Today Veeam hosted a webinar titled “Running Exchange on VMware”. Most of the focus of course was on backup and recovery of Exchange once it’s been virtualized. As I was preparing for the webinar (with a lot of help from Anton) I realized that the information would also make a good blog post. Below are the main points of backup and recovery for Microsoft Exchange and how Veeam Backup & Replication v5 addresses them.

From the Microsoft perspective, there are 3 core rules to backup and recovery of Exchange servers:

In order to be compliant with Exchange Server, VSS based backup applications must follow three basic requirements to ensure the integrity and recoverability of shadow copy backups. If these requirements are not followed, Microsoft … will not be able to troubleshoot backup and restore issues.

Rule 1: Exchange must be backed up exclusively through the Exchange VSS Writer.

Rule 2: Backup should not be relied on until the backup application has completed integrity verification.

Rule 3: Restores to original location must be done exclusively with the Exchange VSS Writer.

Rule 1: VSS Aware Backup

Veeam implements proprietary Microsoft VSS integration, instead of relying on VMware Tools VSS integration components.

  • Fully automated and transparent (no agents to deploy/configure/update/monitor)
  • Supported directly by Veeam, not VMware (no finger pointing)
  • No limitations of VMware Tools VSS: supports transaction logs processing, all ESX(i) and Windows versions, dynamic disks, IDE disks, VM without UUID, etc.

More information:

Rule 2: Verify Before You Rely

SureBackup Recovery Verification

  • Great flexibility (supports custom scripts)
  • Choose method of verification that is sufficient for you: remote run eseutil or isinteg on test VM (no stress on production), log on to test mailbox via HTTPS and query test email message

Keep in mind DC dependency!

  • Exchange must see DC to be able to properly boot in the isolated environment. SureBackup Application Groups take care of this for you.

Rule 3: VSS Aware Restore

Restores to original location must be done exclusively with the Exchange VSS Writer, and in correct sequence:

  • Boot up Exchange VM with mailbox stores dismounted
  • Tell Exchange VSS Writer to perform restore from VSS snapshot
  • Mount mailbox stores

Veeam implements these Microsoft requirements

  • Most image-level backup vendors do not do this, they just boot VM normally like there is no Exchange present
  • Perform a test restore to check your current solution and look for these events on the restored Exchange server, if they don’t exist your vendor is not following Rule 3:
Event Type: Information Event Type: Information
Event Source: MSExchangeIS Event Source: MSExchangeIS
Event Category: Exchange VSS Writer Event Category: Exchange VSS Writer
Event ID: 9620 Event ID: 9618
User: N/A User: N/A
Computer: Computer:
General: Exchange VSS Writer (instance GUID) has processed pre-restore events successfully. General: Exchange VSS Writer (instance GUID) has processed post-restore events successfully.

Transaction Logs

If transaction log files are not pruned after backup, the log files accumulate until they fill all the available disk space. The Exchange VSS Writer implements transaction log pruning capabilities, however VMware Tools VSS is NOT a backup application and cannot know if backup was completed successfully. Thus, it cannot process transaction logs by design.

  • Any application “riding” on VMware Tools VSS instead of providing proprietary VSS integration will not truncate logs.
  • Some solutions do provide transaction log pruning, but perform log pruning right after the snapshot is taken.

This approach is actually worse than no pruning at all: if backup does not complete successfully, you will not have a good backup, and your transaction logs will be gone. You will not be able to restore in case of disaster.

To check your current image-level solution, perform test a backup to check (on a test Exchange server, not production)

  • Perform backup, wait for the job to complete successfully, ensure transaction logs are actually pruned.
  • Perform another backup, but this time reset the backup server while the job is running (after virtual disk copy starts). Transaction logs should NOT be pruned.

Veeam prunes logs on successful backup by default and v5 provides advanced transaction log handling options as seen in this screen shot:
VMEXCH1 Processing Settings

Granular Recovery Challenges

Typically granular recovery from an image-level backup was difficult, you had to restore entire Active Directory and Exchange servers to an isolated environment before your could restore any items. The process is time and personnel resource intensive. There are some 3rd party tools that mount the Exchange data store but these still require data stores to be extracted first (time and disk space) and there’s an additional licensing cost associated (usually per mailbox)

Agent-based solutions have existed for years that can back up the Exchange data, but that’s not the most efficient way to backup Exchange in a virtual environment. Additionally, if you combine agent based with image based, you are backing up the same data twice, taking additional resources and storage media.

Granular Recovery with vPower™

Veeam’s patent-pending approach fully utilizes the existing virtual infrastructure. The Veeam application group and virtual lab features automatically create an isolated environment and with vPower, you simply run the AD and Exchange servers directly from the backup files, no extraction necessary.

Veeam’s Exchange AIR (Application Item Recovery) Wizard utilizes Microsoft Exchange APIs and connects to both the production and isolated environments providing you with Exchange item-level recovery in minutes, not hours!

More Information

Microsoft on Exchange 2003 VSS Backup and Restore
Microsoft on Exchange 2007 VSS Backup and Restore
Microsoft Exchange Training Course

See also

Veeam Community Forums: Backing Up Exchange Server

How to migrate virtual Exchange Servers with no risk

Get weekly blog updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam’s Privacy Policy
Cheers for trusting us with the spot in your mailbox!
Now you’re less likely to miss what’s been brewing in our blog with this weekly digest.

Eliminate Data Loss
Eliminate Ransomware

#1 Backup and Recovery


  • AndyBH says:

    Is this Webinar on Exchange Recovery available to view online somewhere ? I’m pretty much sold on ditching our overnight tape backup window and relying purely on Veeam but other colleagues are still keen to hang on to the old way of doing things – I need to be able to prove that Exchange recovery from Veeam is not just as good as current methods (which to be honest are a pita) but much better !!



  • Anton Gostev says:

    Hi Andy, sure – you can find it here:

  • Saved as a favorite, I indeed like your blog!

  • Shajith says:


    I have few questions regarding the veeam backup; Which are given below.

    1. Can Veeam Backup and Recovery do a backup directly to Tape Library
    2. Can Image Level Backup can perform a File Level Recovery and Single Email recovery in the case of exchange server 2003,2007 and 2010 enviornment.
    3. Can Veeam perform Exchange VM, and Exchange Transaction Log Flushing. If I perform the same with Veeam Backup and Recovery software with out dedicated Agents.

    Expecting for the Soonest answer.

  • vmdoug says:

    1. No, Veeam Backup & Replication is direct to disk, currently there is no support for Tape
    2. Yes, Veeam Backup & Replication has Instant File-Level Recovery for any file system the image level backup. Support for Exchange (or any application) is also supported on the VMware Platform with our Enterprise version and vPower technology.
    3. Yes, Veeam has it’s own VSS integration and application aware processing so flushing Exchange Logs is supported, simply check “Application Aware Processing” in the job setup wizard

  • Doug says:

    When Veam performs a backup in a DAG (three-node config),it’s pausing the I/O node holding the DAG IP address and then fails over to another node. When the I/O resumes, I’m getting an IP address conflict.

  • Nice Article and I appreciate for sharing knowledge on exchange server recovery in detail, It is very helps full to recover data & backup from server.

  • I’m not sure where you are getting your info, but good
    topic. I needs to spend some time learning much more or understanding more.
    Thanks for fantastic info I was looking for this information for my mission.

Leave a Reply

Your email address will not be published.