We experienced something very similar in our environment. In our case, the issue was related to the SYSTEM account not being able to properly create or access the temporary WinSCP log files under
Running the service under a dedicated admin/service account resolved it immediately, just like in your situation. We also noticed that endpoint protection and tightened local security policies on some workstations seemed to make the issue appear only on specific machines.
A few things that may help others troubleshooting this:
It definitely seems like one of those older WinSCP/.NET integration issues that can still resurface depending on workstation hardening policies.
C:\Windows\TEMP.
Running the service under a dedicated admin/service account resolved it immediately, just like in your situation. We also noticed that endpoint protection and tightened local security policies on some workstations seemed to make the issue appear only on specific machines.
A few things that may help others troubleshooting this:
- Verify SYSTEM account permissions on the TEMP directory
- Check if antivirus or EDR is blocking WinSCP child processes
- Make sure the WinSCP executable path is accessible by the service account
- Confirm the same WinSCP version is installed across all affected systems
It definitely seems like one of those older WinSCP/.NET integration issues that can still resurface depending on workstation hardening policies.