxlogcfg -a -p 51216 -o OID -s
DebugLevel=1 -s DiagnosticLevel=1
■ A status 1 error may occur for a GRT-enabled backup if the granular processing
operations failed to complete successfully. The job details under the Activity
Monitor or error log should indicate if this failure is what caused the status 1.
Look at the bpbkar debug log for more information.
■ Technical Support may want nbfsd logs from the media server. Use the Verbose
setting carefully as the nbfsd log can grow very large.
To display the Backup Status database, enter one of the following commands from
the NetBackup primary server:
bpclient -client host_name -EXDB
where host_name is the name of the DAG. The output from this command is as
follows:
Troubleshooting backups and restores of Exchange Server 166
Troubleshooting VMware backups
To reset the Backup Status database for a particular Exchange database, enter
the following command:
For example:
Issue Explanation
A database backup fails. Databases are cataloged and protected only if the configuration is supported for VMware
backups.
NetBackup is installed on an excluded Windows boot disk. The ASC job detects this
type of disk and treats it like an independent disk. Do not select the Exclude boot disk
option if NetBackup is installed on the boot drive (typically C:).
Troubleshooting backups and restores of Exchange Server 167
Troubleshooting VMware backups
Issue Explanation
ASC job produces a status 1 You selected databases for backup that exist on both supported and on unsupported
(partially successful). disks. See “A database backup fails” for unsupported disk information.
The Application State Capture When the ASC job fails, the VMware snapshot or backup continues. Application-specific
(ASC) job fails and the data cannot be restored.
databases are not protected.
You disabled the Enable virtual Machine quiesce option.
Database objects are on a VHD disk. No objects in the backup are not cataloged,
including those that do not exist on the VHD.
You excluded any data disks from the VMware policy, on the Exclude disks tab. Be
sure that any disks that you exclude do not contain database data.
The VMware disk layout has changed since the last discovery. In this situation, you
must force NetBackup to rediscover virtual machines by lowering the value of the
Reuse VM selection query results for option. See the NetBackup for VMware
Administrator's Guide.
You cannot use a VMware incremental policy to protect Exchange Server. However,
the VMware backup job is successful.
You can recover the entire You did not select the Application protection option Microsoft Exchange Server on
virtual machine from the the VMware tab in the policy, which allows recovery of the databases from the virtual
backup, but you cannot machine backups.
recover the databases
individually.
Transaction log backups fail. You must first perform a full VMware backup without log truncation (Truncate logs
option).
The Exchange databases are Neither the Veritas VSS provider nor the VMware VSS Provider was installed at the
not quiescent. time of backup. The recovery of the Exchange database may require manual steps
using the Exchange ESEUTIL utility.
GRT live browse error for a The VMware backup did not include the volume where Exchange is installed.
VMware image that supports
the restore of application You may encounter problems if you select VM hostname for the Primary VM identifier.
data. Use VMware display name instead.