DPM Alert 3123: Failed to update permissions for end-user recovery

DPM_Alert_3123__Failed_to_update_permissions_for_end_user_recovery_1_Rule (Rule)

Knowledge Base article:

Management Pack
Summary

This alert is generated in Data Protection Manager (DPM) when synchronization occurs on the specified DPM server, but the permissions that are required for end-user recovery of the data are not updated. When end-user recovery is enabled in DPM, the replica must be updated with the required access permissions for end-user recovery. Whenever synchronization occurs, the access permissions are updated if changes have been made. Updating the permissions is necessary because it ensures that only authorized end-users can recover previous versions of data from the DPM server.

 
Causes

The error conditions and recommended actions associated with each "Failed to update permissions for end-user recovery" alert are provided in the alert details for the DPM alert. For more information, see "How to display alert details" in DPM Help at http://go.microsoft.com/fwlink/?linkid=46350.

Some possible causes include:

  • The DPM server was unable to communicate with the protected file server.
  • DPM was not able to access Active Directory® directory service.
  • DPM was not able to update the Active Directory database.
  • The Active Directory schema on the DPM server is not configured properly for end-user recovery.
 
Resolutions

To resolve this alert, you can manually synchronize the replica in DPM (for information, see "How to synchronize a replica" in DPM Help), or you can wait for the next scheduled synchronization job to run. In most cases, this alert will self-resolve and become inactive after the synchronization job is completed.

For information about possible causes of communication issues between the DPM server and the protected file server, see "How to synchronize a replica" in DPM Help.

If the alert details in DPM state that the Active Directory schema is not configured properly for end-user recovery, you need to extend the Active Directory schema again. For more information, see "How to enable end-user recovery" in DPM Help.

 
External Knowledge Sources
  • For more information about configuring end-user recovery in DPM, see the " Configuring DPM" chapter in the Microsoft® System Center Data Protection Manager 2006 Planning and Deployment Guide at http://go.microsoft.com/fwlink/?LinkId=46358.
  • For more information about monitoring and diagnosing problems with end-use recovery in DPM, see the " Troubleshooting" chapter in the Microsoft® System Center Data Protection Manager 2006 Operations Guide at http://go.microsoft.com/fwlink/?LinkId=46369.
 
© 2000-2004 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.SystemCenter.DPM.Microsoft_System_Center_Data_Protection_Manager_2006_Servers_Installation
CategoryEventCollection
EnabledTrue
Event SourceDPM-EM
Alert GenerateFalse
RemotableTrue
Event LogDPM Alerts
CommentMom2005ID='{B8F94B9D-747E-4DC2-9202-AA7009D6BA49}';MOM2005ComputerGroupID={49DAC409-542F-4A3A-A540-7E9C08CFF520}

Member Modules:

ID Module Type TypeId RunAs 
_0368A413_63A3_41DB_A1A2_1B6E068E9B34_ DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
ScriptResponse1 WriteAction DPM_Alert_Mirroring Default

Source Code:

<Rule ID="DPM_Alert_3123__Failed_to_update_permissions_for_end_user_recovery_1_Rule" Target="Microsoft.SystemCenter.DPM.Microsoft_System_Center_Data_Protection_Manager_2006_Servers_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{B8F94B9D-747E-4DC2-9202-AA7009D6BA49}';MOM2005ComputerGroupID={49DAC409-542F-4A3A-A540-7E9C08CFF520}">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_0368A413_63A3_41DB_A1A2_1B6E068E9B34_" Comment="{0368A413-63A3-41DB-A1A2-1B6E068E9B34}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>DPM Alerts</LogName>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">EventDescription</XPathQuery>
</ValueExpression>
<Operator>MatchesMOM2005RegularExpression</Operator>
<Pattern>.*\(ID:.3123\).*</Pattern>
</RegExExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>DPM-EM</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="ScriptResponse1" TypeID="DPM_Alert_Mirroring">
<AlertGeneration>
<GenerateAlert>false</GenerateAlert>
<Owner/>
<Description>
$Data/EventDescription$
</Description>
<AlertLevel>50</AlertLevel>
<ResolutionState/>
<Source>
$Data/PublisherName$
</Source>
<Name>DPM Alert 3123: Failed to update permissions for end-user recovery</Name>
</AlertGeneration>
<InvokerType>0</InvokerType>
</WriteAction>
<WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>