Originally this has been an issue I have been working on with Microsoft, however with our testing it seems like this might be an issue with Endpoint Protection.
Running SEP 11.0.5002.333 on a Windows 2003 server (all current updates and service packs applied) along with Microsoft Data Protection Manager (DPM) 2007 2.0.8864.0
This server acts as a file server for one location as well as it is the GUP server for that location too. What we have noticed over the past year or so a HUGE volume of information being backed up from this server to our DPM server each night. We have 4 other servers setup like this configuration and this is the only one that does this (file server and GUP). When I turned off the antivirus scan for the server for last night we had no huge spike in data being backed up for that server.
I did some research and found this previous post
https://www-secure.symantec.com/connect/forums/symantec-endpoint-110-causing-backup-problems-ntbackup I checked the settings for the antivirus scan to see if Disable "Scan when a file is backed up" was checked and was not, however
scan of files only when modified was not and I did not check this option since the other 4 servers that are setup the same way have the exact same options set.
So I am wondering what else to look at to check to see why after an antivirus scan DPM thinks these files have been modified and feels it needs to back them up again.
Thanks.