Installing Protection Agents behind a Firewall

Applies To: Data Protection Manager, System Center Data Protection Manager 2007

If you want to install protection agents on computers that reside behind a firewall, DPM provides an executable file named DPM2007\Agents\DPMAgentInstaller.exe that performs the following:

  • Installs the protection agent prerequisites and the DPM protection agent.

  • Configures the target computer to receive commands from the specified DPM server name.

  • Configures the firewall to allow communication to come in.


If you are using a language other than English, you can select the localized agent installer from DPM2007\Agents<language>\DPMAgentInstaller.exe.

To install a protection agent on a server behind a firewall

  1. On the computer on which you want to install the protection agent, from the Windows command prompt, from the DPM2007\Agents folder, type DpmAgentInstaller.exe <DPM server name>.


    You can also run the executable using Microsoft Systems Management Server (SMS).

  2. On the DPM server, from the DPM Management Shell prompt, type Attach-ProductionServer.ps1 <DPM server name> <production server name> <user name> <password> <domain>.

    The password parameter is not required and we recommend that you do not provide it. DPM will prompt you for a password, which will not appear on the screen. However, you can provide the password if you want to use the script to install a protection agent on a large number of computers.


    If you are attaching the protected computer on a different domain, you must specify the fully qualified domain name. For example,, where Computer1 is the name of the protected computer, and is the domain to which you are attaching the computer.

The required configurations to protect the server are created. DPM Administrator Console will now display the protected server. To display the correct protection agent status, in the Monitoring task area, on the Jobs tab, click Refresh Job.

See Also

Other Resources

Configuring Firewalls