Issues using dpapimig from a Windows server 2019 to another Windows server 2019

D

David Lechevalier

Hello,
I have an issue with dpapimig (and with CryptUpdateProtectedState) when I try to migrate a master keys from a Window server 2019 to another Windows server 2019.

dpapimig says that password is not correct and the api CryptUpdateProtectedState return True with pdwSuccessCount=0 and pdwFailureCount=1.
I'm using local user.

If I do the operation on the same Windows Server 2019 (after having removed the user and created a new one). Everything works properly.
With Windows server 2016, Windows server 2012r2, everything works properly also.


Reproduction steps:


  • On Windows server 2019 #1, create a user test


  • Create a session with this user


  • Keep the directory %userprofile%\AppData\Roaming\Microsoft\Protect\<sid>


  • On Windows server 2019 #2, create a user test


  • Follow steps from ee681624(v=ws.10)
Actual Result


  • password issue
Expected result


  • master keys imported without issue


Thank you for your help,

David


Continue reading...
 
Top Bottom