Issues using dpapimig from a Windows server 2019 to another Windows server 2019

[David Lechevalier]

Hello,
I have an issue with dpapimig (and with CryptUpdateProtectedState) when I try to migrate a master keys from a Window server 2019 to another Windows server 2019.

dpapimig says that password is not correct and the api CryptUpdateProtectedState return True with pdwSuccessCount=0 and pdwFailureCount=1.
I'm using local user.

If I do the operation on the same Windows Server 2019 (after having removed the user and created a new one). Everything works properly.
With Windows server 2016, Windows server 2012r2, everything works properly also.

Reproduction steps:

• 
  On Windows server 2019 #1, create a user test
  
  
• 
  Create a session with this user
  
  
• 
  Keep the directory %userprofile%\AppData\Roaming\Microsoft\Protect\<sid>
  
  
• 
  On Windows server 2019 #2, create a user test
  
  
• 
  Follow steps from ee681624(v=ws.10)
  

Actual Result

• 
  password issue
  

Expected result

• 
  master keys imported without issue
  
  

Thank you for your help,

David

Continue reading...