Unable to migrate subscriptions to Plesk for Windows: Failed to set security policy on some of target servers

Symptoms

• Migration of a domain or subscription fails with one of the following errors:

  PLESK_ERROR: Migration for that subscription is considered completely failed. No further actions are performed for it.
  Migration tools tried to perform operation in 3 attempts: 'username'

  PLESK_ERROR: Failed to set security policy on some of target servers: Command execution failed on the local server with non-zero exit code.
  command: secedit /configure /db C:\WINDOWS\Security/Database/secedit.sdb /cfg "C:\Program Files (x86)\Plesk\var\modules\panel-migrator\sessions\20191227152010\target-server\security_policy.sdl"
  exit code: 3
  ...
  stderr:
  Restoration of customers/users/resellers with weak passwords might be failed by Windows security policy.
  Set 'PasswordComplexity' value to '0' with help of 'secedit' utility and re-run migration tool.
  Restore required security policy after migration.

• Error like the following can be found in Event Viewer:

  CONFIG_TEXT: Unable to logon user (WIN-GJP6UUJ6CGD\jdoe): (1385) Logon failure: the user has not been granted the requested logon type at this computer.
  at LogonUser(WIN-GJP6UUJ6CGD\plesksuppot)(CClientProfile::logon line 126)
  at Plesk impersonation(PipeServer::ServerThread::impersonateWithoutProfile line 750)
  at execute "C:\Program Files (x86)\Plesk\admin\bin\filemng" plesksuppot --ex-create-directory "--path=C:\Inetpub\vhosts\plesksuppot.test\httpdocs"(RunTime::RunAsUser::run line 223)
  Execute file name: C:\Program Files (x86)\Plesk\admin\bin\filemng.exe

• Domain creation in Plesk also fails with the same errors.

Cause

The issue is caused by Plesk Migrator bug identified as #PMT-4708, which will be addressed in future updates of the extension.

One can monitor the Plesk Changelog or follow the article to receive updates on when the fix is released.

Resolution

As a temporary workaround, apply the following steps:

1. Connect to the server via RDP.
2. Open the migration session directory %plesk_dir%var\modules\panel-migrator\sessions\<session-id>\
3. Create a backup of file config.ini.
4. Open config.ini in a text editor.

5. Add the line below under section [GLOBAL]:

   CONFIG_TEXT: skip-actions = "set-windows-security-policy"

6. Open Command Prompt.

7. Restore Plesk user accounts settings:

   C:\> C:> plesk sbin usermng --install-service-accounts

8. Resync the subscriptions using Plesk Migrator in Plesk > Tools & Settings > Migration & Transfer Manager.