This is not a big problem, but just something I am trying to figure out in between.
For monitoring our servers we use Solarwinds – N-able, this also check the if the server needs a reboot and why. I notice that every time when Veeam starts it’s daily back-up, it creates a file, which it also flags for rename in the register.
If you wait for the back-up to complete – or just cancel it, the file gets removed automatically, but the file does not get “unflagged” in the registry.
The file I am talking about it the “SYSTEM.{*}” file, located in the C:\Windows\System32\Config\ folder. It’s created and deleted by the VeeamGuestHelper process.
The registry value that’s being flagged is the “PendingFileRenameOperations”, located in HKLM\SYSTEM\CurrentControlSet\Control\Session Manager.
I added some screenshots I was able to get using Windows Audit.
Also my Veeam Support case ID is "01882188".



Regards,
Ramon