Symptom

The error, "A specified logon session does not exist. It may already have been terminated" is encountered as part of a Stack Trace dump found in the Lenovo Patch.log or the DataMigrationTool.log beginning with version 2.5.586.0 orlater.

Cause

The user account encountering the error is a member of the Protected Users Active Directory security group.

This is caused by the extra protections that Windows applies to accounts that are a member of this security group. Highlighted in the Microsoft documentation for the Protected Users security group is the following warning:

• Accounts for services and computers should never be members of the Protected Users group. This group provides incomplete protection anyway because the password or certificate is always available on the host. Authentication will fail with the error "the user name or password is incorrect" for any service or computer that is added to the Protected Users group."

Solution

To utilize the Lenovo Patch plugin, the account will need to be removed from the Protected Users Active Directory security group to allow successful authentication.