Veeam Recovery Media creating fails with "This access control list is not in canonical form and therefore cannot be modified" error

The warning may appear in the following cases:

• Veeam Recovery Media is created as an independent process (the process will fail with an error)..
• Veeam Recovery Media is created as a part of the server backup performed using the Veeam Agent backup job managed by agent.

During the creation of Veeam Recovery Media a temporary subfolder is created under C:\Windows\Temp. In some cases, the Access Control List (ACL) on that folder may affect Veeam operations.

Use the following registry setting on the machine being backed up by Veeam Agent for Microsoft Windows to change where the Recovery Media Temp folder should be created.

1. Create this Registry Value on the machine where Veeam Agent for Microsoft Windows is running.
   
   Key Location:  HKLM\SOFTWARE\Veeam\Veeam Endpoint Backup
   Value Name: RecoveryImageTempPath
   Value Type: String Value
   Value Data: <path to unpack WinRE>
   
   For the Value Data, specify a path where Veeam Agent for Microsoft Windows can temporarily unpack the WinRE (e.g., C:\Temp). The registry value changes the temporary path for the WinRE image unpacking. This registry value does not affect any OS variables or settings.
2. Restart the Veeam Agent for Microsoft Windows service.
3. Rerun the job.