ALERT: Datto Drive Cloud service will no longer be available as of July 1, 2019. For more information, see our end-of-life article. If you'd like to migrate your data to Datto Workplace, see our migration guide.
To learn how to download your Datto Drive Cloud data, please visit this article.

Final error (-5 Access is denied.)



When you attempt to start a backup using the ShadowSnap backup agent, you receive the error message "Final error (-5 Access is denied.)


  • ShadowSnap Agent


  • The error code -5 is an official Microsoft System Error Code for "Access is denied."
  • Typically this error occurs with the ShadowSnap agent when the StorageCraft process "sbrun" does not have permissions to the raw file.
  • It can also result from the incorrect version of ShadowProtect installed on the device.
  • Webroot Antivirus (external link) has been known to cause this error message.


  • Ensure that the ShadowProtect Service, StorageCraft Raw Agent Service, and StorageCraft Shadow Copy Provider services are still set to Log On As Local System in services.msc.
    • If the issue persists, allow the services to log in as a Domain Administrator. Follow the steps in this article to ensure the account you use has proper domain permissions. 
  • If you haven't done so already, ensure that the correct version of ShadowProtect is installed.
  • If your environment uses Webroot Antivirus, add exceptions to the program for the ShadowProtect Service, StorageCraft Raw Agent Service, and StorageCraft Shadow Copy Provider services.
    • If Webroot is centrally-managed, be sure to push the exception to all clients before testing.


Was this article helpful?

0 out of 3 found this helpful

You must sign in before voting on this article.

Want to talk about it? Have a feature request?

Head on over to our Community Forum or get live help.