MAPI Logon Failure: Error preventing MAPI logon attempt

MAPI_logon_failure_Error_preventing_MAPI_logon_attempt (Rule)

Knowledge Base article:

Summary

MAPI logon verification could not be completed. An unexpected error was generated by the script that performs the MAPI logon on Exchange servers.

Causes

Many problems can cause this error. Perform a general system check to ensure components and services are running. Also, check the alert text to find the specific cause of failure.

Two common causes are as follows:

Resolutions

Reinstall the scripting engine, common Windows components, or Exchange components in accordance with the associated error described in the alert.

Element properties:

TargetMicrosoft.Exchange.SyntheticTransaction.MAPILogon
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
MAPI Logon Failure: Error preventing MAPI logon attempt
{0}
Event LogOperations Manager

Member Modules:

ID Module Type TypeId RunAs 
EventDS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="MAPI_logon_failure_Error_preventing_MAPI_logon_attempt" Enabled="onStandardMonitoring" Target="Exch2003Core!Microsoft.Exchange.SyntheticTransaction.MAPILogon" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>.</ComputerName>
<LogName>Operations Manager</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Params/Param[1]</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>MAPI logon verification</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesMOM2005RegularExpression</Operator>
<Pattern>^((9984)|(9985)|(9991)|(9997)|(9999)|(5987)|(5990))$</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner>$Data/PublisherName$</AlertOwner>
<AlertMessageId>$MPElement[Name="MAPI_logon_failure_Error_preventing_MAPI_logon_attempt.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>