Administrator Guide
You should plan to run the Protect-TenantVMs runbook so that it does not interfere with the backup window. Therefore, run it any time
between 6:00 AM to 6:00 PM local time (at least three to four hours before the backup window starts).
If more than 75 new VMs were created (on one rack), and you need to add them to a protection group on the same day, you can run the
Protect-TenantVMs runbook more than once to protect the additional VMs. However, if you do this, DPM may not be able to complete the
scheduled backups within the backup window, and deduplication may not be able to complete its run within its scheduled window. Because
of this, deduplication may not provide the predicted backup storage savings.
Excluding tenant VMs from backup
If you need to prevent protection of some tenant VMs to disk or to Azure, you can use the following runbooks to exclude or to restore
protection.
Adding a VM to the exclusion list will only work for unprotected VMs. If a VM is already protected, adding the VM name to the exclusion list
will not stop protection of that VM. Therefore, you must exclude a VM from protection before you run the Protect-TenantVMs runbook.
Specify the VM names (wildcard characters are supported) or VMID (wildcard characters not supported) of the VMs for which you want
to exclude or restore protection.
Table 19. Runbooks for exclusion
Backup Target Runbook Description
Disk Add-DPMDiskExclusionItems Use to prevent protection of specied tenant VMs to disk.
When you exclude a VM from disk protection, it
automatically means there is no Azure protection for that
VM.
Disk Remove-DPMDiskExclusionItems Use to restore protection of tenant VMs to disk.
When you restore disk protection, it automatically enables
Azure protection if the VM is not excluded from Azure
protection through Add-DPMAzureExclusionItems.
Azure Backup Add-DPMAzureExclusionItems Use to prevent protection of specied tenant VMs to
Azure.
If disk protection is enabled for the VM, that protection
will continue.
Azure Backup Remove-DPMAzureExclusionItems Use to restore protection of tenant VMs to Azure.
Validate that the tenant VMs are protected
After you run the Protect-TenantVMs runbook, you can view which DPM server will protect the tenant VM by using the VMM console.
1 In the VMM console, open the VMs and Services workspace.
2 On the Home tab of the ribbon, in the Show group, click VMs.
3 In the VMs list, locate the VM, and then view the information in the ProtectedByDPMServer column.
Modifying tenant protection policies
If you want to change the default values for tenant VM protection, you can use the Modify-DPMTenantProtectionConguration runbook.
The following table lists the parameters and their default values.
Operations
67