During the shutdown of a global catalog server, when the Exchange 2003 server tries to locate a new global catalog server, the Kerberos Key Distribution Center (KDC) service returns the KDC_ERR_PRINCIPAL_UNKNOWN error code to the Exchange 2003 server. Then, the Exchange 2003 server passes a failed credentials error back to the MAPI program. This behavior causes the connection to stop using process credentials and to enter a user credentials state. However, the user credentials state will fail when the MAPI program is running as a service. This failure occurs because the MAPI program cannot prompt for credentials.
This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
How to back up and restore the registry in Windows
You must create the EMSAB_UserAuth_Credentials registry entry on the Exchange 2003 server where the hotfix is installed for this hotfix to work. With the EMSAB_UserAuth_Credentials registry entry set to the value 1, the MAPI provider will never enter the user credential state. When the global catalog server is still shutting down, MAPI clients that have this registry entry will continue to obtain the MAPI_E_NETWORK_ERROR error code. However, as soon as the global catalog server has finished shutting down, and the Exchange 2003 server has established a connection with a new global catalog server, the MAPI client will obtain the expected MAPI_E_END_OF_SESSION error code. Important
When this registry key is set on an Exchange 2003 server with the hotfix installed, the user credential state cannot be entered by MAPI clients that are running on the server. This hotfix will prevent the MAPI clients that require user interface from connecting across domain boundaries, where it is expected that users can be prompted for credentials. Make sure that you do not set the registry entry on Exchange 2003 servers when the UI prompt for credentials is desired by MAPI clients that are running on the servers. This hotfix does not alter the behavior of Exchange 2003 as a MAPI server. Also, it does not affect Outlook clients or any other MAPI clients that are running on other computers in which the hotfix and registry key have not been applied.
To set the EMSAB_UserAuth_Credentials registry value, follow these steps:
- Click Start, click Run, type regedit, and then click OK.
- Locate the following registry subkey:
- On the Edit menu, point to New, and then click DWORD Value.
- In the Details pane, type EMSAB_UserAuth_Credentials, and then press Enter.
- Right-click EMSAB_UserAuth_Credentials, and then click Modify.
- In the Edit DWORD Value dialog box, click Decimal in the Base area.
- In the Value data box, type 1, and then click OK.
- Exit Registry Editor.
A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix. Note
If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note
The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
Because of file dependencies, Microsoft Exchange Server 2003 Service Pack 2 (SP2) must be installed on the server before you apply this hotfix. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
How to obtain the latest service packs for Exchange Server 2003
You do not have to restart your computer after you apply this hotfix. However, the following services are automatically restarted when you apply the hotfix:
- Microsoft Exchange Information Store service
- Microsoft Exchange MTA Stacks
- Microsoft Exchange System Attendant
Hotfix replacement information
This hotfix does not replace a previously released hotfix.
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone
tab in the Date and Time item in Control Panel.
|File name||File version||File size||Date||Time||Platform|
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.