This documentation is archived and is not being maintained.

Installing and Configuring Protection Agents

Updated: June 1, 2009

Applies To: Data Protection Manager, System Center Data Protection Manager 2007

A protectionagent is software installed on a computer that tracks changes to protected data and transfers the changes from the protected computer to the System Center Data Protection Manager (DPM) 2007 server. The protection agent also identifies data on a computer that DPM can protect and recover.

Before you can start protecting data, you must install a protection agent on each computer that contains data that you want to protect. After the protection agent is installed on a computer, the computer is listed as an unprotected computer in the Management task area of DPM Administrator Console. The data sources on the computer are not protected until you add them to a protection group. Each computer that you want to protect must meet the protected computer prerequisites. For more information, see Protected Computer Prerequisites (

DPM supports protecting computers across domains within a forest; however, you must establish a two-way trust across the domains. If there is no two-way trust across domains, you must have a separate DPM server for each domain. DPM 2007 does not support protection across forests.

If a firewall is enabled on the DPM server, you must configure the firewall on the DPM server. To configure a firewall on a DPM server, you must open port 135 to TCP traffic, and you must enable the DPM service (Msdpm.exe) and the protection agent (Dpmra.exe) to communicate through the firewall.

If you installed Data Protection Manager (DPM) 2007 Service Pack 1 (SP1), you must update the protection agents on the computers that you are protecting. For more information about how to update your protection agents, see Updating Protection Agents ( For more information about DPM 2007 SP1, see Knowledge Base Article 959605 (
For more information about how to update protection agents on computers that reside behind a firewall, see Updating Protection Agents behind a Firewall (

In This Section