In Part 1 of this series I explored the backup requirements for each of the Exchange Server 2007 server roles.  In Part 2 I demonstrated Mailbox server database backup and recovery, and then in Part 3 I demonstrated the backup and recovery process for Hub Transport and Edge Transport servers.  In this part 4 of the series I will discuss the backup and restore process for Client Access servers.

The Client Access Server Role

Client Access servers perform a similar role to that of “front end” servers in previous versions of Exchange.  The Client Access server is responsible for all non-MAPI connectivity to Exchange server data.  In other words, anything that is not a Microsoft Office Outlook connection to a mailbox or public folder is handled by the Client Access server.  This includes Outlook Web Access, ActiveSync, and Exchange Web Services.

The nature of this role is such that it relies on Microsoft IIS to make these services available.  Because of this the Client Access server is one of the more complex when it comes to backup and recovery.

Backing up the Client Access Server

The data that needs protecting by backup for the Client Access server is located in several places:

• Exchange server configuration stored in Active Directory
• Configuration files stored in the file system (C:Program FilesMicrosoftExchangeClientAccess)
• IIS customizations stored in the IIS metabase

Similar to the Hub Transport server the Exchange server configuration can be recovered from Active Directory using the setup /m:RecoverServer command.  Assuming the Active Directory is already backed up by your Domain Controller backup strategy the Client Access server backups only need to take into account the configuration files in the file system and the IIS metabase.

However there is a downside to this.  When setup /m:RecoverServer is used to restore a Client Access server, and then the IIS metabase is restored afterwards, the Client Access server will experience errors.  Because of this, Microsoft recommends keeping a manual change log of all customizations made to the Client Access server, such as changes to the default virtual directories, or any new virtual directories created.

A workaround for this is to perform a full backup of the file system and System State for Client Access servers.  This allows you to restore the entire server without causing problems after the IIS metabase is recovered.

Recovering the Client Access Server

Since there are two approaches to backing up the Client Access server role there are also two approaches to recovery.

The first is to use setup /m:RecoverServer to reinstall Exchange on the replacement server.  Then, restore the C:Program FilesMicrosoftExchangeClientAccess files from the most recent backup.  Finally, manually apply all customizations that have been recorded in a change log.

The above method will work provided your change log is up to date and accurate.  Any discrepancies will potentially lead the recovery effort astray.  This method is also quite tedious and error prone in complex environments.

The second approach is to use a complete server backup for the restore.  In this scenario the new server is installed with the operating system only.  There is no need to join it to the domain or even to give it a static IP address provided a DHCP server is available.  Next, restore the last full server backup onto the server.  It is likely that the server will then require a restart.

This second approach is less effort and will tend to be more accurate but requires that more data be backed up each night than for the first method.

Recovering Individual Email Items

In Part 2 of this series I demonstrated the recovery of an entire mailbox database.  In some situations it may be necessary to recover just a single email item from a backed up mailbox.  In the next part of this series I will demonstrate how to restore single mailbox items.