Trying to implement cyclic disaster recovery between our DPM1 and DPM2 
servers. DPM1 is at Site 1 and DPM2 is at Site 2 (one domain across both 
sites). Sites are linked using site-to-site VPN on ISA 2006 servers. DPM1 and 
DPM2 are member of same domain. Firewalls on DPM1 and DPM2 are completely 
off. 

When I try to deploy DPM agent from DPM1 to DPM2 using domain admin 
credentials I first get 'DPM could not identify if computer DPM2 is clusted 
(ID: 405)' then if I click OK and try to proceed the agent install fails with 
'Error 346: DPM is unable to retreive the configuration information from 
DPM2...'

When I try to do manual install of DPM agent I get 'Protection agent cannot 
be installed on machine where DPM is installed'

I can successfully deploy DPM agent to computers within the same site as the 
DPM server. It is only cross-site agent deployment that fails. I have looked 
carefully at ISA Server 2006 monitoring and see that it is not blocking any 
traffic between the DPM servers. I have created an 'Allow all' rule between 
the two DPM servers on both ISA servers.

Thank you for any help you can offer!

        Can you try to run wbemtest and try to connect from primary server 
to secondary server and vice verse? This will validate that the machines are 
accessible to each other. Also have enabled all the required ports in the 
ISA firewall servers? Please find full list at: 
http://technet.microsoft.com/en-us/library/cc161275.aspx. Installing agent 
manually is not supported for DR protection.

Thanks,
Praveen D [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

"sleestak" <sleestak@discussions.microsoft.com> wrote in message 
news:AD25EFE3-EB7C-4ABA-9246-A64995949272@microsoft.com...
> Trying to implement cyclic disaster recovery between our DPM1 and DPM2
> servers. DPM1 is at Site 1 and DPM2 is at Site 2 (one domain across both
> sites). Sites are linked using site-to-site VPN on ISA 2006 servers. DPM1 
> and
> DPM2 are member of same domain. Firewalls on DPM1 and DPM2 are completely
> off.
>
> When I try to deploy DPM agent from DPM1 to DPM2 using domain admin
> credentials I first get 'DPM could not identify if computer DPM2 is 
> clusted
> (ID: 405)' then if I click OK and try to proceed the agent install fails 
> with
> 'Error 346: DPM is unable to retreive the configuration information from
> DPM2...'
>
> When I try to do manual install of DPM agent I get 'Protection agent 
> cannot
> be installed on machine where DPM is installed'
>
> I can successfully deploy DPM agent to computers within the same site as 
> the
> DPM server. It is only cross-site agent deployment that fails. I have 
> looked
> carefully at ISA Server 2006 monitoring and see that it is not blocking 
> any
> traffic between the DPM servers. I have created an 'Allow all' rule 
> between
> the two DPM servers on both ISA servers.
>
> Thank you for any help you can offer! 

        Can you try to run wbemtest and try to connect from primary server 
to secondary server and vice verse? This will validate that the machines are 
accessible to each other. Also have enabled all the required ports in the 
ISA firewall servers? Please find full list at: 
http://technet.microsoft.com/en-us/library/cc161275.aspx. Installing agent 
manually is not supported for DR protection.

Thanks,
Praveen D [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

"sleestak" <sleestak@discussions.microsoft.com> wrote in message 
news:AD25EFE3-EB7C-4ABA-9246-A64995949272@microsoft.com...
> Trying to implement cyclic disaster recovery between our DPM1 and DPM2
> servers. DPM1 is at Site 1 and DPM2 is at Site 2 (one domain across both
> sites). Sites are linked using site-to-site VPN on ISA 2006 servers. DPM1 
> and
> DPM2 are member of same domain. Firewalls on DPM1 and DPM2 are completely
> off.
>
> When I try to deploy DPM agent from DPM1 to DPM2 using domain admin
> credentials I first get 'DPM could not identify if computer DPM2 is 
> clusted
> (ID: 405)' then if I click OK and try to proceed the agent install fails 
> with
> 'Error 346: DPM is unable to retreive the configuration information from
> DPM2...'
>
> When I try to do manual install of DPM agent I get 'Protection agent 
> cannot
> be installed on machine where DPM is installed'
>
> I can successfully deploy DPM agent to computers within the same site as 
> the
> DPM server. It is only cross-site agent deployment that fails. I have 
> looked
> carefully at ISA Server 2006 monitoring and see that it is not blocking 
> any
> traffic between the DPM servers. I have created an 'Allow all' rule 
> between
> the two DPM servers on both ISA servers.
>
> Thank you for any help you can offer! 

wbemtest tests succeed to servers within the same site as the DPM server but 
fail to servers in the other site. Seems to point to ISA although ISA 
monitoring continues to show no traffic being blocked and we do have an 
'Allow all' rule in place on ISA servers in both sites.

"Praveen D [MSFT]" wrote:

>         Can you try to run wbemtest and try to connect from primary server 
> to secondary server and vice verse? This will validate that the machines are 
> accessible to each other. Also have enabled all the required ports in the 
> ISA firewall servers? Please find full list at: 
> http://technet.microsoft.com/en-us/library/cc161275.aspx. Installing agent 
> manually is not supported for DR protection.
> 
> Thanks,
> Praveen D [MSFT]
> This posting is provided "AS IS" with no warranties, and confers no rights.
> 
> "sleestak" <sleestak@discussions.microsoft.com> wrote in message 
> news:AD25EFE3-EB7C-4ABA-9246-A64995949272@microsoft.com...
> > Trying to implement cyclic disaster recovery between our DPM1 and DPM2
> > servers. DPM1 is at Site 1 and DPM2 is at Site 2 (one domain across both
> > sites). Sites are linked using site-to-site VPN on ISA 2006 servers. DPM1 
> > and
> > DPM2 are member of same domain. Firewalls on DPM1 and DPM2 are completely
> > off.
> >
> > When I try to deploy DPM agent from DPM1 to DPM2 using domain admin
> > credentials I first get 'DPM could not identify if computer DPM2 is 
> > clusted
> > (ID: 405)' then if I click OK and try to proceed the agent install fails 
> > with
> > 'Error 346: DPM is unable to retreive the configuration information from
> > DPM2...'
> >
> > When I try to do manual install of DPM agent I get 'Protection agent 
> > cannot
> > be installed on machine where DPM is installed'
> >
> > I can successfully deploy DPM agent to computers within the same site as 
> > the
> > DPM server. It is only cross-site agent deployment that fails. I have 
> > looked
> > carefully at ISA Server 2006 monitoring and see that it is not blocking 
> > any
> > traffic between the DPM servers. I have created an 'Allow all' rule 
> > between
> > the two DPM servers on both ISA servers.
> >
> > Thank you for any help you can offer! 
> 
> .
> 

Solution: In ISA 2006 System Policy Editor, clear the 'Enforce strict RPC 
compliance' checkbox under Authentication Services > Active Directory. Also, 
in the properties of the access rule used to allow traffic across the 
site-to-site connection, again check to make sure 'Enforce strict RPC 
compliance' checkbox is cleared.

Thanks very much for putting us on the right path Praveen!

"sleestak" wrote:

> wbemtest tests succeed to servers within the same site as the DPM server but 
> fail to servers in the other site. Seems to point to ISA although ISA 
> monitoring continues to show no traffic being blocked and we do have an 
> 'Allow all' rule in place on ISA servers in both sites.
> 
> "Praveen D [MSFT]" wrote:
> 
> >         Can you try to run wbemtest and try to connect from primary server 
> > to secondary server and vice verse? This will validate that the machines are 
> > accessible to each other. Also have enabled all the required ports in the 
> > ISA firewall servers? Please find full list at: 
> > http://technet.microsoft.com/en-us/library/cc161275.aspx. Installing agent 
> > manually is not supported for DR protection.
> > 
> > Thanks,
> > Praveen D [MSFT]
> > This posting is provided "AS IS" with no warranties, and confers no rights.
> > 
> > "sleestak" <sleestak@discussions.microsoft.com> wrote in message 
> > news:AD25EFE3-EB7C-4ABA-9246-A64995949272@microsoft.com...
> > > Trying to implement cyclic disaster recovery between our DPM1 and DPM2
> > > servers. DPM1 is at Site 1 and DPM2 is at Site 2 (one domain across both
> > > sites). Sites are linked using site-to-site VPN on ISA 2006 servers. DPM1 
> > > and
> > > DPM2 are member of same domain. Firewalls on DPM1 and DPM2 are completely
> > > off.
> > >
> > > When I try to deploy DPM agent from DPM1 to DPM2 using domain admin
> > > credentials I first get 'DPM could not identify if computer DPM2 is 
> > > clusted
> > > (ID: 405)' then if I click OK and try to proceed the agent install fails 
> > > with
> > > 'Error 346: DPM is unable to retreive the configuration information from
> > > DPM2...'
> > >
> > > When I try to do manual install of DPM agent I get 'Protection agent 
> > > cannot
> > > be installed on machine where DPM is installed'
> > >
> > > I can successfully deploy DPM agent to computers within the same site as 
> > > the
> > > DPM server. It is only cross-site agent deployment that fails. I have 
> > > looked
> > > carefully at ISA Server 2006 monitoring and see that it is not blocking 
> > > any
> > > traffic between the DPM servers. I have created an 'Allow all' rule 
> > > between
> > > the two DPM servers on both ISA servers.
> > >
> > > Thank you for any help you can offer! 
> > 
> > .
> >