Hi ,

I have problem with my DPM environment

Yesterday everything was working fine and backup were passing without problems.

Today every agent status is in error state

The error message :

Protection agent version:	4.1.3313.0
Error:	Data Protection Manager Error ID: 316
	The protection agent operation on MP-BL-02.DOMAIN.COM failed because the service did not respond.
Detailed error code:	Internal error code: 0x8099090E
Recommended action:	If you recently installed a protection agent on MP-BL-02.DOMAIN.COM, the computer may be restarting. Wait a few minutes after restarting the computer for the protection agent to become available. Otherwise, troubleshoot the problem as follows:
1) Check the recent records from the DPMRA source in the Application Event Log on MP-BL-02.DOMAIN.COM to find out why the agent failed to respond.
2) Verify that the DPM server is remotely accessible from MP-BL-02.DOMAIN.COM.
3) If a firewall is enabled on the DPM server, verify that it is not blocking requests from MP-BL-02.DOMAIN.COM.
4) If MP-BL-02.DOMAIN.COM is a workgroup computer configured to use NETBIOS, ensure that the NETBIOS name of the DPM server is accessible from MP-BL-02.DOMAIN.COM. Otherwise verify that the DNS name is remotely accessible. 
5) If MP-BL-02.DOMAIN.COM is a workgroup server, ensure that the DPM server has an IPSEC exception to allow communication from workgroup servers.
6) If MP-BL-02.DOMAIN.COM is a workgroup server the password for the DPM user accounts could have been changed or may have expired. To resolve this error, run SetDpmServer with the -UpdatePassword flag on the protected computer and Update-NonDomainServerInfo.ps1 on the DPM server.
7) Restart the DPM Protection Agent service on MP-BL-02.DOMAIN.COM. If the service fails to start, reinstall the DPM protection agent.
8) If MP-BL-02.DOMAIN.COM is configured using certificates, ensure that the DPM CPWrapper service is running on DPM Server and MP-BL-02.DOMAIN.COM. Also ensure that certificates used by both the computers are valid.

2839894

DCOMtest and WBEMtest passed without errors.

Ping works fine , TCP 135 and RPC ports are working.

I tried to apply Rollup Update 2 but the problem still persist.

Tried to reinstall manual or automatic the DPM Agent but still receive the same error.

I don't have any ideas :(

I'm using DPM 2012 SP1 Rollup Update 2 on Windows 2008  R2 SP1 box

Well just to open a case in MS I've got the idea to reset local Security settings to defaults - Voala DPM agents are connecting without problems

Just issued this at elevated prompt :

secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose

Then decide to check GPO policies and found that when i force Firewall on all adapters DPM stop working.

Because in that organization we use custom RPC ports we add additional firewall rule to open dynamic RPC range. For some reason "All in" rule that open all TCP 1-65000 ports does not work

At the bottom - It was security permission / firewall issue

Do not trust DCOM test and Wbem tests when resolving this kind of problems