MAPI error 80040111 The information store could not be opened. (4331429)

MAPI error 80040111 The information store could not be opened.

The Data Loader and\or the Exchange Store Manager Service are unable to connect to Exchange 2013. You may see one of the following errors below. 

The following error is seen in the DL log when trying to connect to Exchange 2013:

MAPI error 80040111

Error: The information store could not be opened.
Component: MAPI 1.0
Context: 00000286
Statistics for this run
_____________________________________
Folders processed : 0
Messages processed : 0 (0 linked)
Attachments processed : 0
Errors : 1
Warnings : 0
Mailbox export complete.

For Exchange 2013:

• Certificates
  • When we make our connection for archiving we will be using the the web service endpoint listed as the ProxyServer in the Autodiscover response data provided in the log file for that particular mailbox.
  • 00:12:12 ProxyServer=webmail.corp.fqdn.com
  • From the Archive Manager server, we should confirm that we can access OWA from this address.
  • webmail.corp.fqdn.com/owa
  • It is important to verify we are not seeing Certificate errors when accessing this host name. If MAPI receives a certificate error while connecting to this endpoint the connection will be rejected and you will see 80040111 error.
  • If the certificate is invalid or you expect it to be invalid (self signed or expired), it is just important that the Archive Manager server trusts it. Try installing the certificate to the Local System certs under Trusted Root Certificates. (Other intermediate certificates may also be required).
  • Test by closing your browser and navigating to the OWA endpoint again, if you no longer receive the certificate prompts we can now be sure certificates are not the problem.
• MAPI CDO
  • Connecting to Exchange 2013 requires a newer version of MAPI CDO, the product has been tested with MAPI/CDO 1.2.1 version 6.5.8320.0. The old version of MAPI CDO must be uninstalled first or the new version will not install correctly. Use the Control Panel - Add/Remove programs to verify the CDO version. Incorrect version can cause error 80040111.
• ESM Service User Mailbox
  • If the user account the Exchange Store Manager service is running as has a mailbox, we need to ensure that mailbox is in Exchange 2013.
  • When Outlook Anywhere is configured for multiple versions of Exchange in the same environment, an Autodiscover request made on the Exchange 2013 endpoint will be forwarded to the Autodiscover server that is responsible for the user making the request. If the ESM user mailbox is located in Exchange 2007 or 2010, it will be unable to perform Autodiscover requests for information about the Exchange 2013 mailbox to be archived as the requests will be forwarded to a server that is unable to make this request.
  • Moving the ESM mailbox to the Exchange 2013 server will allow the Autodiscover to complete successfully.
  • Invalid configuration may result in 80040111.

General:

• Global Address List
  • Archive Manager currently requires users to be visible in the GAL in order for Archiving to be successful. If the user is hidden from the GAL Archive Manager will fail to open the mailbox with error 80040111.

         Note: Archive Manager Version 5.2 or later has the ability pick up Mailboxes that are hidden from the GAL. 

• ADC
  • The information for making a connection to Exchange is gathered form AutoDiscover and from the Archive Manager database.  Restart the Archive Manager Active Directory Connector service (ADC) and allow it to make a full pass so that the database is updated with current info.
• NTLM setting
  • The NTLM setting configured in the default domain policy and the NTLM setting configured in the default domain controllers policy should match and be consistent between the DC's, Exchange servers, and Archive Manager server.  The setting is:
    • Windows Settings > Security Settings > Local Policies/Security Options > Network Security > "Network security: LAN Manager authentication level"
• Permissions
  • Verify the data loader & ESM service accounts have the correct access to Exchange.  View-Only Organization Management and receive-as extended rights to the Exchange 2013 databases.  Be sure they are not members of Enterprise Admins or Domain Admins as those groups will have explicit denies on all mailboxes but their own. 

                        How to grant the required Exchange Store Manager service permissions

Additional causes of this error can be found in these KB articles: https://support.quest.com/archive-manager/kb/133035 https://support.quest.com/archive-manager/kb/138049 https://support.quest.com/archive-manager/kb/68819 https://support.quest.com/archive-manager/kb/48949 **Test Internal and External proxy addresses in OWA. **There is a high probability the External works and the Internal fails due to the fact the Internal name is not on the issued certificate and Archive Manager is trying to connect via the internal address. If this error occurs after an upgrade, test by looking at wlogs prior to the upgrade to see if the ProxyServer matches the one in the logs after the upgrade. **Workaround. The following item can be added to Configuration Console: Item Name: Autodiscover Override Settings Value: ProxyAuthScheme=NTLM;ProxyServer=mail.domain.com (ProxyServer item was added along with the internal Proxy address to correct the issue) **With 2013 customers are needing two certificates therefore you may need to add the following to the Config Console | Advanced Settings | "Autodiscover Use External Mailbox Server" set to True.