MAPI OpenMsgStore always returns MAPI_E_FAILONEPROVIDER on Exchange/Office 365 from a service (session id 0)

Liviu Dumitrescu 71

Hello,

I have the following setup:

Windows Server 2022 Datacenter Azure Edition
Microsoft Office Professional Plus 2016

An Exchange Online/Office 365 mailbox connected in Outlook.

I'm using an Windows Service and MAPI to connect to exchange but i got an MAPI_E_FAILONPROVIDER (0x8004011d) on the following code:

                                                                            m_lpSession->OpenMsgStore(0,  
									pPropStore[1].Value.bin.cb,  
									(LPENTRYID)pPropStore[1].Value.bin.lpb,  
									0,  
									MDB_WRITE | MDB_NO_DIALOG,  
									&m_lpMDB)

This does not happen on an Windows Server 2012 connected to the same mailbox and same Office Version.

Any suggestion what the issue might be or insight how to norrow down the problem? Any known solutions?

Thanks in advance!

Liviu Dumitrescu 71 Reputation points

2022-11-28T21:47:19.55+00:00
Maybe more info:

If i do a mapi initialize in MFCMapi i see an OAUTH2 token generation:

If i do an mapi initialize in my windows service there is no such exchange and i get a lot of 401's:

MAPIINIT Init = { 0 , MAPI_NT_SERVICE}; XTRACE0("Before MAPIInitialize"); CHECK_FUNC_RET(MAPIInitialize(&Init)); XTRACE0("After MAPIInitialize");
Joyce Shen - MSFT 16,641 Reputation points

2022-11-29T01:46:49.463+00:00

Hi @Liviu Dumitrescu ,

Could you please tell more information about "I'm using an Windows Service and MAPI to connect to exchange " you mentioned above?

Are you using Extended MAPI Console Application to send mail like this thread shared: The Extended MAPI failed in window service.? Or are you using other tools/software?

I noticed you have added the office dev related tag, and I will help you add the addins dev tag in your post.
Liviu Dumitrescu 71 Reputation points

2022-11-29T10:52:23.037+00:00

Hello @Joyce Shen - MSFT

Sorry, poor choice of words. The solution we have is an ATL one that we host as Windows Service. The scope of the solution is indeed to send emails.

In this solution we load the following MAPI libraries:

File c:\temp\version\mapicommon\mapiloader.cpp line 227
AutoLoadMAPI - loading MAPI exports
[09:43:49:487]
File c:\temp\version\mapicommon\mapiloader.cpp line 525
CMapiLoader::GetMailKey - Default MAPI = Microsoft Outlook
[09:43:49:487]
File c:\temp\version\mapicommon\mapiloader.cpp line 334
CMapiLoader::GetMapiMsiIds - MSIComponentID = {6DB1921F-8B40-4406-A18B-E906DBEEF0C9}
[09:43:49:487]
File c:\temp\version\mapicommon\mapiloader.cpp line 344
CMapiLoader::GetMapiMsiIds - MSIApplicationLCID = Microsoft\Office\16.0\Outlook
[09:43:49:487]
File c:\temp\version\mapicommon\mapiloader.cpp line 355
CMapiLoader::GetMapiMsiIds - MSIOfficeLCID = Microsoft\Office\16.0\Common\LanguageResources
[09:43:49:487]
File c:\temp\version\mapicommon\mapiloader.cpp line 478
CMapiLoader::MyLoadLibrary - loading "C:\Windows\system32\mapi32.dll"
[09:43:49:487]
File c:\temp\version\mapicommon\mapiloader.cpp line 402
CMapiLoader::GetComponentPath - szDllPath = "C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\SYSTEM\MSMAPI\1033\MSMAPI32.DLL"
[09:43:49:487]
File c:\temp\version\mapicommon\mapiloader.cpp line 478
CMapiLoader::MyLoadLibrary - loading "C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\SYSTEM\MSMAPI\1033\MSMAPI32.DLL"
[09:43:49:487]

Let me know if this is clear enough. Thanks in advance.
Liviu Dumitrescu 71 Reputation points

2022-12-08T12:36:54.257+00:00
Hello,

A small update, while debugging, it seems that when i do:

MAPIINIT Init = { 0 , MAPI_NT_SERVICE}; XTRACE0("Before MAPIInitialize"); CHECK_FUNC_RET(MAPIInitialize(&Init));

The attached output is shown in the debug window:

268536-traces.txtThe user under which the service is running is an administrator on the machine.

I also see this audit failure in event viewer (i masked the account name and so on):

A privileged service was called.

Subject:
Security ID: ****
Account Name: *
Account Domain: *
Logon ID: 0x282BCA

Service:
Server: Security
Service Name: -

Process:
Process ID: 0x36c
Process Name: C:\Windows\System32\svchost.exe

Service Request Information:
Privileges: SeTcbPrivilege

The user has the following privileges:

Special privileges assigned to new logon.

Subject:
Security ID: ****
Account Name: ****
Account Domain: ****
Logon ID: 0x710F41

Privileges: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
SeDelegateSessionUserImpersonatePrivilege

Any hints?

Thanks

1 answer

Amit Singh 4,846 Reputation points

2022-11-29T10:50:39.63+00:00

Check this article - To use Registry Editor to restrict certain MAPI clients.
Please sign in to rate this answer.
Liviu Dumitrescu 71 Reputation points

2022-11-29T13:39:05.76+00:00

Hello @Amit Singh ,

This does not help.

Thanks.
Sign in to comment