Nutanix Xtract Validation Failed: User must belong in a group with restore files and directories security policy

Hi All,

I am stuck with Nutanix Xtract on doing a test migration. The process fails immediately when executing the validation with the following error message:

"Error validating credentials for VM : 'Ensure that the user must belong in a group with Restore files and directories security policy.'."

The migration is from a source VMware ESXi 6.0 environment towards a new Nutanix AHV 5.8.2 environment.
The VM involved is a Windows Server 2016 system and I am using a domain admin account for logging on (as part of the migration plan settings).

There is not much information on the web on this issue and therefore I am reaching out on this platform.

Anyone any ideas?


6 replies

This issue is now resolved!

With great help from Nutanix Support, I followed up on their given advice:

Please make sure the following 3 pre-requisites are met for the credentials you are using to migrate. User must have "Logon as Batch Job" enabled.UAC must be disabled (for local administrator it is usually disabled) (KB 4809 - disable UAC from registry) User must have "Restore files and directories" rights.
Please note any changes made to these registries will be needing a VM reboot. Post the reboot discard the current migration plan and create a new one with the same VM. It should work post that.

Thereafter the migration started successfully and I am now planning other migrations based on this one.

Hi Vishwapreet,

We are running into this problem on a consistent basis.

Unfortunately we have also applied the rights from local security policy to the account as well.

Do you have any other suggestions to what might fix this?

Kind Regards,
Hi Jimmy,

Can you provide details on your migration environment (e.g. VMware/AOS versions, VM OS types/versions)?

In parallel, have you updated the VMware Tools on the source VM's? Also, have you installed Nutanix Guest Tools on those VM's?


The source VMs are Windows server 2008 - Windows Server 2012 R2, the issue mostly occurs on 2012 r2 boxes.
They are stored on ESXi version 6.0 boxes.
The AOS version is euphrates-5.9.2-stable
VMware tools is up to date on all VMs as well.
Nutanix Guest tools aren't installed on them however.

Thanks for quick reply.
My apologies, NGT is not required to be installed on the source VM's.

Please, check the following portal link and go through all the requirements for proper working of Xtract:

Also, I would suggest to raise a support case with Nutanix to acquire support from an engineer who is able to go in more details with regards to troubleshooting. Usually, you will get a prompt response from an assigned engineer after you have raised that support case.
if you already add the user in local security policy and turn down the UAC, kindly how do you type the account?

domain\username or username@domain.local?

and what release or version of Xtract your using?

when I encounter these issue I used Xtract r1.18

the issue is solve by upgrading to Xtract r2.0.3 and using login credential domain\username.