- Veeam Support Knowledge Base
- Backup Service Will Not Start Due To Group Policy
Backup Service Will Not Start Due To Group Policy
Get weekly article updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
Cheers for trusting us with the spot in your mailbox!
Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest
Challenge
The Veeam Backup Service starts and then immediately stops. Svc.VeeamBackup.log contains errors such as:
<04> Error Unable to acquire privilege 'SeBackupPrivilege'.
<04> Error Unable to acquire privilege 'SeRestorePrivilege'.
<04> Error Unable to acquire privilege 'SeRestorePrivilege'.
Cause
According to the Required Permissions page of the user guide, the account used to run the Veeam Backup Service must be a Local System account or must have the Local Administrator permissions on the Veeam Backup server.
These errors occur if you specify a local or domain administrator as the Veeam Backup Service account but set Group Policy such that the account does not have all of the default permissions of a local administrator.
These errors occur if you specify a local or domain administrator as the Veeam Backup Service account but set Group Policy such that the account does not have all of the default permissions of a local administrator.
Solution
For the two examples above, the permissions are located in Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment
On a domain controller, use Group Policy Management to determine whether these policies have been defined for the OU containing the Veeam Backup server, then check containers with lower precedence (see Group Policy processing and precedence). Alternatively, you can use Group Policy Results or Resultant Set of Policy to identify the problematic GPO. The policy applied to the Veeam Backup server must either be Not Defined or include the user specified as the Veeam Backup Service account.
After changing policy, run gpupdate from a command line on the Veeam Backup server to refresh Group Policy settings, then start the service.
SeBackupPrivilege is “Back up files and directories”
SeRestorePrivilege is “Restore files and directories”
SeRestorePrivilege is “Restore files and directories”
On a domain controller, use Group Policy Management to determine whether these policies have been defined for the OU containing the Veeam Backup server, then check containers with lower precedence (see Group Policy processing and precedence). Alternatively, you can use Group Policy Results or Resultant Set of Policy to identify the problematic GPO. The policy applied to the Veeam Backup server must either be Not Defined or include the user specified as the Veeam Backup Service account.
After changing policy, run gpupdate from a command line on the Veeam Backup server to refresh Group Policy settings, then start the service.
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
Oops! Something went wrong.
Please try again later.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Verify your email to continue your product download
We've sent a verification code to:
An email with a verification code was just sent to
Didn't receive the code? Click to resend in sec
Didn't receive the code? Click to resend
Start using Veeam:
Download the product
&
Activate the license key
Thank you!
Your feedback has been received and will be reviewed.