Veeam Agent Windows Service will not start

[bc1sjw]

Hi there,

I have raised this with Veeam support under case ID 04158478. I am aware as I am a free user they will not be able to assist so hoping someone on this forum has seen this issue before and can assist:

I've just installed Veeam and when trying to start any of the components I get the following error: 'Service suddently stopped working, please refer to this article for troubleshooting tips'. I have followed all steps in the article KB1959 and still the issues persist. I also cannot start the windows service manualy, it fails to start. I have done a full un-install and re-install of the product and still the issue persists.

I have found errors in the Svc.VeeamEndpointBackup and UI.Tray log files located at C:\ProgramData\Veeam\Endpoint which I have pasted below. Overall, both log files state I do not have permissions to start the Veeam windows service, which is bizarre as this is my own PC, I am the administrator with full rights on the machine.

Would appreciate if someone can assist me resolve this issue to allow me to enable backups on my PC.

Regards,
Stephen

[Vitaliy S.]

Hi Stephen,

As another tip, I would suggest looking into Windows Event log as this can shed some light on why you don't have enough permissions. Alternatively, create another local admin account and give it a try.

Thanks!

[bc1sjw]

Hi Vitaliy,

I've enabled the system built in 'administrator' account which is disabled by default, as well as creating a brand new local admin account in local users and groups. Given both accounts full permissions to the C:\Program Files\Veeam\Endpoint Backup file path that the service files reside in (including the files themselves) and both result in the same error. I've also tried running the service as an admin account instead of local system and have tried different permutations of un-installing/re-installing it using installutil.exe and SC CREATE from an elevated command prompt. All of these end with the same error advising I am not authorized to start the service. The event viewer application logs (nothing appears for it in the system log) and Veeam Svc.VeeamEndpointBackup and UI.Tray- logs are below.

One thing I've noticed is the service points to 'Veeam.EndPoint.Service.exe' which is a config file. There is also a file called 'Veeam.EndPoint.Service' which is an application. Should the service not point to the latter? I'd have thought an actual service should end in .exe, but this appears to be the .NET config file. Interestingly the 'Veeam.EndPoint.Service' file states in Properties\Details that its orginal filename was 'Veeam.EndPoint.Service.exe' if that is relevant.

Either way, I still can't run Veeam because it advises I'm not authorized to start the service.

Code: Select all

Event Viewer Application Log
---------------------------------------------------------
Log Name:      Application
Source:        VeeamEndpointBackupSvc
Date:          5/6/2020 9:29:52 PM
Event ID:      0
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      StephenLaptop
Description:
Service cannot be started. System.UnauthorizedAccessException: Attempted to perform an unauthorized operation.
   at System.Security.AccessControl.Win32.SetSecurityInfo(ResourceType type, String name, SafeHandle handle, SecurityInfos securityInformation, SecurityIdentifier owner, SecurityIdentifier group, GenericAcl sacl, GenericAcl dacl)
   at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, SafeHandle handle, AccessControlSections includeSections, Object exceptionContext)
   at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, AccessControlSections includeSections, Object exceptionContext)
   at System.Security.AccessControl.FileSystemSecurity.Persist(String fullPath)
   at Veeam.Common.CSqlLocalDbInstance.CreateDbFilesLinks(String dbName, ISqlLocalDbAccessProvider sqlLocalDbAccessProvider, Boolean invertLinks)
   at Veeam.EndPoint.CEndPointServiceImpl.InitDb(DatabaseFile databaseFile)
   at Veeam.EndPoint.CEndPointServiceImpl..ctor(CVbOptions options, CTerminationMediator termin…
------------------------------------------------------------------------------------------------------------------------------------------

Veeam Svc.VeeamEndpointBackup log

----------------------------------------------------------------------------------------------------------------------------------------------------------------------

[06.05.2020 20:54:46] <01> Info     "------- Started new session of Veeam Agent for Microsoft Windows tray-------"
[06.05.2020 20:54:46] <01> Info     [Options] The following options are loaded from the registry:
[06.05.2020 20:54:46] <01> Info     	AgentLogging: 4
[06.05.2020 20:54:46] <01> Info     	BackupServerUri: "EndPointService"
[06.05.2020 20:54:46] <01> Info     	Installdir: "C:\Program Files\Veeam\Endpoint Backup\"
[06.05.2020 20:54:46] <01> Info     	LoggingLevel: 4
[06.05.2020 20:54:46] <01> Info     	ManagedModeInstallation: 0
[06.05.2020 20:54:46] <01> Info     	ShowLicensePopup: 1
[06.05.2020 20:54:46] <01> Info     	LogDirectory: "C:\ProgramData\Veeam\Endpoint"
[06.05.2020 20:54:46] <01> Info     [Options]
[06.05.2020 20:54:47] <01> Info     [ClientUpdate] Checking user config file
[06.05.2020 20:54:50] <01> Info     Config: C:\Users\Veeam\AppData\Local\Veeam_Software_Group_GmbH\Veeam.EndPoint.Tray.exe_Url_daubbmm13lvyfjst1wbj5qx3rk0kdj33\1.0.0.0\user.config
[06.05.2020 20:54:56] <10> Info     Create application shutdown task.
[06.05.2020 20:54:57] <12> Info     Initializing VeeamEndpointBackupSvc
[06.05.2020 20:54:57] <12> Info     Checking VeeamEndpointBackupSvc state.
[06.05.2020 20:54:57] <01> Info     [CActionCenterNotificationsManager] Reading shown notifications
[06.05.2020 20:54:57] <12> Info     VeeamEndpointBackupSvc is stopped. Trying to start service
[06.05.2020 20:54:58] <12> Error    Cannot open VeeamEndpointBackupSvc service on computer '.'. (System.InvalidOperationException)
[06.05.2020 20:54:58] <12> Error       at System.ServiceProcess.ServiceController.GetServiceHandle(Int32 desiredAccess)
[06.05.2020 20:54:58] <12> Error       at System.ServiceProcess.ServiceController.Start(String[] args)
[06.05.2020 20:54:58] <12> Error       at Veeam.Endpoint.Tray.Core.EndpointServicesController.SafeStartService(CancellationToken cancelationToken)
[06.05.2020 20:54:58] <12> Error    Access is denied (System.ComponentModel.Win32Exception)
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

UI.Tray-log

-----------------------------------------------------------------------------------------------------------------------------------------------------
[06.05.2020 21:37:46] <04> Info     Starting service...
[06.05.2020 21:37:46] <04> Info     System UUID retrieved from [Win32_ComputerSystemProduct]:UUID field
[06.05.2020 21:37:46] <04> Info     Using local database, version 11.0
[06.05.2020 21:37:46] <05> Info     [Schedule Events] Catched PowerSettingsEvent: Guid: 02731015-4510-4526-99e6-e5a17ebd1aea, Value: 1
[06.05.2020 21:37:47] <04> Info     Checking access rights for 'C:\WINDOWS\system32\config\systemprofile'
[06.05.2020 21:37:47] <04> Info     ACL contains full control access right for current user
[06.05.2020 21:37:47] <10> Info     Stop service status tracking.
[06.05.2020 21:37:47] <04> Error    Failed to start service.
[06.05.2020 21:37:47] <04> Error    Attempted to perform an unauthorized operation. (System.UnauthorizedAccessException)
[06.05.2020 21:37:47] <04> Error       at System.Security.AccessControl.Win32.SetSecurityInfo(ResourceType type, String name, SafeHandle handle, SecurityInfos securityInformation, SecurityIdentifier owner, SecurityIdentifier group, GenericAcl sacl, GenericAcl dacl)
[06.05.2020 21:37:47] <04> Error       at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, SafeHandle handle, AccessControlSections includeSections, Object exceptionContext)
[06.05.2020 21:37:47] <04> Error       at System.Security.AccessControl.NativeObjectSecurity.Persist(String name, AccessControlSections includeSections, Object exceptionContext)
[06.05.2020 21:37:47] <04> Error       at System.Security.AccessControl.FileSystemSecurity.Persist(String fullPath)
[06.05.2020 21:37:47] <04> Error       at Veeam.Common.CSqlLocalDbInstance.CreateDbFilesLinks(String dbName, ISqlLocalDbAccessProvider sqlLocalDbAccessProvider, Boolean invertLinks)
[06.05.2020 21:37:47] <04> Error       at Veeam.EndPoint.CEndPointServiceImpl.InitDb(DatabaseFile databaseFile)
[06.05.2020 21:37:47] <04> Error       at Veeam.EndPoint.CEndPointServiceImpl..ctor(CVbOptions options, CTerminationMediator terminator, CExternalEventHelper externalEventHelper)
[06.05.2020 21:37:47] <04> Error       at Veeam.EndPoint.EndPointService.OnStart(String[] args)

[Vitaliy S.]

Stephen,

It's hard to say what's going on without seeing full log files, so as our support engineer has advised can you provide him with the full debug bundle? Maybe he can figure out what's unique in this machine that prevents our service from starting.

Thanks!

[bc1sjw]

No problem. I've ran the Powershell and sent him back the log files. Thanks for your help so far.

[Stellarspace]

It's funny because I performed a clean install of Windows 10, then installed Veeam Agent. It was backing up just fine for about a week or so and now the service won't start no matter what I do. I can't even install Veeam Agent with Malwarebytes installed, which has been an issue for a very long time. Why does Veeam Software offer free software if it breaks so often?

[Vitaliy S.]

Stellarspace, have you checked the Windows Event log for more information on what is causing it? If you need assistance with troubleshooting, please reach out to our support team.