DPM:End-user recovery permissions update failed (3123)

Microsoft.Windows.SystemCenterDPM.EndUserRecoveryPermissionUpdateFailed (UnitMonitor)

End-user recovery permissions update failed

Knowledge Base article:

Summary

This alert is generated in Data Protection Manager (DPM) when synchronization occurs on the specified DPM server, but the permissions that are required for end-user recovery of the data are not updated. When end-user recovery is enabled in DPM, the replica must be updated with the required access permissions for end-user recovery. Whenever synchronization occurs, the access permissions are updated if changes have been made. Updating the permissions is necessary because it ensures that only authorized end users can recover previous versions of data from the DPM server.

Causes

See the Alert Details pane for more information on the cause of this alert.

The error conditions and recommended actions associated with each “End-user recovery permissions update failed” alert are provided in the alert details. For more information, see “How to Display Alert Details” in DPM Help (http://go.microsoft.com/fwlink/?LinkId=66728).

Some possible causes include:

The DPM server was unable to communicate with the protected server.
DPM was not able to access Active Directory directory service.
DPM was not able to update the Active Directory database.
The Active Directory schema on the DPM server is not configured properly for end-user recovery.

Resolutions

The error conditions and recommended actions associated with each “End user recovery permissions update failed” alert are provided in the alert details.

To resolve this alert, you can manually synchronize the replica in DPM. For information, see “How to Synchronize a Replica” in DPM Help (http://go.microsoft.com/fwlink/?LinkId=66728), or you can wait for the next scheduled synchronization job to run. In most cases, this alert will self-resolve and become inactive after the synchronization job is completed.

For information about possible causes of communication issues between the DPM server and the protected server, see "How to Synchronize a Replica" in DPM Help (http://go.microsoft.com/fwlink/?LinkId=66728).

If the alert details in DPM state that the Active Directory schema is not configured properly for end-user recovery, you need to extend the Active Directory schema again. For more information, see “How to Enable End-User Recovery” in DPM Help (http://go.microsoft.com/fwlink/?LinkId=66728).

When resolved: When the end user recovery permission propagation is successful, or when end-user recovery is turned off.

External

For more information about configuring end-user recovery in DPM, see the DPM 2007 Deployment Guide (http://go.microsoft.com/fwlink/?LinkId=66734).

For more information about monitoring and diagnosing problems with end-user recovery in DPM, see the DPM 2007 Deployment Guide (http://go.microsoft.com/fwlink/?LinkId=66734).

Element properties:

Target

Microsoft.Windows.SystemCenterDPM.ProductionServer

Parent Monitor

System.Health.ConfigurationState

Category

EventCollection

Enabled

True

Alert Generate

True

Alert Severity

Warning

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.2SingleEventLog2StateMonitorType

Remotable

True

Accessibility

Internal

Alert Message

DPM:End-user recovery permissions update failed (3123)

{0}

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.SystemCenterDPM.EndUserRecoveryPermissionUpdateFailed" Accessibility="Internal" Enabled="true" Target="Microsoft.Windows.SystemCenterDPM.ProductionServer" ParentMonitorID="Health!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">

  <Category>EventCollection</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.SystemCenterDPM.EndUserRecoveryPermissionUpdateFailed_AlertMessageResourceID">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Warning</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Params/Param[12]$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Warning"/>

    <OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>

    <FirstLogName>DPM Alerts</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">1</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">DPM-EM</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Params/Param[2]</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">3123</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Params/Param[4]</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Params/Param[5]</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">$Target/Property[Type="Microsoft.Windows.SystemCenterDPM.ProductionServer"]/ServerNameLong$</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>

    <SecondLogName>DPM Alerts</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">2</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">DPM-EM</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Params/Param[2]</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">3123</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Params/Param[4]</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Params/Param[5]</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">$Target/Property[Type="Microsoft.Windows.SystemCenterDPM.ProductionServer"]/ServerNameLong$</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </SecondExpression>

  </Configuration>

</UnitMonitor>