Administrator Guide
DPM protection groups
The following table provides information about the default protection groups for the infrastructure components.
Table 18. DPM protection groups
Protection Group Data Sources
InfraDBPG Instance level protection of all management infrastructure databases. These
include databases for VMM, Operations Manager, SPF, Windows Azure Pack,
SMA, and WSUS. Also protects the system databases on the DPM instance.
InfraVMPG Protects all management infrastructure VMs.
When you protect tenant VMs, a protection group named TenantVMs is created.
Disable machine account password rotation on management
VMs
Dell recommends that you disable machine account password rotation on all management VMs. If machine account password rotation is
enabled, this can cause the recovery of management VMs to fail. If you recover a VM to a point in time that occurs before a machine
account password reset occurred, logging on to the VM by using domain credentials fails with the error, "The trust relationship between
this workstation and the primary domain failed."
To avoid this failure, disable machine account password rotation on management VMs. To do this, a domain administrator can congure the
Domain Member: Maximum age for machine account password Group Policy setting at the Dell Hybrid Cloud System for Microsoft OU
level. For more information, see Domain member: Disable machine account password changes in Microsoft TechNet.
Protecting tenant VMs
An important feature of Dell Hybrid Cloud System for Microsoft is tenant VM protection.
Adding tenant VMs to backup
You must run the Protect-TenantVMs runbook to manage tenant VM protection
This runbook adds up to 75 newly created VMs to a protection group in DPM. You should run this runbook manually or through a scheduled
task once each day. After a tenant VM is added to a protection group, by default:
• The tenant VM is congured for daily disk backup (10:00 PM), with a retention period of 7 days.
• If cloud backup is enabled, Azure backup starts at 6:00 AM daily with a retention period of 20 days.
The Protect-TenantVMs runbook is designed to protect 75 new VMs per run per day to ensure the following:
• That there is enough time for deduplication to complete deduplication of new data
• That there is enough time to complete tenant VM backups.
Data deduplication runs on the local backup disks that are attached to the backup host. The data deduplication process reduces backup
storage usage. There is a default schedule for data deduplication and for tenant backups. The default schedule is as follows:
• Deduplication: 6:00 AM to 10:00 PM
• Backup: 10:00 PM to 6:00 AM.
66
Operations