Event ID 2089 on Server - Can I use Veeam to stop this error

[mjgreen81]

Hi All,

Our DC's are backed up with Veeam. However, we have noticed that one of our DC's is reporting the following error:

Code: Select all

Event 2089, ActiveDirectory_DomainService

This directory partition has not been backed up since at least the following number of days. 
 
Directory partition: 
DC=DomainDnsZones,DC=internal,DC=OURDOMAIN DC=com 
 
'Backup latency interval' (days): 
30 
 
It is recommended that you take a backup as often as possible to recover from accidental loss of data. However if you haven't taken a backup since at least the 'backup latency interval' number of days, this message will be logged every day until a backup is taken. You can take a backup of any replica that holds this partition. 
 
By default the 'Backup latency interval' is set to half the 'Tombstone Lifetime Interval'. If you want to change the default 'Backup latency interval', you could do so by adding the following registry key. 
 
'Backup latency interval' (days) registry key: 
System\CurrentControlSet\Services\NTDS\Parameters\Backup Latency Threshold (days) 

Are there any settings etc in my Veeam job that can tell Windows that it is being backed up? (similar to the way you can clear the Exchange logs via the Veeam backup job).

[veremin]

I'm wondering whether application aware image processing option is enabled in the job settings.

Thanks.

[mjgreen81]

I'm wondering whether application aware image processing option is enabled in the job settings.

Thanks.

I just looked at the job setting and it seems as though application-aware image processing is NOT enabled in the job settings.

I have enabled this now, should I expect this to fix the problem?

[veremin]

Yep, it should notify DC about it being backed up.

The bottom line is that it’s always recommended to enable Application-Aware Image processing whenever you back up Virtual Machines that run special Windows applications, like Exchange, SharePoint, SQL, DC etc.

Hope this helps.
Thanks.

[mjgreen81]

Brilliant, thanks for the quick response.

[veremin]

You’re welcome. Should any other questions arise, don’t hesitate to let us know.

Thanks.

[shjones99]

If, for some reason, AAIP couldn't be used for a Windows backup, could the same thing be achieved by enabling the Hyper-V Guest Quiescence option?

[Vitaliy S.]

Logs truncation and special logic to backup DC cannot be enabled by using Hyper-V Guest Quiescence option.

[shjones99]

Thank you for your prompt reply. Our VMs are not domain controllers. If log truncation isn't an issue, can we assume the Quiescence option will give us the same consistency as AAIP?

[Gostev]

Yes for consistency. Except it's not just DC - but also Exchange, SharePoint and SQL that we do special processing for. You won't get any application aware processing with basic, native hypervisor quiescence. Just something to keep in mind. Thanks!

[sbbots]

The bottom line is that it’s always recommended to enable Application-Aware Image processing whenever you back up Virtual Machines that run special Windows applications, like Exchange, SharePoint, SQL, DC etc.

I have never enabled "application-aware image processing" in backups, yet I have test restored several DC's and SQL servers successfully. I know it is recommended to enable it, but if my restores are working should I just leave it alone? What is the specific advantage of using it? Just curious.

[Vitaliy S.]

Hi Matt,

You can read more details about this in this topic > Application-Aware Image Processing. Also we have some good posts on that in our company blog.

Thanks!

[foggy]

Basically, application-aware image processing performs proper application quiescence required for transactionally consistent backup of VMs running VSS-aware applications. Not only does it ensure successful VM recovery, as well as proper recovery of all applications installed on the VM without any data loss, but also it notifies applications about them being backed up.

[sbbots]

Thank you both for your answers.