Creating of Veeam Recovery Media fails with the error:

Collecting recovery media files Details: This access control list is not in canonical form and therefore cannot be modified.

The warning may appear in the following cases:

  • Veeam Recovery Media is created as an independent process.
  • Veeam Recovery Media is created as a part of the server backup performed using the Veeam Agent backup job managed by agent.




The error is caused by incorrect Access Control List (ACL) permissions occured in the Microsoft Windows OS.




Each case should be treated individually. Some of registry hives may have incorrect ACL permissions. The root cause of ACL injuries should be investigated deeply.
As a workaround, we recommend you to update the RecoveryImageTempPath registry key in the Veeam Agent computer OS registry.

  1. Run regedit.exe.
  2. Locate the HKEY_LOCAL_MACHINE\SOFTWARE\Veeam\Veeam Endpoint Backup key.
  3. Create the following value under the key:     
    • Name = RecoveryImageTempPath
    • Type = String
    • Value = <path where you'd like to unpack WinRE> (e.x. C:\Temp)
  5. Go to Control Panel > System and Security > Administrative Tools > Services.
  6. Restart the Veeam Agent for Microsoft Windows service.
  7. Create the Veeam Recovery Media again.

The updated registry key value changes the temporary path for the WinRE image unpacking. The registry key does not affect any OS variables or settings.