Download Presentation - The PPT/PDF document "Protecting" is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
Presentation on theme: "Protecting"— Presentation transcript:
Slide1
Protecting Client Data with System CenterData Protection Manager (DPM) 2010
Young KwonSE Service ManagerClient Data Service ManagementMicrosoft IT
SIM339
Islam
Gomaa
Microsoft
MVP | System Center Data Protection Manager
Slide2
Session Objectives and Takeaways
Session Objectives:
Learn how DPM 2010 protects clients and how it differs from server protection
Learn about DPM Client Autodeployment with ConfigMgr
and OpsMgr
Discover how MS IT is protecting client data on the Microsoft internal network
DPM 2010 is Enterprise Ready!
ECAL customers already have everything they need!
Slide3
Agenda
Overview of DPM 2010
Challenges with Client Backup
Using DPM 2010 for client protection
DEMO: Protecting Client Data with DPM 2010
Automatic DPM Client Deployment
Automating client deployment and assignment with
ConfigMgr
and
OpsMgr
MS IT: How Microsoft IT protects client data
The Future: Client Protection and DPM 2012
Slide4
Backing up Data on Mobile ComputersThe challenge
Mobile workforce
Different users with different needs
Large scale
Slide5
Client Backup in Most Organizations
End user
Limited/no IT involvement
Cumbersome for end users
Policies are difficult to enforce
Copy to servers backed up by IT
Do your own backups
Critical business
data
on
laptops
is not backed up
Slide6
Requirements for Laptop Data Backup
Slide7
How Does DPM Solve This?
Slide8
Online Snapshots
(up to 512)
Disk-based
Recovery
Active Directory
®
System State
Tape-based
Backup
Data Protection Manager
Up to
Every 15 minutes
Disaster Recovery
with
offsite replication & tape
Data Protection Manager
file
services
Slide9
8:00 AM – 12:00 AM – 6:00 PM
Protect “My Documents”
Retain Data for – 14 Days
When you want to protect the data?
What data you want to protect?
How long you want to retain the data?
Backup
Server Admin
8:00 AM – 12:00 AM – 6:00 PM
Protect “My Documents”
Retain Data for – 14 Days
8:00 AM – 12:00 AM – 6:00 PM
Protect ‘My Documents”
Retain Data for – 14 Days
8:00 AM – 12:00 AM – 6:00 PM
Protect “My Documents”
Retain Data for – 14 Days
Backup Policy
8:00 AM – 12:00 AM – 6:00 PM
Protect “My Documents”
Retain Data for – 14 Days
Client
Protection/Recovery
–
Back-up
Policy
Slide10
Backup Policy
8:00 AM – 12:00 AM – 6:00 PM
Protect “My Documents”
Retain Data for – 14 Days
Day
2
Client Protection/Recover
y
Disconnected
and connected
Day
1
Backup at 8:00 AM
Backup at 12:00 Noon
8:00 AM
Time to take a backup
12:00 Noon
Time to take a backup
While
Traveling
by Plane
Traveling
At On Site Office Meeting
Slide11
Back
At Corporate Office
Backup Policy
8:00 AM – 12:00 AM – 6:00 PM
Protect “My Documents”
Retain Data for – 14 Days
Day
10
Day
7
Day
3
8:00 AM
Time to take a backup
Restore Yesterday’s Data
Restore Last Month’s Data
Client Protection/Recovery
Disconnected and connected
Slide12
14 Days Policy
While
Traveling
on Plane
Client P
rotection/Recovery
Day
1
Day
2
Day
10
Day
1
Backup at 8:00 AM
Traveling
At
On Site
Office Meeting
Back At
Corporate Office
Backup at 12:00 AM
Backup at 8:00 AM
Counter Reset
After Successful Backup
Backup
To DPM
Slide13
Protecting Clients with DPM 2010
Up to 60% of an organization’s data does not reside on servers in the datacenter!
demo
Slide14
DPM 2010 scalability
A single DPM 2010 server can protect: *100 production servers1000 Windows clients2000 SQL Server databases25 Terabyte SharePoint farms with over 1M objects40 Terabytes of Exchange storage groups & databases
* May vary based on size of each datasource, as well as scaling of DPM server memory, disk and I/O architecture
3000
Slide15
DPM 2010 – Roaming Laptops
Best-in-class laptop protection for Windows ClientsSupport for Windows XP, Windows Vista, and W7Backup over VPN or Direct AccessScale to 3,000 clients per DPM server“Unique user data” onlyNot the whole machine, so that the OS is not repeatedly backed upIntegration with local Shadow Copies for Windows Vista and Windows 7Centrally configured from DPM admin UIEnd-User–enabled restore from local copies offline and online, as well as DPM copiesAdmin-enabled restore from DPM copies
Slide16
Client Backup and Restore
Restore Data from other machines you have permissions to
demo
Slide17
Intuitive End User Interface
Easy monitoring of backupsQuick access to common information and features
Slide18
Customizability
Slide19
End User Restore
End user
DPM server
Restore from DPM
1. Local Restore when not connected
2. Network restore when connected
3. Remote restore for new laptop
Build, then Restore
Slide20
Local Restore: Even when Offline
Slide21
Restore to a New Laptop (from DPM)
Slide22
Traditional Deployment Options
Slide23
Enterprise DPML
– “
Application Agent
”
–
per protected server
Unified support of Microsoft applications SQL, Exchange, SharePoint, & Virtualization – and files Protect DPM 2 DPM 4 DR – disaster recoveryBare Metal Recovery
Standard DPML
= “
File agent
”
per protected Windows Server
No additional “Open File” or add-on modules
file shares and directories
Client DPML
“
Desktop agent
”
XP Pro & Vista & W7
DPM
Server
with integrated Disk & Tape
Also available as a DPM OEM Appliance
running on Windows Storage Server
DPM Server
Active
Directory
System State
Pricing guidance posted
on
microsoft.com/DPM
Slide24
Client DPML
“
Desktop agent
” XP Pro & Vista & W7
DPM
Server
with integrated Disk & Tape
Also available as a DPM OEM Appliance
running on Windows Storage Server
DPM Server
Pricing guidance posted
on
microsoft.com/DPM
Not sold separately
Use Rights included with ML’s
Inside ECAL
Slide25
Traditional DPM Agent Deployment
Many Ways to Deploy
Active Directory
SCCM or SCE – Most scalable option
Pushed from DPM – Simplest Option, relationship auto-established
Sysprep
– Great for System Replacements
Two binary packages = x86 or x64
DPM Pushes the appropriate version
Two Step Process
Install the Agent
Establish a relationship to the DPM Server
Slide26
Connect Agent to DPM Server
Actual PowerShell™ script Attach-ProductionServer.ps1
$DPM -> DPM Server Name
$PS -> Production Server Name
$User, $
Pwd
, $Domain -> Credentials for associating agent with a DPM Server (admin)
Attach-ProductionServer.ps1 –
DPMServerName
$DPM –
PSName
$PS
–Username $User – Password $
Pwd
–domain $Domain
Detailed blog entry on
disconnected
agent install scenarios at:
http://blogs.technet.com/DPM
Slide27
DPM Client
Autodeployment
Slide28
DPM 2010 Client Autodeployment
System Center Automatic Client ProtectionDeploy DPM agent via CfgMgrConnect clients to DPM servers via OpsMgr
DPM-US1
DPM-US2
DPM-EU1
DPM-AUNZ
Slide29
Data Protection Manager
Active Directory
®
Data Protection Manager
Data Protection Manager
System Center
Operations Manager
System Center
Configuration Manager
1. Windows Clients with DPM Agents pre-installed using
CfgMgr
or as part of image.
2. List of Clients
3. Associates clients to available DPM servers & Protection Groups
4. Association List
CfgMgr
Package
5. Client associated
with owner DPM server
System Center Unified
D
eployment of DPM Clients
Slide30
Automated DPM 2010 Client Protection
Install DPM rollup 1 and 2
Install
OpsMgr
agent on DPM servers
DPM servers get discovered in the
OpsMgr
console
Add desired DPM servers to auto deployment
Specify the desired domains to be considered for
auto deployment
Setup the backup policy in the ClientPGSettings.xml
Add unwanted clients for exclusion from getting
auto deployed
Slide31
Automated DPM 2010 Client Protection
Slide32
Automated DPM 2010 Client Protection
Slide33
Automated DPM 2010 Client Protection
Slide34
Automated DPM 2010 Client Protection
Slide35
How Microsoft IT is protecting individual business PC data
Young KwonSE Service ManagerClient Data Service ManagementMicrosoft IT
MS IT
Slide36
How MSIT Protects our Servers
Total Server count that MSIT manages: 4,000
DatacenterClient Servers Migrated or In ProgressDPM Servers Before migrationTotal DPM Servers after 2010 migrationDPM Servers that have been ConsolidatedRedmond Area2869886820Dublin49416810Singapore256734Japan135541Other (HA)19917134Grand Totals39531339637
DPM 2010 migration
completed 3,953
Slide37
Microsoft $ Spent for Data Backup, Loss and Recovery
37
Deskside dispatch tech cost for data backup & restore request – $370kData Recovery cost spent due to data Loss – $450k
External Hard Drive purchase (MS Market data only) –$580kExternal Hard Drive purchase (Non-MS Market, individual and Admin’s purchase) – $500k
2011 Total Estimated Spending: $2 Million
Reactive
Proactive
Slide38
Client Data Backup Requirements and Needs at Microsoft
Data ProtectionData Availability Data PortabilityData Centralization
Microsoft
IT Admin
Client
Slide39
Client PC Data Backup and Management at Microsoft
Many employees have asked “How should I back up my important data?”
Type
of DataIndividual Corporate/Business DataTeam/Group Corporate/Business Sharing DataPersonal Data (pictures, music, videos, documents)Recommended Solutions
IntelliMirror/User State VirtualizationExternal Hard Drive with Bitlocker-To-Go
SharePoint & MySiteVirtual File Share StorageSelf-host File Server
SkyDriveWindows Live MeshWindows Home ServerExternal Hard Drive
Data Protection Manager (DPM)
Slide40
DPM Client PC backup,
Pros & Cons
Automatic scheduled backup
Flexible Backup Choices
Easy & Multiple
P
oints in time Restore
Benefits
Competitive
differentiation
PROs
Quota Limit
,
Single PC backup at a time.
Separate Application
Risks
Cost
CONs
Slide41
Pilot Program Timeline Milestones:
5 months pilot period
Completed DPM Client validations
Became a MSIT supported PC backup solution
MSIT DPM Client Pilot Program was Completed Successfully!
Required SlideSpeakers, please list the Breakout Sessions, Interactive Discussions, Labs, Demo Stations and Certification Exam that relate to your session. Also indicate when they can find you staffing in the TLC.
Breakout Sessions (session codes and titles)
Interactive Sessions (session codes and titles)
Hands-on Labs (session codes and titles)
Product Demo Stations (demo station title and location)
Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment
on
the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation
. MICROSOFT
MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
