VSS System Writer Does Not Have Permissions To Read The Service Account (code 2404)

Situation

A backup plan terminates with the following error: VSS System Writer Does Not Have Permissions To Read The Service Account

The event log contains the following ID: 513.

Cause

This error occurs because VSS System Writer does not have permission to read the NT AUTHORITY\SERVICE (service account). When System Writer runs as a cryptographic service and tries to read the Mslldp.sys information from a Microsoft Link-Layer Discovery Protocol driver, the "access denied" error is reported.

Solution

Follow Microsoft best practices to work around the case. Refer to the Event ID 513 when running VSS in Windows Server chapter at docs.microsoft.com