Search
StarWind is a hyperconverged (HCI) vendor with focus on Enterprise ROBO, SMB & Edge

Veeam Backup & Replication 9.5 – Protection Groups

  • May 3, 2018
  • 12 min read
Cloud and Virtualization Architect. Paolo is a System Engineer, VCP-DCV, vExpert, VMCE, Veeam Vanguard, and author of the virtualization blog nolabnoparty.com
Cloud and Virtualization Architect. Paolo is a System Engineer, VCP-DCV, vExpert, VMCE, Veeam Vanguard, and author of the virtualization blog nolabnoparty.com

img

Protection Groups is a new feature introduced with the Update 3 of Veeam Backup & Replication 9.5 and allows the administrators to backup physical servers and workstations through the use of Agents. In this article will be explained the procedure to create Protection Groups and their use in the backup jobs.

img

 

Backup of physical servers as well as virtual machines can be centralized and processed from the Veeam Backup & Replication dashboard having all backup jobs available from a single pane of glass. This feature allows to simplify the backup jobs management, managing the Agents directly from Veeam Backup & Replication.

Protection Groups

Veeam Backup & Replication 9.5 U3 provides the option to manage Veeam Agents directly from the console but requires the creation of Protection Groups in the inventory specifying the machines to protect with Agents.

Protection Groups allows the administrators to automate the deployment and the management of Veeam Agents on computers installed in your infrastructure, avoiding to perform administrative tasks individually for every computer you need to protect with Veeam Agent. You can create more Protection Groups depending on your infrastructure

A Protection Group can contain physical servers, workstations or cloud instances protected by Agent-based backup jobs and it can be populated in three different ways:

  • Manually – the Protection Group is populated by manually inserting computers to protect.
  • Active Directory integration – you can browse the AD tree and specify the OUs containing computer accounts to insert in the Protection Group. Veeam will then perform an automatic discovery and installation of the Agent in the selected machines associating them to a backup job.
  • CSV files – these files exported from an asset management system are used to populate the Protection Group automatically.

You can also perform a mixed backup of physical and virtual machines but VMs must have the Agent installed.

img

 

Once the Protection Group has been created, you can create a backup job associated to the Protection Group.

How to create a Protection Group

To create Protection Group, enter the Inventory section and select the Physical & Cloud Infrastructure item. Click Create Protection Group to proceed.

img

Enter a Name and optionally a Description then click Next.

img

The Protection Group can be populated automatically taking benefit of the Active Directory integration by selecting the containers with the machines to protect. Select Microsoft Active Directory objects options and click Next.

img

Click Change to select the Active Directory domain to browse then specify the domain controller and a domain account with at least permissions to browse. Click OK to confirm.

img

Click Add to browse Active Directory and select the OU or specify Servers to process. If the OU is selected, each computer joined to the domain and located in the selected OU will be inserted into the Protection Group. Also Linux machines can be inserted in the Protection Group if joined to the domain. Click OK when done.

img

The selected computer objects are listed in the window. Click Next.

img

Protection Groups have some Exclusions enabled by default and depending on your needs you may decide to enable or disable some. In the example, option to esclude All virtual machines has been disabled since the processed Servers are VMs. Click Next.

img

Specify the account used to install the Agent in the selected servers. You can use a Master Account (a Domain Admin for instance) or specify the credentials for each server. Click Next to continue.

img

Specify the Discovery schedule to check periodically the Protection Group’s contents. You can also specify actions to performs with Agents during the rescan keeping in mind the Veeam’s proprietary CBT driver requires a reboot. Click Next to create the Protection Group.

img

Click Apply to proceed with Protection Group creation.

img

When the Protection Group has been created, click Finish to exit the wizard. Leave option Run discovery when I click Finish to begin Agent installation immediately.

img

Veeam performs the Protection Group discovery and installs the Agent. Note that the CBT Driver requires the reboot of the server to finalize the installation.

After rebooting the server, a new discovery action doesn’t report any issue.

Looking at the Windows Server, you can recognize the components installed by Veeam.

img

 

Create the Backup Job

Once the Protection Group has been created successfully, it can be associated to a backup job. From the Home area click Backup Job in the main menu and select Windows computer.

img

Here you specify how the Agent will be managed. Select the Agent edition as Type and the backup Mode, that is how the Agent interacts with the backup server. While Managed by backup server option, used to process servers always connected to the backup server, creates a backup job, option Managed by agent will create a Backup Policy instead. Click Next.

img

Specify a job Name and optionally a Description then click Next.

img

Click Add and select Protection Group to backup the machines in that object.

img

Select the Protection Group to backup and click OK.

Click Next to continue.

img

Specify the backup type for your machines (Entire computer in the example) then click Next.

img

Select the Backup repository to use and configure Advanced settings if requested then click Next.

img

Thick Enable application-aware processing option to have consistent backups if processed servers are MS-SQL or SharePoint then click Next.

img

Specify the Schedule for the backup job and click Apply.

img

Click Finish to save the configuration.

img

Select Backup item, right click the just created backup job and select Start.

img

The backup is being executed.

img

When the backup has completed, click Close to exit the window.

img

 

Before starting, make sure to understand Protection Groups constraints:

  • Ensure all computers added to the protection group are powered on and accessible over the network
  • Computers to protect should have a static IP address.
  • Only AD objects belonging to one domain only can be included in a protection group
  • Only Active Directory global groups are supported.
  • It is recommended to include each computer in one protection group only

Checkout Veeam website for additional info about Protection Groups.

Protection Group is another great feature introduced by Veeam to manage backups of physical machines that cannot be virtualized with the benefit to centralize the overall management of the backup infrastructure.

A 30-day free trial is available for Veeam Agent for Microsoft Windows 2.1 and Veeam Backup & Replication 9.5 for testing purposes.

 

Found Paolo’s article helpful? Looking for a reliable, high-performance, and cost-effective shared storage solution for your production cluster?
Dmytro Malynka
Dmytro Malynka StarWind Virtual SAN Product Manager
We’ve got you covered! StarWind Virtual SAN (VSAN) is specifically designed to provide highly-available shared storage for Hyper-V, vSphere, and KVM clusters. With StarWind VSAN, simplicity is key: utilize the local disks of your hypervisor hosts and create shared HA storage for your VMs. Interested in learning more? Book a short StarWind VSAN demo now and see it in action!