Backup Service Will Not Start Due To Group Policy
| KB ID: | 1977 |
| Product: | Veeam Backup & Replication |
| Version: | 8.x |
| Published: | 2014-12-12 |
| Last Modified: | 2020-08-13 |
Challenge
The Veeam Backup Service starts and then immediately stops. Svc.VeeamBackup.log contains errors such as:
<04> Error Unable to acquire privilege 'SeBackupPrivilege'.
<04> Error Unable to acquire privilege 'SeRestorePrivilege'.
<04> Error Unable to acquire privilege 'SeRestorePrivilege'.
Cause
According to the Required Permissions page of the user guide, the account used to run the Veeam Backup Service must be a Local System account or must have the Local Administrator permissions on the Veeam Backup server.
These errors occur if you specify a local or domain administrator as the Veeam Backup Service account but set Group Policy such that the account does not have all of the default permissions of a local administrator.
These errors occur if you specify a local or domain administrator as the Veeam Backup Service account but set Group Policy such that the account does not have all of the default permissions of a local administrator.
Solution
For the two examples above, the permissions are located in Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment
On a domain controller, use Group Policy Management to determine whether these policies have been defined for the OU containing the Veeam Backup server, then check containers with lower precedence (see Group Policy processing and precedence). Alternatively, you can use Group Policy Results or Resultant Set of Policy to identify the problematic GPO. The policy applied to the Veeam Backup server must either be Not Defined or include the user specified as the Veeam Backup Service account.
After changing policy, run gpupdate from a command line on the Veeam Backup server to refresh Group Policy settings, then start the service.
SeBackupPrivilege is “Back up files and directories”
SeRestorePrivilege is “Restore files and directories”
SeRestorePrivilege is “Restore files and directories”
On a domain controller, use Group Policy Management to determine whether these policies have been defined for the OU containing the Veeam Backup server, then check containers with lower precedence (see Group Policy processing and precedence). Alternatively, you can use Group Policy Results or Resultant Set of Policy to identify the problematic GPO. The policy applied to the Veeam Backup server must either be Not Defined or include the user specified as the Veeam Backup Service account.
After changing policy, run gpupdate from a command line on the Veeam Backup server to refresh Group Policy settings, then start the service.
| KB ID: | 1977 |
| Product: | Veeam Backup & Replication |
| Version: | 8.x |
| Published: | 2014-12-12 |
| Last Modified: | 2020-08-13 |
Couldn't find what you were looking for?
Below you can submit an idea for a new knowledge base article.
Report a typo on this page:
Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!
Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!
Spelling error in text
Knowledge base content request
