Sign in with Microsoft
Sign in or create an account.
Hello,
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.

Outlook Dialogue box pop- up stating “Trying to Connect to Microsoft Exchange Server.”  You may get a MAPI_E_LOGON_FAILED

Symptoms

Windows Server 2008 GC’s have a limitation of 50 concurrent NSPI connections per user. 
Applications such as Outlook 2007, Blackberry Enterprise Server, or any application that will create multiple NSPI connections to a DC/GC can experience these symptoms.

Cause

  1. To Resolve this issue, modify the following registry entry.

  2. Click Start, click Run, type regedit, and then click OK.

  3. Locate and then click the following registry key:
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS 

  4. On the Edit menu, point to New, and then click Key.

  5. Type Parameters, and then press ENTER.

  6. Click the Parameters key.

  7. On the Edit menu, point to New, and then click DWORD Value.

  8. Type NSPI max sessions per user, and then press ENTER.

  9. Double-click NSPI max sessions per user, type the number of the NSPI connections required, and then click OK.

Note: While the upper limit of this setting is 0xffffffff (or 4294967295), configuring the server with a value larger than the default will consume additional memory on the server – one new page per connection. If the value is set too high and too many connections are created for each user application instance, the server will run low on memory or become completely unresponsive. The lower default NSPI connection limit in Windows Server 2008 was based on customer experience, where previous operating systems would allow themselves to be overwhelmed by third party products in what amounts to a denial of service attack. Use a common sense approach to increasing beyond the default value; for example, start with decimal 250 (hex 0x000000FA), then test to see the memory overhead created and that the errors have ceased. Your long-term solution must be to contact the vendor of your NSPI product and ask them to change their behavior; the registry value is only as a workaround to provide error relief.

Resolution

For more information, see the following article from the Microsoft Knowledge Base online:

NSPI connections from Microsoft Outlook to a Windows Server 2008-based domain controller may fail with an error code: "MAPI_E_LOGON_FAILED"

More Information

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!

×