DPM Error 337: Manually Set Name of Allowed DPM Server on Client
When installing a Protection Agent from DPM 2007 on a server on a Windows 2003 Domain I ran into a wacky problem where the DPM Administration Console errored out during Install.
A server errored out with a 337 error.
You cannot install the protection agent on MYSERVER because access to the computer has been denied.
The Microsoft Documentation says that the recommended action is “Do the following to troubleshoot this issue: ”
1) If another DPM server is currently protecting MYSERVER use that DPM server to uninstall the protection agent from MYSERVER. Then, use this DPM server to install the protection agent on MYSERVER.
2) Verify that the time on the DPM server and the selected computer is synchronized with the domain controller. At a command prompt, type “net time /set” to synchronize the time with the domain controller.
3) If the computer is a domain controller, verify that the primary domain controller (the PDC Emulator) is running Windows Server 2003 with Service Pack 1 (SP1), and that Active Directory has completed replication between the domain controllers since the Windows Server 2003 SP1 installation.
So I start debugging with item 1. Since I am not the first Administrator to work on this installation AND there is another DPM server located elsewhere on the network which was recenctly installed, it seems possible that something odd was done with this computer wpointed to another DPM Server.
First I try uninstalling the client locally on the system and I log into the server to remove the program using Add/Remove Programs, however the Add/Remove Programs listing is completely blank. I do a bunch of research on this and eventually I determine that the Unistall information must somehow be corrupt, the system needs a OS restore or something. I cant afford this and will plan to do this another day. I start browsing around in the Program Files directory for the DPM Client to try and find an uninstall program or something and I happen upon an executable that looks interesting. I open a command prompt and run the program to find out what it does.
#> cd C:Program FilesMicrosoft Data Protection ManagerDPMbin
#> setDPMServer.exe /?
This shows me how to run this program
#> SetDPMServer -dpmservername < servername>
So I run it with the name of my DPM server
#> SetDPMServer -dpmservername MYSERVER
And it clearly does something giving me the following information.
Configuring dpm server settings and firewall settings for dpm server =[MYSERVER]
Configuring dpm server settings and firewall settings for dpm server =[W2K.DOMAIN.COMMYSERVER]
Configuration completed successfully!!!
Now I head back over to my DPM server and run the install again from the Management Tab of the DPM 2007 Administrator Console. And would you beleive it? It installed perfectly. So there are two things I need to get in order to address the other issues on my network (find out why Add / Remove Programs is not coming up, find out if anyone is trying to protect some of the computers using another DPM server on the network).
The thing I never found out was if it could have been items 2 or 3 where there is a time sync problem between the AD controller and the server. It might have been better to start with the easy fixes described in those steps since that would have been easier and would have ruled it in our out.
Until then though this will work; Mystery Solved!
DPM Error 307: Manually Uninstalling Microsoft System Center DPM Protection Agent
When installing an Protection Agent from DPM 2007 on a server on a Windows 2003 Domain I ran into a wacky problem.
A server errored out with a 307 error.
The protection agent operation failed because DPM detected an unknown DPM protection agent on MYSERVER.
The Microsoft Documentation says that the recommended action is to:
Use Add or Remove Programs in Control Panel to uninstall the protection agent from MYSERVER, then reinstall the protection agent and perform the operation again.
So I log into the server to remove the program using Add/Remove Programs, however the Add/Remove Programs listing is completely blank. I do a bunch of research on this and eventually I determine that the Uninstall information must somehow be corrupt, the system needs a OS restore or something. I cant afford this and will plan to do this another day. In the mean time I need to get this program uninstalled so I can reinstall the DPM Agent on this server.
I couldn’t find an MSI or anything to use to uninstall it but I found a post describing where in the registry to find uninstall program locations is for certain programs.
Well, there is supposed to be an entry here for each of the programs that are installed on your system, but there was not one for the DPM agent, I did find all sorts of UID type entries and I looked through them and low and behold, I found an entry for Microsoft System Center DPM Protection Agent (the name of the agent was in the ‘DisplayName’ string key) I then copied the string in the ‘UninstallString’ key
Note: do not run this on your system, the UID above should correspond to your system
pasted it into a command prompt window and it then ran the uninstall program for “Microsoft System Center DPM Protection Agent” and prompted for a reboot.
I rebooted and the system came back up, out of curiosity I went back into the registry and I could not find the entry in the registry any more. I am not going to do more investigation into at this point however it makes me think that the items that show in this registry folder with a UID instead of a program name are somehow corrupted even though this one ran okay. I looked on my windows XP workstation (which Add/Remove Programs works on) and I have dozens of UID entries in this registry area so I am sure that this is not the cause of the “corrupted” Add/Remove programs issue.
Anyway, thats it, the “corrupt” DPM protection agent was removed and so I was able to rerun the install process from the DPM 2007 Administrator Console again. It succeeded without issue and now I can backup my server.