Unable to launch TrayIcon in "Duplicati as service" on Windows 11

Support
1

Yesterday I installed Duplicati 2.2.0.3 on a machine with pre-existing Duplicati 2.0 using the regular installer. Duplicati.server running as service and TrayIcon already setup with --no-hosted-server and --read-config-from-db , so I expected the Tray to open up as usual after the install, but that didn’t happend. So I tryed starting it via cmdline, the resulting error was “can’t access the db” or something like that, unfortunately I didn’t write that down.

So digging it a little bit, I found that anytime the service starts up it changes the ACL/permissions of the “datafolder” (in my case is: C:\ProgramData\Duplicati\datafolder). If you revert the previous ACL (I’m on Windows 11) when the service is running, this allows you to launch the Tray icon normally and you can access the web UI as before. This time, I chose a password for the UI, and modified the launcher of the Tray icon as suggested in this post by manu37. Restarting Duplicati.server does change the ACLs againg, but this time this issue doesn’t affrect my since the TrayIcon uses the password I set up. Hope this helps!

2

Yes, that is a new setting to increase the security by locking down the folder.
You can create a file in the folder to prevent it.

The current canary and next stable release uses the Windows Credential Manager to store the password, and will ask for the password if you start the TrayIcon and it cannot obtain a password.

3

@kenkendk thanx for the clarification! I see that is also mentioned in the release notes of version 2.2.0.0, probably I missed that.

However I don’t find this “trick” anywhere in the docs, so it may be useful to be mentioned in the page Service and WindowsService | Duplicati