Comprehensive data protection for all workloads
Post Reply
pirx
Veteran
Posts: 573
Liked: 75 times
Joined: Dec 20, 2015 6:24 pm
Contact:

Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by pirx »

Hi,

we are chasing this error for a while now (#04581607).

Code: Select all

Error: boost::filesystem::remove: The directory is not empty: "C:\windows\TEMP\{ffecfddb-e365-42ac-806e-58c1b974b14d}\"
Agent failed to process method {FileSystem.DirectoryRemove}.
This kind of directory keeps the ctk xml files.

Veeam Support suspected Antivirus (in our case Kaspersky) from the beginning, with procmon we could now prove that AV is scanning this directory. This is expected because there is no exclude for this as this directory is not listed in KB article https://www.veeam.com/kb1999. But even if it would be on the list, due to our security policy it would no be allowed to exclude the whole C:\Windows\Temp\ dir as this is a very critical location used by different applications and is a possible destination for malware. As the Veeam subdirectory names are random like C:\windows\TEMP\{ffecfddb-e365-42ac-806e-58c1b974b14d} it is also not possible to add those to excludes. There are already other Veeam directories like c:\windows\temp\VeeamBackup and c:\windows\temp\VeeamBackupTemp.

My request: please make this ctk file directory configurable, or at least use some directory that could be easily be excluded from AV (like the two mentioned above). A lot of applications are using C:\windows\temp, most of them use a dedicated easy to exclude subdirectory. According to Microsoft this is also best practice.
soncscy
Veteran
Posts: 643
Liked: 312 times
Joined: Aug 04, 2019 2:57 pm
Full Name: Harvey
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by soncscy »

It's a workaround I suppose but can your av accept regex for exclusions? If so there are many examples of UUID patterns for regex.

But, it would be nice to see I suppose.
pirx
Veteran
Posts: 573
Liked: 75 times
Joined: Dec 20, 2015 6:24 pm
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by pirx »

regex was the first thing I checked, it seems that Kaspersky is not that flexible. I think only * and ? are available, maybe something like this C:\windows\TEMP\{????????-????-????-????-????????????} is possible, but this is far away from everything our AV team is usually using, so not very likely they will do this.
foggy
Veeam Software
Posts: 21072
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by foggy »

Hi guys, thanks for the feedback, sounds reasonable.
tmahangare
Lurker
Posts: 2
Liked: never
Joined: Aug 17, 2021 9:50 am
Full Name: Tushar Mahangare.
Contact:

[MERGED] Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by tmahangare »

This kind of directory keeps the ctk xml files.

Veeam Support suspected Antivirus (in our case Kaspersky) from the beginning, with procmon we could now prove that AV is scanning this directory. This is expected because there is no exclude for this as this directory is not listed in KB article https://www.veeam.com/kb1999. But even if it would be on the list, due to our security policy it would no be allowed to exclude the whole C:\Windows\Temp\ dir as this is a very critical location used by different applications and is a possible destination for malware. As the Veeam subdirectory names are random like C:\windows\TEMP\{ffecfddb-e365-42ac-806e-58c1b974b14d} it is also not possible to add those to excludes. There are already other Veeam directories like c:\windows\temp\VeeamBackup and c:\windows\temp\VeeamBackupTemp.

My request: please make this ctk file directory configurable, or at least use some directory that could be easily be excluded from AV (like the two mentioned above). A lot of applications are using C:\windows\temp, most of them use a dedicated easy to exclude subdirectory. According to Microsoft this is also best practice.
HannesK
Product Manager
Posts: 14322
Liked: 2890 times
Joined: Sep 01, 2014 11:46 am
Full Name: Hannes Kasparick
Location: Austria
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by HannesK »

Hello Tushar,
welcome to the forums.

And please use the existing thread instead of opening new ones ;-)

Best regards,
Hannes
pirx
Veteran
Posts: 573
Liked: 75 times
Joined: Dec 20, 2015 6:24 pm
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by pirx »

Ugh, the post from tmahangare is a c&p from my initial posting. Is this right or was it a c&p error while merging?
HannesK
Product Manager
Posts: 14322
Liked: 2890 times
Joined: Sep 01, 2014 11:46 am
Full Name: Hannes Kasparick
Location: Austria
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by HannesK »

yes, I really merged it. It was a new post. I was thinking about to delete it when I saw that it's a duplicate, but maybe he really has a similar issue like you.
pirx
Veteran
Posts: 573
Liked: 75 times
Joined: Dec 20, 2015 6:24 pm
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by pirx »

My #1 post is...
post401058.html#p401058

...completely identical to the one from tmahangare you merged (without the code section).
post425633.html#p425633

So the text was just copied 1:1 and a new post was created with it? Not that I'd claim any copyrights... but it still looks somewhat strange to me.
tmahangare
Lurker
Posts: 2
Liked: never
Joined: Aug 17, 2021 9:50 am
Full Name: Tushar Mahangare.
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by tmahangare »

Hey Pirx, as per support i am crated new topic for below link
veeam-backup-replication-f2/feature-req ... 72057.html

Is any update for adding this feature under VBR?
We are facing lots of issue on our servers
HannesK
Product Manager
Posts: 14322
Liked: 2890 times
Joined: Sep 01, 2014 11:46 am
Full Name: Hannes Kasparick
Location: Austria
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by HannesK »

there is nothing new from the VBR side.

As you now answered, I will keep the posts and count the request +1
spiritie
Service Provider
Posts: 191
Liked: 40 times
Joined: Mar 01, 2016 10:16 am
Full Name: Gert
Location: Denmark
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by spiritie »

+1 for this request to specify the location.

Default behaviour should at least in a Veeam specific folder to make exclusions safer and more specific eg. C:\Temp\Veeam\
Ideally this should be under the log folder of Veeam.
MartinO
Service Provider
Posts: 17
Liked: 4 times
Joined: Sep 24, 2020 9:09 am
Full Name: Martin Old
Contact:

Re: Feature Request: make Veeam temp directory C:\Windows\Temp\{xxxxxxx} configurable

Post by MartinO »

+1 for this - we're seeing the an issue intermittently with failed indexing due to what is likely our AV, which doesn't support pattern exclusions.
Post Reply

Who is online

Users browsing this forum: aurelien-beneteau, kyle.shuberg, Semrush [Bot], twirtley and 124 guests