One of the areas that I stumbled upon was having to enable something during the process to take advantage of the new team’s functionality above so wanted to document that also.

Firstly, head on over to the download link posted in the blog linked above this post will also give you a short overview on what you can expect in v5.

Once you have that downloaded, you are good to close down the console and begin the upgrade process, advice here is to make sure all jobs are finished and nothing is scheduled for the next 10 minutes maybe longer depending on the size of the environment.

Run through the pretty simple next next upgrade process.

Then open the console and check you have the correct version. By heading here.

By selecting the about option, you are going to then see this following screen to show you your build number and version.

This shows we have successfully updated our server to v5 and we can start protecting those Microsoft Teams objects.

But before we can do that especially if you are an existing Veeam Backup for Microsoft Office 365 user then you will need to enable this option on the organisation.

What you are going to find is that the Microsoft Teams check box is unselected, if you wish to protect this within the organisation then select that checkbox

If you are a green field first time installation of Veeam Backup for Microsoft Office 365 and you are starting with v5 or newer, then when you add your organisation it is going to look like this.

You can see there that this is automatically selected.

As well as making things much faster when it comes to backing up the data but more importantly the granular recovery and speed of that recovery back into your Office 365 environment.

Microsoft Teams

Microsoft Teams data was already being protected when Veeam Backup for Microsoft Office 365 was protecting your SharePoint Online environment, however when it comes to recovery it wasn’t as nice and granular to perform those recoveries. There was a great post back in 2019 talking about this way of protecting Teams data and restoring by Veeam Vanguard Falko Banaszek.

Now with v5 we have a much better way to not only capture the Microsoft Teams data but also a much faster way to recover granular items with the new Veeam Explorer for Microsoft Teams functionality.

In terms of what granular levels of recovery can we get to, well this would include your team channels, settings, permissions as well as those files and data also stored within Microsoft Teams. Then there is also the search functionality being able to search across chat and files to find the objects you require for recovery. Then for the final step of the restore you can either just grab individual files or grab multiple files and chats and restore those back to Microsoft Office 365.

The one thing not possible is backing up those GIFs but I feel the internet has a big repository of these some place already.

Proxy placement and deployment

With every Veeam release there is always a focus on Performance and Scalability, this release of v5 is no different. The ability to leverage concurrent tasks with SharePoint backup making those backups faster, but also around proxies and scalability, the number of supported proxies for Veeam Backup for Microsoft Office 365 has been increased by something silly like 5 times.

Prior to this release as well the proxies that deal with the movement of data between Microsoft Office 365 and the repository location had to be joined to a trusted domain the same as the Veeam Backup & Replication server, for most cases this is fine but there are some environments where this is not possible or wanted. V5 brings around the ability to now deploy those proxies in a non-domain joined fashion. Not only that but the Veeam Backup for Microsoft Office 365 management server also does not need to be joined to a domain. This really does enable complete flexibility and scalability in those required environments.

Cloud Field Day – Demo Time

For those that know me and the Veeam Product Strategy team you know we don’t leave home without the ability to perform a live demo, especially when it comes to Cloud Field Day and big events like that. Back earlier in 2020 when we were able to do a session there, we decided to show off Veeam Backup for Microsoft Office 365 in general but also highlighting the features and functionality that have now arrived in v5 of the product.

You can see that demo below.

Free

A lot of us will be running our own personal Office 365, and for that we still have you covered with our community edition, this is going to enable you to protect your Office 365 data to either disk or directly to object storage. You can find out more of that here.

Release Notes

There is so much more than what I have just mentioned here in this post but as always I think we do a great job of noting down all of the What’s New features and functionality in the new releases here.

Download

You can download the update or the whole install file by using this link

I will also be recording the update process with my current v4 version of Veeam Backup for Microsoft Office 365 to this latest version, just to highlight some of these new features but also how super simple and easy the upgrade process is. You will find that appear here on my YouTube channel and alongside the existing Veeam Backup for Microsoft Office 365 demos.

The use case we are talking about is the ability to recover your backups from maybe on premises up into Microsoft Azure.

I was asked “what about AWS?” and yes of course if you are using the capacity tier option within Veeam Backup & Replication on premises and you are using the copy mode function to land a copy of your backups on AWS S3 or IBM Cloud or any S3 Compatible storage then there could be possible synergies in doing this in AWS, why I chose Microsoft Azure was simply because there is an Azure Marketplace offering we can take advantage of.

If you would like to see a similar series with AWS then let me know either on twitter or in the comments below. This will involve a different way of automating the provisioning of a Windows OS and the installation of Veeam Backup & Replication, but not too hard as we already have this functionality using Terraform & CHEF but only for vSphere but the code can be changed to work with AWS and really any platform that requires this functionality.

Veeam Configuration

As I said if you followed Part 1 of this series then you will have your Veeam server now running in Azure with no Veeam configuration.

In order for us to automate the direct restore process we need to provide some details in the script which i will share in stages and in full at the end of the post. But as a high level we need to

Add Azure Storage Account
Import Backups
Add Azure Compute Account

Then we will take those backups and run the Direct Restore to Microsoft Azure on the appropriate backups in a converted state ready to be powered on, or you can choose to power them on as part of this script process.

Firstly we need to add the Veeam snap in and connect to the local Veeam Backup & Replication Server, depending on where you run this script you will need to change the appropriate localhost below to the relevant DNS or IP Address. It is my recommendation that this is done on the server itself, but I am exploring how this PowerShell script could be hosted on your network and not publicly and used that way to fill in the secure details.

Add-PSSnapin VeeamPSSnapin



#Connects to Veeam backup server.

Connect-VBRServer -server "localhost"

Next we will add the Microsoft Azure Compute Account, this command will prompt you to login and authenticate into Microsoft Azure. I use MFA so this was the only way I could find to achieve this.

#Add Azure Compute Account



Add-VBRAzureAccount -Region Global

Next we will add the storage account, You will need to update the script with the requirements below.

Access Key – this will be based on a storage account that you have already created and you will need the long access key for authentication.

Azure Blob Account – this is the name of the storage blob account you have previously created. This is the same blob account and process that you used for adding Microsoft Azure Blob Storage to Veeam Backup & Replication on premises.

#Add Azure Storage Account 



$accesskey = "ADD AZURE ACCESS KEY"

 

$blob1 = Add-VBRAzureBlobAccount -Name "AZUREBLOBACCOUT" -SharedKey $accesskey

Now we need to add our capacity tier, this is where you have been sending those backups.

#Add Capacity Tier (Microsoft Azure Blob Storage) Repository 



$account = Get-VBRAzureBlobAccount -Name "AZUREBLOBACCOUNT"

 

$connect = Connect-VBRAzureBlobService -Account $account -RegionType Global -ServiceType CapacityTier



$container = Get-VBRAzureBlobContainer -Connection $connect | where {$_.name -eq 'AZURECONTAINER'}



$folder = Get-VBRAzureBlobFolder -Container $container -Connection $connect

The next part to adding capacity tier is important and I have also added this into the script, this repository needs to be added with exactly the same name that you have in your production Veeam Backup & Replication.

#The name needs to be exactly the same as you find in your production Veeam Backup & Replication server

$repositoryname = "REPOSITORYNAME"



Add-VBRAzureBlobRepository -AzureBlobFolder $folder -Connection $connect -Name $repositoryname

Next we need to import and rescan those backups that are in the Azure Blob Storage.

#Import backups from Capacity Tier Repository 



$repository = Get-VBRObjectStorageRepository -Name $repositoryname



Mount-VBRObjectStorageRepository -Repository $repository 

Rescan-VBREntity -AllRepositories

Now if you are using encryption then you will need the following commands instead of the one above.

#if you have used an encryption key then configure this section 



$key = Get-VBREncryptionKey -Description "Object Storage Key"

Mount-VBRObjectStorageRepository -Repository $repository -EncryptionKey $key

At this point if we were to jump into the Veeam Backup & Replication console we would see our Storage and Compute accounts added to the Cloud Credential Manager, we would see the Microsoft Azure Blob Storage container added to our backup repositories and on the home screen you will see the object storage (imported) which is where you will also see the bakcups that reside there.

Next we need to create the variables in order to start our Direct Restore scenarios to Microsoft Azure.

A lot of the variables are quite self explanatory, but as a brief overview you will need to change the following to suit your backups.

VMBACKUPNAME = Which VM is it you want to restore

AZURECOMPUTEACCOUNT = this is the Azure Compute Account you added to Veeam Backup & Replication at the beginning of the script.

SUBSCRIPTIONNAME = you may have multiple subscriptions on one Azure compute account pick the appropriate one here.

STORAGEACCOUNTFORRESTOREDMACHINE = we are going to be converting that backup to your Azure Storage Group

REGION = Which Azure region would you like this to be restored to

$vmsize = this is where you will define what size Azure VM you wish to use here. In this example Basic_A0 is being used, you can change this to suit your workload.

AZURENETWORK = define the Azure Virtual Network you wish this converted machine to live.

SUBNET = Which subnet should the machine live

AZURERESOURCEGROUP = the Azure Resource Group you wish the VM to live

NAMEFORRESTOREDMACHINEINAZURE = Maybe a different naming conversion but this is what you wish to call your machine in Azure.

 #This next section will enable you to automate the Direct Restore to Microsoft Azure 



$restorepoint = Get-VBRRestorePoint -Name "VMBACKUPNAME" | Sort-Object $_.creationtime -Descending | Select -First 1 



$account = Get-VBRAzureAccount -Type ResourceManager -Name "AZURECOMPUTEACCOUNT"



$subscription = Get-VBRAzureSubscription -Account $account -name "SUBSCRIPTIONNAME"



$storageaccount = Get-VBRAzureStorageAccount -Subscription $subscription -Name "STORAGEACCOUNTFORRESTOREDMACHINE"



$location = Get-VBRAzureLocation -Subscription $subscription -Name "REGION"



$vmsize = Get-VBRAzureVMSize -Subscription $subscription -Location $location -Name Basic_A0



$network = Get-VBRAzureVirtualNetwork -Subscription $subscription -Name "AZURENETWORK"



$subnet = Get-VBRAzureVirtualNetworkSubnet -Network $network -Name "SUBNET"



$resourcegroup = Get-VBRAzureResourceGroup -Subscription $subscription -Name "AZURERESOURCEGROUP"



$RestoredVMName1 = "NAMEOFRESTOREDMACHINEINAZURE"

Now we have everything added to Veeam Backup & Replication, We have all the variables for our machines that we wish to convert and recover to Microsoft Azure VMs. Next is to start the restore process.

Start-VBRVMRestoreToAzure -RestorePoint $restorepoint -Subscription $subscription -StorageAccount $storageaccount -VmSize $vmsize -VirtualNetwork $network -VirtualSubnet $subnet -ResourceGroup $resourcegroup -VmName $RestoredVMName1 -Reason "Automated DR to the Cloud Testing"

The full script can be found here

#This script will automate the configuration steps of adding the following steps

#Add Azure Compute Account

#Add Azure Storage Account 

#Add Capacity Tier (Microsoft Azure Blob Storage) Repository 

#Import backups from Capacity Tier Repository 

#This will then enable you to perform Direct Restore to Azure the image based backups you require. 



Add-PSSnapin VeeamPSSnapin



#Connects to Veeam backup server.

Connect-VBRServer -server "localhost"



#Add Azure Compute Account



#Need to think of a better way to run this as this will close down PowerShell when installing

msiexec.exe /I "C:\Program Files\Veeam\Backup and Replication\Console\azure-powershell.5.1.1.msi"



Add-VBRAzureAccount -Region Global



#Add Azure Storage Account 



$accesskey = "ADD AZURE ACCESS KEY"

 

$blob1 = Add-VBRAzureBlobAccount -Name "AZUREBLOBACCOUT" -SharedKey $accesskey



#Add Capacity Tier (Microsoft Azure Blob Storage) Repository 



$account = Get-VBRAzureBlobAccount -Name "AZUREBLOBACCOUNT"

 

$connect = Connect-VBRAzureBlobService -Account $account -RegionType Global -ServiceType CapacityTier



$container = Get-VBRAzureBlobContainer -Connection $connect | where {$_.name -eq 'AZURECONTAINER'}



$folder = Get-VBRAzureBlobFolder -Container $container -Connection $connect



#The name needs to be exactly the same as you find in your production Veeam Backup & Replication server

$repositoryname = "REPOSITORYNAME"



Add-VBRAzureBlobRepository -AzureBlobFolder $folder -Connection $connect -Name $repositoryname



#Import backups from Capacity Tier Repository 



$repository = Get-VBRObjectStorageRepository -Name $repositoryname



Mount-VBRObjectStorageRepository -Repository $repository 

Rescan-VBREntity -AllRepositories



#if you have used an encryption key then configure this section 



#$key = Get-VBREncryptionKey -Description "Object Storage Key"

#Mount-VBRObjectStorageRepository -Repository $repository -EncryptionKey $key



 #This next section will enable you to automate the Direct Restore to Microsoft Azure 



$restorepoint = Get-VBRRestorePoint -Name "VMBACKUPNAME" | Sort-Object $_.creationtime -Descending | Select -First 1 



$account = Get-VBRAzureAccount -Type ResourceManager -Name "AZURECOMPUTEACCOUNT"



$subscription = Get-VBRAzureSubscription -Account $account -name "SUBSCRIPTIONNAME"



$storageaccount = Get-VBRAzureStorageAccount -Subscription $subscription -Name "STORAGEACCOUNTFORRESTOREDMACHINE"



$location = Get-VBRAzureLocation -Subscription $subscription -Name "REGION"



$vmsize = Get-VBRAzureVMSize -Subscription $subscription -Location $location -Name Basic_A0



$network = Get-VBRAzureVirtualNetwork -Subscription $subscription -Name "AZURENETWORK"



$subnet = Get-VBRAzureVirtualNetworkSubnet -Network $network -Name "SUBNET"



$resourcegroup = Get-VBRAzureResourceGroup -Subscription $subscription -Name "AZURERESOURCEGROUP"



$RestoredVMName1 = "NAMEOFRESTOREDMACHINEINAZURE"





Start-VBRVMRestoreToAzure -RestorePoint $restorepoint -Subscription $subscription -StorageAccount $storageaccount -VmSize $vmsize -VirtualNetwork $network -VirtualSubnet $subnet -ResourceGroup $resourcegroup -VmName $RestoredVMName1 -Reason "Automated DR to the Cloud Testing"

You will also find the most up to date and committed PowerShell script here within the GitHub repository.

Feedback is key on this one and would love to make this work better and faster. Feedback welcome below in the comments as well as getting hold of me on Twitter.

Installing Azure PowerShell

In order for us to start this automated deployment we need to install locally on our machine the Azure PowerShell module.

More details of that can be found here.

Run the following code on your system.

if ($PSVersionTable.PSEdition -eq 'Desktop' -and (Get-Module -Name AzureRM -ListAvailable)) {

    Write-Warning -Message ('Az module not installed. Having both the AzureRM and ' +

      'Az modules installed at the same time is not supported.')

} else {

    Install-Module -Name Az -AllowClobber -Scope CurrentUser

Select either [Y] Yes or [A] Yes to All as this is an untrusted repository. You can also change currentuser to allusers if you wish to enable for all users on the local machine.

Breaking down the code

This section is going to talk through the steps taken in the code, the way in which this will work though is by taking this code from the GitHub Repository you will be able to modify the variables and begin testing yourself without any actual code changes.

First we need to connect to our Azure account, this will provide you with a web browser to login to your Azure Portal, if you are using MFA then this will enable you to authenticate this way also.

# Connect to Azure with a browser sign in token

Connect-AzAccount

Next we want to start defining what, where and how we want this to look in our Azure accounts. It should be pretty straight forward to understand the following but

locName = Azure Location

Publisher Name = Veeam

Offer Name = is the particular offering we wish to deploy from the publisher, there are quite a few so expect to see other options using this method.

SkuName = what product sku of the offering do you wish to use

version = what version of the product

# Set the Marketplace image

$locName="EASTUS"

$pubName="veeam"

$offerName="veeam-backup-replication"

$skuName="veeam-backup-replication-v10"

$version = "10.0.1"

The following are aligned to the environment.

resourcegroup = which resource group do you wish to use this can be an existing resource group or a new name

vmname = what name do you wish your Veeam Backup & Replication server to have within your Azure environment

vmsize = this is the image that will be used, my advice to pick the supported sizes, this is the default size used for production environments.

# Variables for common values

$resourceGroup = "CadeTestingVBR"

$vmName = "CadeVBR"

$vmSize = "Standard_F4s_v2"

Next we need to agree to the license terms of deploying from the marketplace for this specific VM Image. The following commands will do this.

Get-AzVMImage -Location $locName -PublisherName $pubName -Offer $offerName -Skus $skuName -Version $version



$agreementTerms=Get-AzMarketplaceterms -Publisher "veeam" -Product "veeam-backup-replication" -Name "10.0.1"



Set-AzMarketplaceTerms -Publisher "veeam" -Product "veeam-backup-replication" -Name "10.0.1" -Terms $agreementTerms -Accept

If you wish to review the terms then you can do by running the following command. Spoiler alert the command will give you a link to a txt file to save you the hassle here is the link in the txt file where you will find the Veeam EULA – https://www.veeam.com/eula.html

Get-AzMarketplaceTerms -Publisher "veeam" -Product "veeam-backup-replication" -Name "10.0.1"

Next we need to start defining how our Veeam Backup & Replication server will look in regards to configuration of network, authentication and security.

I also wanted to keep this script following best practice and not containing any usernames or passwords so the first config setting is to gather the username and password for your deployed machine in a secure string.

# Create user object

$cred = Get-Credential -Message "Enter a username and password for the virtual machine."

Create a resource group

# Create a resource group



New-AzResourceGroup -Name $resourceGroup -Location $locname -force

Create a subnet configuration

# Create a subnet configuration

$subnetConfig = New-AzVirtualNetworkSubnetConfig -Name "cadesubvbr" -AddressPrefix 10.0.0.0/24

Create a virtual network

# Create a virtual network

$vnet = New-AzVirtualNetwork -ResourceGroupName $resourceGroup -Location $locName `

  -Name CadeVBRNet -AddressPrefix 10.0.0.0/24 -Subnet $subnetConfig

Create a public IP Address

# Create a public IP address and specify a DNS name

$pip = New-AzPublicIpAddress -ResourceGroupName $resourceGroup -Location $locName `

  -Name "CadeVBR$(Get-Random)" -AllocationMethod Static -IdleTimeoutInMinutes 4

Create inbound security group rule for RDP

# Create an inbound network security group rule for port 3389

$nsgRuleRDP = New-AzNetworkSecurityRuleConfig -Name CadeVBRSecurityGroupRuleRDP  -Protocol Tcp `

  -Direction Inbound -Priority 1000 -SourceAddressPrefix * -SourcePortRange * -DestinationAddressPrefix * `

  -DestinationPortRange 3389 -Access Allow

Create network security group

# Create a network security group

$nsg = New-AzNetworkSecurityGroup -ResourceGroupName $resourceGroup -Location $locName `

  -Name CadeVBRNetSecurityGroup -SecurityRules $nsgRuleRDP

Create a virtual network

# Create a virtual network card and associate with public IP address and NSG

$nic = New-AzNetworkInterface -Name CadeVBRNIC -ResourceGroupName $resourceGroup -Location $locName `

  -SubnetId $vnet.Subnets[0].Id -PublicIpAddressId $pip.Id -NetworkSecurityGroupId $nsg.Id

Next we need to define what the virtual machine configuration is going to look in our environment using the above environment configurations.

#Create a virtual machine configuration



$vmConfig = New-AzVMConfig -VMName "$vmName" -VMSize $vmSize 

$vmConfig = Set-AzVMPlan -VM $vmConfig -Publisher $pubName -Product $offerName -Name $skuName

$vmConfig = Set-AzVMOperatingSystem -Windows -VM $vmConfig -ComputerName $vmName -Credential $cred

$vmConfig = Set-AzVMSourceImage -VM $vmConfig -PublisherName $pubName -Offer $offerName -Skus $skuName -Version $version

$vmConfig = Add-AzVMNetworkInterface -Id $nic.Id -VM $vmConfig

Then now we have everything we need we can now begin deploying the machine.

# Create a virtual machine

New-AzVM -ResourceGroupName $resourceGroup -Location $locName -VM $vmConfig

If you saw the video demo you would have seen that the deployment really does not take long at all, I actually think using this method is a little faster either way less than 5 minutes to quickly deploy a Veeam Backup & Replication server in Microsoft Azure.

Now that we have our machine there is one thing we want to do to ensure the next stages of configuration run smoothly. Out of the box there is a requirement for Azure PowerShell to be installed to be able to use the Azure Compute accounts and Direct Restore to Microsoft Azure. The installer is already on the deployed box and if we go through manually you would have to just install that msi instead in this script we remote run a powershell script from GitHub that will do it for you.

# Start Script installation of Azure PowerShell requirement for adding Azure Compute Account

Set-AzVMCustomScriptExtension -ResourceGroupName $resourceGroup `

    -VMName $vmName `

    -Location $locName `

    -FileUri https://raw.githubusercontent.com/MichaelCade/veeamdr/master/AzurePowerShellInstaller.ps1 `

    -Run 'AzurePowerShellInstaller.ps1' `

    -Name DemoScriptExtension

At this stage the PowerShell installation for me has required a reboot but it is very fast and generally up within 10-15 seconds. So we run the following command to pause the command before then understanding what that public IP is and then start a Windows Remote Desktop to that IP address.

Start-Sleep -s 15



Write-host "Your public IP address is $($pip.IpAddress)"

mstsc /v:$($pip.IpAddress)

Now, this might seem like a long winded approach to getting something up and running but with this combined into one script and you having the ability to create all of this on demand brings a powerful story to being able to recover workloads into Microsoft Azure.

In the next parts to this post will concentrate on a configuration script which is where we will configure Veeam Backup & Replication to attach the Microsoft Azure Blob Storage where our backups reside, Our Azure Compute Account and then we can look at how we could automate end to end this process to bring your machines up in Microsoft Azure when you need them or before you need them.

here is the complete script

# Connect to Azure with a browser sign in token

Connect-AzAccount



# Set the Marketplace image

$locName="EASTUS"

$pubName="veeam"

$offerName="veeam-backup-replication"

$skuName="veeam-backup-replication-v10"

$version = "10.0.1"



# Variables for common values

$resourceGroup = "CadeTestingVBR"

$vmName = "CadeVBR"

$vmSize = "Standard_F4s_v2"

$StorageSku = "Premium_LRS"

$StorageName = "cadestorage"



Get-AzVMImage -Location $locName -PublisherName $pubName -Offer $offerName -Skus $skuName -Version $version



$agreementTerms=Get-AzMarketplaceterms -Publisher "veeam" -Product "veeam-backup-replication" -Name "10.0.1"



Set-AzMarketplaceTerms -Publisher "veeam" -Product "veeam-backup-replication" -Name "10.0.1" -Terms $agreementTerms -Accept





# Create user object

$cred = Get-Credential -Message "Enter a username and password for the virtual machine."



# Create a resource group



New-AzResourceGroup -Name $resourceGroup -Location $locname -force



# Create a subnet configuration

$subnetConfig = New-AzVirtualNetworkSubnetConfig -Name "cadesubvbr" -AddressPrefix 10.0.0.0/24



# Create a virtual network

$vnet = New-AzVirtualNetwork -ResourceGroupName $resourceGroup -Location $locName `

  -Name CadeVBRNet -AddressPrefix 10.0.0.0/24 -Subnet $subnetConfig



# Create a public IP address and specify a DNS name

$pip = New-AzPublicIpAddress -ResourceGroupName $resourceGroup -Location $locName `

  -Name "CadeVBR$(Get-Random)" -AllocationMethod Static -IdleTimeoutInMinutes 4



# Create an inbound network security group rule for port 3389

$nsgRuleRDP = New-AzNetworkSecurityRuleConfig -Name CadeVBRSecurityGroupRuleRDP  -Protocol Tcp `

  -Direction Inbound -Priority 1000 -SourceAddressPrefix * -SourcePortRange * -DestinationAddressPrefix * `

  -DestinationPortRange 3389 -Access Allow



# Create a network security group

$nsg = New-AzNetworkSecurityGroup -ResourceGroupName $resourceGroup -Location $locName `

  -Name CadeVBRNetSecurityGroup -SecurityRules $nsgRuleRDP



# Create a virtual network card and associate with public IP address and NSG

$nic = New-AzNetworkInterface -Name CadeVBRNIC -ResourceGroupName $resourceGroup -Location $locName `

  -SubnetId $vnet.Subnets[0].Id -PublicIpAddressId $pip.Id -NetworkSecurityGroupId $nsg.Id



# Create a virtual machine configuration

#vmConfig = New-AzVMConfig -VMName $vmName -VMSize $vmSize | `

#Set-AzVMOperatingSystem -Windows -ComputerName $vmName -Credential $cred | `

#Set-AzVMSourceImage -VM $vmConfig -PublisherName $pubName -Offer $offerName -Skus $skuName -Version $version | `

#Add-AzVMNetworkInterface -Id $nic.Id



#Create a virtual machine configuration



$vmConfig = New-AzVMConfig -VMName "$vmName" -VMSize $vmSize 

$vmConfig = Set-AzVMPlan -VM $vmConfig -Publisher $pubName -Product $offerName -Name $skuName

$vmConfig = Set-AzVMOperatingSystem -Windows -VM $vmConfig -ComputerName $vmName -Credential $cred

$vmConfig = Set-AzVMSourceImage -VM $vmConfig -PublisherName $pubName -Offer $offerName -Skus $skuName -Version $version

$vmConfig = Add-AzVMNetworkInterface -Id $nic.Id -VM $vmConfig



# Create a virtual machine

New-AzVM -ResourceGroupName $resourceGroup -Location $locName -VM $vmConfig



# Start Script installation of Azure PowerShell requirement for adding Azure Compute Account

Set-AzVMCustomScriptExtension -ResourceGroupName $resourceGroup `

    -VMName $vmName `

    -Location $locName `

    -FileUri https://raw.githubusercontent.com/MichaelCade/veeamdr/master/AzurePowerShellInstaller.ps1 `

    -Run 'AzurePowerShellInstaller.ps1' `

    -Name DemoScriptExtension



Start-Sleep -s 15



Write-host "Your public IP address is $($pip.IpAddress)"

mstsc /v:$($pip.IpAddress)

You can also find this version and updated versions of this script here in my GitHub repository.

Any comments feedback either down below here, twitter or on GitHub.

The image below shows pre Veeam Backup & Replication v10 when you go to configure your application aware processing.

Configuration

Now in Veeam Backup & Replication v10 and specifically those orchestrated snapshots only jobs we can be more granular on what we protect as per below.

This option enables you to take a periodic log backup to a Veeam Backup repository, whilst using the storage snapshot as the baseline. This is only applicable to orchestrated storage snapshots (this capability is already there for image based backups) to achieve this in your storage snapshot only job you will walk through the wizard until you get to the guest processing option page and then confirm that you require application-aware processing and then you can select Applications.

Next and this will depend on how many machines you have in your job and the placement of those VMs will depend on if you are wanting to achieve the VMware Snapshot-less approach to getting an application aware and consistent storage snapshot. Select your VM and edit to make the relevant application log file decisions.

For this VM which is a machine with SQL present I can now set the appropriate configuration that I need here.

Oracle would be the same here on the next tab over.

When this job is now scheduled to run if you have adhered to the configuration in the previous blog post around VM, datastore placement and backup job configuration then you can now achieve an application aware storage snapshot, without the requirement of a VMware snapshot whilst also being able to create a periodic log backup and use the storage snapshot as the baseline for any restore functionality.

Recovery

From a recovery point of view obviously this means we can have a much better RPO for our database recoveries, we have the speed from the storage snapshot baseline and we have the transaction log backups stored on a Veeam repository as a .VLB file or files.

A common question I have been asked about this feature is will this work with secondary snapshots, for example with NetApp ONTAP, HPE Nimble and HPE 3PAR we have the capability of being able to leverage their storage replication to create and send their snapshots to secondary systems. This feature will work in those scenarios also.

Another thing to note here is that with HPE Nimble those VM Disks for snapshot-less processing must reside on the same volume collection.

Ok, so how do we recover this data using our Veeam Explorers for SQL or Oracle.

Firstly, you should select the ribbon at the top and choose Restore, choose Restore from backup as our option.

Next, we want to choose the Application items restore option.

You will then see the list of Veeam Explorer options that we have, for this example we will choose SQL but this is also applicable to Oracle recovery options.

At this point we are then faced with the Veeam Explorer for SQL and you should choose the machine that is relevant for your restore operation, specifically here you will see a list of backup jobs and storage snapshots. We will choose our storage snapshot and our SQL server.

You will then be faced with the available restore points, or you can choose the latest available snapshot with the option at the top of the wizard.

Then choose a location for a temporary VM will be registered but remained powered off, this will be automatically removed after the restore operation is closed.

To finish the wizard, give a reason for the restore for audit purposes and then select finish on the summary screen this will then open the Veeam Explorer for SQL with the mounted databases from the restore point you chose.

Up until this point this is not different you could always do this before but you would have created the snapshot whilst also taking a VMware snapshot and you only have point in time copies of your databases on your storage snapshot. What this new feature in Veeam Backup & Replication v10 enables is the ability to restore to a specific point in time using those transaction log backups that we put on our Veeam repository as the .VLB files on a schedule.

Getting down to the specific transaction can also be achieved by selecting the “perform restore to the specific transaction” at the bottom of the wizard above. You then have the ability to fine tune which transaction you wish to restore back to, this is a lab environment so not much happening, but I created a transaction to show you an example.

The transaction log backup job runs permanently in the background, shipping transaction logs to the backup repository at a specific time interval (by default, every 15 minutes). This process was once only available for backup jobs but now you can achieve this with your storage snapshots also.

The transaction log snapshot /backup session starts and stops in the following way:

• The initial session starts when the parent backup job schedule is enabled. After that, the session starts with every new session of the parent backup job.
• The session ends before the next session of the parent backup job, and/or when this parent backup job is disabled.
• When the session ends, Veeam Backup & Replication stops the runtime process and uninstalls it from the VM guest OS. When a new session starts, the runtime process is deployed again.

Hope that was useful any questions let me know here below or get in touch on twitter @MichaelCade1

This was a nice feature that was sneaked into V10 without many people realising.

A common challenge with High IO workloads with VMware snapshots is that it would or could kill performance of likely this mission critical system when a VMware snapshot takes place, which either means you take that risk and manage to get a backup to happen during a relevant window, you leverage crash consistent storage snapshots which also do not require a VMware snapshot or GASP! You just do not do anything and hope that nothing happens to this MISSION CRITICAL system.

Ok so what can we do? – The theory

What if I told you, you could take an application aware and consistent storage snapshot without having to take a VMware snapshot?

If you are running one of the many storage integrations that are supported by Veeam then you are in luck. You can configure a Storage Snapshot only job with your application aware processing configured within the wizard and that is it. Ok there are some caveats. The VM’s virtual disks must be located on the same datastores and they must be unique within the backup job.

Here are some examples:

If you have one Veeam orchestrated snapshot job configured and you have 3 VMs from the same VM Datastore then the traditional method of creating a backup will take place which will involve a VMware snapshot.

Example 1

If you have one VM on a datastore that has high IO and you do not wish this to be affected with VMware snapshots then create one backup job that contains only this VM and you will achieve this application consistent storage snapshot.

Example 2

Finally lets take a Tier 1 application that is made up of 2 virtual machines, these machines reside on their own VM datastores and storage volumes, they are also both added to the same backup job this will also achieve that application consistent storage snapshot.

Example 3

Things to remember

• VM must be the only VM in storage volume / datastore within the backup job.
• If the VM is not the only VM in the storage volume / datastore and backup job, then VMware Snapshot will still take place.
• All VMs that do not qualify will be processed in parallel.
• All VMs that do qualify they will be processed sequentially.

Walkthrough

I am going to pick 3 virtual machines for this test

To match these jobs with the examples above:

• Snapshot-less Orchestrated Snapshot – Same – Example 1 (2 VMs on the same datastore and same storage volume)
• Snapshot-less Orchestrated Snapshot – Single – Example 2 (Single VM on its own unique datastore)
• Snapshot-less Orchestrated Snapshot – Multi – Example 3 (2 VMs on their own unique datastores within the job)

The key to note here is that the datastores mentioned above all contain other VMs in the environment but they are not included in the backup job.

Ok let us walk through creating the orchestrated snapshot job to make this happen. Ok so this is pretty simple but it is important to know where VMs are being stored to take advantage of this functionality, if that VM moves then it will revert back to a VMware snapshot unless it is a VM in it’s own Backup Job. First of all as with all Veeam jobs, give it a relevant name.

Click add and choose your virtual machines, this can be straight via the VM name and remember there is a search function there that will help with choosing out granular machines. You can also use vSphere tags but remember where the VMs are placed in order to use that option.

Next up, because we are running orchestrated snapshots for this role, at this point you will have already had to install or add your storage system within Veeam Backup & Replication, this way depending on the storage system you are using you can select the option for Primary Storage Snapshot Only for your specific storage integration.

The next screen is for application aware processing, this is the whole reason for the enhancement, we could already do crash consistent snapshot orchestration prior to v10 and this does not have the same limitations. For crash consistent you can have multiple VMs residing on the same storage volume. Add in your credentials and hit the test here to confirm all is good.

Most likely you are going to want to schedule this to happen to sort your RPO requirements.

Summary, this is what the job looks like, you can either save this and exit or you can say start the job now.

The Results

Now its worth pointing out that the systems I have chosen for this demo are lab machines, if you didn’t guess they are an Active Directory Domain Controller, Veeam ONE server running SQL Express and Veeam Backup & Replication also running SQL Express. (not the Veeam Backup & Replication server running the jobs) none of these systems are actually running high IO workloads this is to prove the concept so please ignore the durations.

This first one is in line with example 1, we have two VMs stored on the same datastore and storage volume and clearly both within the same backup job, you can see I have highlighted that in this instance we are going to take a VMware snapshot.

The second example is of a single VM in its own backup job. You can see that there is no “creating VM snapshot” or “Removing VM snapshot” you only see “Primary storage snapshot created successfully”

Finally, we have example 3, this shows 2 VMs in one backup job but both VMs are stored on two different storage volumes / datastores. Much the same as example 2 above now you can see that no VMware snapshot is taking place just the storage snapshot.

And just to confirm that we are application consistent here we have the logs being truncated in the summary below. There were some also enhancement in this area when it comes to SQL and Oracle that I will have to get to in another post.

So, you could do this kind of prior to Veeam Backup & Replication v10 but they would be crash consistent and that’s a huge risk to take on such important systems. Veeam also has this capability already with the storage integration with Cisco HyperFlex as this uses the native VM snapshot engine and API available on the HyperFlex system to achieve this.

And what if I told you, this has been around for years with Veeam Backup & Replication. Veeam have had this capability for a while now since 2016 in fact.

Primary use cases that we have seen have been,

Test and development

When you have the public cloud at your fingertips why not take advantage of it? Instead of having to purchase specific test and development environments. Also, perfect idea if you are looking to just see how certain apps and workloads are going to run in Microsoft Azure.

Data Migration

Let’s say you know where you are going and that is Microsoft Azure, how are you going to get those workloads there in a fast and efficient manner, Direct Restore to Microsoft Azure enables a fast way to restore those backups to the public cloud without compromising on keeping the restore points and more to the point the rollback is back to those production systems you also still have on premises.

Data recovery

We tend to talk about the bad failure scenarios, or we think nothing will happen to us and not really touch on the in between. What if you lost half your production virtualisation servers due to an outage of some description? What would you do? This feature within Veeam Backup & Replication enables you to restore some of your workloads from backups into Microsoft Azure you can then use an existing VPN or some other connectivity to join the environments and continue working or you could use VeeamPN to achieve this.

Walkthrough

In this YouTube video I walk through how easy and simple it is to get those image-based backups restored into Microsoft Azure as native Azure VMs for some of those use cases mentioned above. This also ties into the Veeam Backup for Microsoft Azure that was released this week.

Where should I run the conversion process?

I ran some tests for this one to determine for my lab where and what would be the best practice when it comes to restoring workloads into Microsoft Azure. Veeam offers a lot of choice when it comes to restore and how to assist when environmental challenges are in the way. Things like link speed to the public cloud due to location or other reasons for that. Also since the release of this feature back in 2016 there have also been many other enhancements and features added to Veeam Backup & Replication including the new Veeam Cloud Tier which gives us the ability to store our backups in Object storage, well we can also recover from those as well. This video linked below goes into more detail around where and what considerations you should take when looking to restore workloads to the public cloud.

Cloud Tier

It is only right that we have spoken about protecting native Azure VMs using the Veeam Backup for Microsoft Azure, we have spoken about getting your image based backups from either virtual or physical platforms that you have on premises or even in other public clouds to Microsoft Azure so I had to mention Cloud Tier or Capacity tier on how we can tier our backups or copy our backups into Microsoft Azure Blob Storage for either a long term retention or an offsite copy of your data.

Couple all these features together and we have a pretty dynamic and flexible way of being able to move data to from and within the public clouds.

If you have any questions or comments, feedback at all on the videos then please let me know either here in the comments, on the YouTube channel or on Twitter, a side note here is that I will be creating more video content over the next few weeks whilst we are stuck at home, I for one have been consuming a lot more of my news and education through YouTube and judging by the uptake in subscriptions I think you are too so let me know anything you want to see or for me to walk through.

What is Veeam Backup for Microsoft Azure?

This new product focuses in on the Azure IaaS workloads you have running in the public cloud, much like the Veeam Backup for AWS edition that was released early this year, this product provides you the ability to protect those Azure VMs without having to install and agent on each one. It is a policy driven approach allowing for both snapshots and backups to be part of your data management plan when it comes to Microsoft Azure.

The product is a standalone solution that is deployable from the Microsoft Azure marketplace. A very easy to use wizard driven approach to configuration and management. Veeam Backup for Microsoft Azure Free Edition and subsequent versions are available within the Microsoft Azure Marketplace.

The FREE edition allows you to protect 10 Azure VMs using native snapshots and then tier those snapshots to an Azure Blob Storage repository.

Within the Azure Blob Storage Repository these backups are stored in the portable data format that sets Veeam apart from the other vendors in this space. This allows for the Veeam Backup & Replication External Repository feature to be leveraged and enables the ability to further additional data protection or allow for other tasks such as migrations or on premises data recovery.

As you would expect the offering also allows you to recover those Azure Virtual Machines not only back where they initially resided but also across accounts and even across regions. As well as being able to provide file level recovery for a more granular option.

Another cool feature is the ability to see a level of cloud cost, when you create your policies through the wizard driven approach you have the ability to start seeing some cost forecasting so you can make better decisions about your cloud cost consumption.

Policies, Workers & Protected Data

Those familiar with Veeam will notice a different approach to some of the key functions and naming, and maybe you can liken these new terms with those found in Veeam Backup & Replication they have some differences.

Those familiar with Veeam Backup & Replication will recognise Policies as something more commonly known as Backup Jobs, however even within Veeam Backup & Replication world we are seeing policies now entering the fold with the CDP policy coming in later releases.

Policies give you the ability to define several requirements when it comes to your cloud data management. But again, it is that same very easy to use wizard driven approach that all Veeam customers will be familiar with.

You can choose to protect everything in a region, or we can be granular on what to protect. An awesome feature here is that you can select either by Instance or by Tag. Tags really lend well to the fast-moving pace of Cloud Instances being spun up and spun down all the time. The ability to use tags means we can protect in a more dynamic fashion. We will demonstrate the ease of use and how dynamic these tags within Azure can be created and used for your data management needs.

I mentioned above about Snapshots and Backups and how they are used together in this product to provide the best of both worlds when it comes to fast recovery points but also an out of band copy of your data not linked to the original VM.

You may wish on some workloads to only provide Snapshots and some only backups, or both. Snapshot settings allows you to define when these will be taken and how many snapshots you intend to keep. Backup Settings is where we can define that Microsoft Azure Blob Storage repository in which we wish to store those backups to, this will also play the part of making that data visible if you wish to see that within Veeam Backup & Replication. You also have the same retention setting to define here.

The workers are configured during the configuration stage and setup of the Veeam Backup for Microsoft Azure. Those familiar with Veeam Backup & Replication could maybe liken these worker nodes to the Veeam Backup Proxy component within VBR.

The worker is a Linux based instance that is deployed and used when data needs to be transferred, the worker is used for both backup and recovery. When the policy is complete then the workers are shut down but remain in place for the next scheduled policy to take place.

Cost Estimations

A unique feature that is built into the Veeam Backup for Microsoft Azure free edition and will obviously include other versions is the ability to estimate cost when it comes to backups and storing the retention you have defined. This is something else we go into further detail within the video walk-through below.

As I have mentioned this post gives a very high-level overview of what you can find with the new product but if you would like to see more then I have created a walk-through below. Any comments please comment here, on the YouTube video or find me on twitter.

Let me know what you think to the YouTube walk-through’s it is something I am intending to really increase given that we are house bound and I have more time to create this content.

We seem to be heading fast toward VeeamON 2019, this year our conference heads to Miami and none other than the famous Fontainebleau Miami Beach luxury hotel and resort. I have never been to Miami, so I am really looking forward to being there but also there is nothing quite like the VeeamON feeling and that of your own conference.

The conference officially runs from May 20^th to May 22^nd all in the same resort. But the fun actually starts on the Saturday for the die-hard techies heading out to Miami they will be starting their VMCE course that runs from Saturday to Monday before the conference kicks off with a welcome reception on the Monday evening.

We then have two full days of conference, breakout sessions and general sessions both of which I am going to get into more detail on later on.

Obviously, it wouldn’t be a Veeam conference if we didn’t have the famous Veeam party to close out the conference, pretty excited to see Flo-Rida perform.

My Breakout picks for the conference

We have I think 60+ breakout sessions this year, lots of technical content, business decision maker content, alliance content it’s a full-blown packed agenda of sessions and I have no doubt that everyone has put an enormous effort in to get the right content for the audience.

The length of the sessions are 45 minutes, I think this is a great move as this means the content needs to be on point and resonating with the audience but also not too long to lose interest. An attendee can hit 7 breakout sessions, so you have to choose carefully and plan your agenda accordingly with that in mind. Below are some of my picks.

There is an App for the event you can grab that will show all the other sessions and what else is happening during the event.

1.    To Download the app, search for CrowdCompass AttendeeHub in the App Store or Google Play.

2.    Once downloaded, search the app for VeeamON 2019 Miami event.

3.    Log in to the VeeamON Event with the same First and Last name you used to register for VeeamON

I am pretty sure I won’t get to attend many of these sessions, unless I am presenting so anyone reading this, I would love an overview of the sessions you attend.

Day 1

10:20 – 11:05

Cumulonimbus – Cloud Tier Deep Dive & Best Practices – intrigued by what Cumulonimbus means but also the level of technical differentiation we have with our Cloud Tier feature that landed in the early part of 2019 is well worth seeing.

11:25 – 12:10

From the Architect’s Desk: Sizing of Veeam Backup & Replication, Proxies and Repositories – Now I have seen the presentation for this, and I know that this is going to get quickly get pretty technically deep, well worth the spot.

13:30 – 14:15

NetApp and Veeam: Deep Dive Into How Snapshots and Secondary Storage Can Help You Get More Out of Backup – This seems to be the Alliance 45 minutes, I am going to highlight the NetApp & Veeam story as one to attend, the end to end capabilities we have with NetApp is truly worth seeing.

Day 2

09:15 – 10:00

Activate Your Data with Veeam DataLabs – of course I am going to kick start day 2 with this one, and I will be making this one. I will be presenting on an end to end overview of Veeam DataLabs, what it is and how you can use it.

11:50 – 12:35

Now at this time there is a top-secret session and I cannot divulge what that is going to be about but that might be worth attending if there is room.

Architecture, Installation and Design for Veeam Backup for Microsoft Office 365 – This one will be a full on deep dive into Veeam offering with Office 365 and if this is your world or is going to be soon then it’s worth knowing how the parts fit together and how to architect VBO for your environment.

14:00 – 14:45

Veeam ONE 9.5 U4 Part 1: Monitor, Veeam Intelligent Diagnostics and Business View – Veeam ONE got a lot of love with the most recent release but it’s always been such a great product and really opens up the visibility into your whole environment not just your backup infrastructure.

Also, this slot has a session on Veeam Explorers another capability that is such a powerful differentiator and worth understanding some of the tips and tricks there.

15:05 – 15:50

Veeam ONE 9.5 U4 Part 2: Reporter, Heatmaps and Custom Reports – this is part two of the previous session so if that one got your interest then carry on listening to what can be done with Veeam ONE.

How I Stopped Worrying and Loved the Tape Media – There you go I have done it. I have suggested a tape session, and why not it’s still a massive strategy within many IT environments and still many require tape functionality this session will take a look into what Veeam is doing around Tape.

Technology General Session

The thing I want to close on is the Technology General Session where we will be live streaming out beyond the audience that are with us in Miami and we will be showing some technical demos. We then have an exclusive second half of the session where the stream will be turned off and we will share some of the futures that Veeam have coming later on in the year or sooner. This session will be live streamed from 15:30 Miami time.

With that I hope to see some of you there, if you are then don’t be shy and say hi, I will be the guy scrambling around between sessions and other matters probably wearing a funky vZilla t shirt or hopefully something if they arrive in time before I leave.

Hope you have a great VeeamON

The portability and flexibility of the Veeam Backup file (.vbk) that is created with the Veeam Agents for Windows and Linux as well as the VMware and Hyper-V backups is also the same format that we see with the Veeam Availability for Nutanix AHV. This allows us to extend your availability options when we look at where we can store copies of our data offsite.

The 3-2-1 rule is a methodology that Veeam has been advocating for many years now, 3 copies of your data on 2 different media types and 1 of those being offsite. This protects your business against many different failure scenarios. That 1 copy offsite is the one I want to touch on in this post.

The focus of this post is how you can take your Veeam Availability for Nutanix AHV backups and send them to one of the many Veeam Cloud Connect Service Providers for that offsite copy of your data and availability.

Adding your Veeam Cloud Connect Service Provider

It’s an easy process to start getting your data to an offsite location. Leveraging one of the Veeam Cloud Service Providers (VCSP) first within Veeam Backup & Replication we need to add in our Cloud Connect DNS name or IP Address.

Your service provider will have supplied the DNS Name or IP Address to use in the above screen, they would have also provided you with unique credentials that can be added here.

The Service Provider would have also setup available resources to you as a tenant. In the below scenario this is a repository to store those backups. This could also include the ability to leverage the Veeam WAN Accelerator technology if the links meet the requirements to do so.

We then apply those configuration changes and you will see the process running through on screen.

Providing you have given all the correct information you will then see the successful summary on the final screen of the wizard.

Creating a Backup Copy Job

The next stage is defining the Backup Copy job to start sending data to the Cloud Repository hosted by the Service Provider. From the drop down select backup copy and providing you are running Veeam Backup & Replication 9.5 update 3a you will see the Nutanix Policy available if you have Veeam Availability for Nutanix AHV jobs enabled and running.

For those that have created the Veeam Backup Copy job it is a very simple wizard driven approach and this job is no different other than the source being a Nutanix Policy, above you can see the other options that can be used for Backup Copy job sources.

At this screen we can now choose our Nutanix Policies that we want to include in this job to our new Cloud Repository.

If you happen to have several Nutanix Policies, we can choose multiple policies and include them in the same backup copy schedule.

For this walkthrough I am going to use just the one policy and include this as the object in the job.

Next is where do we want to store the backups, so we select the newly created Cloud Repository. This could be any supported Veeam Backup Repository.

In keeping in accordance to your companies regulation then you may get this warning if you are not tagging your repositories and their location, my system knows that my Nutanix policies are being stored in London but the Cloud Repository that we have added has no location if you are using this feature in accordance to compliance or just organisation then this prompt will warn you to make that change in configuration. More information on location tagging can be found here in these two posts.

Veeam Backup & Replication – Location Tagging

Veeam ONE – Location Tagging Reporting

I mentioned earlier on in the post about the Service Provider enabling the resources available to you as a tenant, if WAN Acceleration was a requirement due to poor connection link speeds then this is where you could configure the option to use.

The next is the schedule, when do we want this to run? For this example, I am happy for this to continuously run but you can see the granular time span that you can choose when things should be running and not.

Finally, a summary of the configuration we have made.

Sending Data Offsite

Now we have the new Cloud Repository configured and the Job to get that data offsite, the job should then be started, and you will see the first job progress run through with all details of data processed and transferred.

Once the job is complete you will see this job run in accordance to the schedule you have configured.

Recovery

If we ever need to recover from this data, then we can do so by navigating through Veeam Backup & Replication to perform the recovery steps as per <recovery post link> simply select the restore icon and run through the wizard.

Select the backup copy job you wish to recover from and run through the wizard that is explained in the link posted above.