CPUU not prompting for target credentials

First time running this in a project, so forgive me if there's something obvious I'm missing...

Source and Target are Exchange Online
Client PC is Windows 10 running Office ProPlus C2R

INI has AskCredentials=1 and AskSourceCredentialsOnly=0

When the CPUU runs, it prompts for source credentials and seems to run through most of the steps, however it ultimately fails to migrate the profile and rolls back.

Looking through the verbose logs, it seems that the fundamental error is this:

5/4/2018 11:41:04 AM 5024 [Trace] Open store 'emailaddress@target.mail.onmicrosoft.com.
MAPI result: 0x80040111, Description: MAPI_E_LOGON_FAILED, Extended info: Component: MAPI 1.0, Description: The information store could not be opened., Context: 646, Low level: 0
Stack: 004DD6C8 004D7BB2 004D7918 005D5394 005C817C 005EB57D 005E8FDE 004295CD 00428E4C 00438670 006543C1 BaseThreadInitThunk RtlGetAppContainerNamedObjectPath RtlGetAppContainerNamedObjectPath
5/4/2018 11:41:04 AM 5024 [Trace] Hook procedure was successfully released.
5/4/2018 11:41:04 AM 5024 [Trace] Dialog box history:
5/4/2018 11:41:04 AM 5024 [Trace] 'Outlook Could Not Logon' dialog. 'Ok' button was pressed.
5/4/2018 11:41:04 AM 5024 [Trace] 'Action could not be completed' dialog. 'Ok' button was pressed.
5/4/2018 11:41:04 AM 5024 [Error] Cannot log on to the profile. Please verify the logon credentials, connection settings in CPUU.ini and that the Exchange server is available. Also you can use the 'LeaveTemporaryProfile' parameter to check the temporary profile. For more details, see the product documentation.
MAPI result: 0x80040111, Description: MAPI_E_LOGON_FAILED
Stack: 004D7918 005D5394 005C817C 005EB57D 005E8FDE 004295CD 00428E4C 00438670 006543C1 BaseThreadInitThunk RtlGetAppContainerNamedObjectPath RtlGetAppContainerNamedObjectPath
5/4/2018 11:41:04 AM 5024 [Trace] Temporary profile 'CPUU_{b482ec94380443f5a8c76f0b0467df6e}' was removed.

Looking further up however, it seems that CPUU is trying to use source creds despite the INI file:

5/4/2018 11:40:32 AM 5024 [Info] Testing logon to a temporary profile configured on the target.
5/4/2018 11:40:32 AM 5024 [Info] Temporary profile 'CPUU_{b482ec94380443f5a8c76f0b0467df6e}' was successfully created.
5/4/2018 11:40:32 AM 5024 [Trace] Temporary profile: CPUU_{b482ec94380443f5a8c76f0b0467df6e}.
5/4/2018 11:40:32 AM 5024 [Trace] Calling MAPILogon procedure.
5/4/2018 11:40:32 AM 5024 [Trace] Try use the source password for target logon.
5/4/2018 11:40:32 AM 5024 [Trace] Getting saved credentials: emailaddress@source.com.
5/4/2018 11:40:32 AM 5024 [Trace] Hook procedure for the dialog box prompting for credentials was successfully installed.
5/4/2018 11:40:32 AM 5024 [Trace] Setting credentials for MAPILogon: emailaddress@target.mail.onmicrosoft.com.
5/4/2018 11:40:32 AM 5024 [Trace] Hook procedure was successfully released.
5/4/2018 11:40:32 AM 5024 [Info] The MSEMS service has configured. Target server: 1959879b-6b54-4b65-9943-e18e2f0b756c@source.target.com. User: <TargetLegDN>
5/4/2018 11:40:32 AM 5024 [Info] Service 'MSEMS' for profile 'CPUU_{b482ec94380443f5a8c76f0b0467df6e}' was successfully created.
5/4/2018 11:40:32 AM 5024 [Trace] Logging off from profile 'CPUU_{b482ec94380443f5a8c76f0b0467df6e}'.
5/4/2018 11:40:32 AM 5024 [Trace] Enabling anonymous authentication in profile settings.
5/4/2018 11:40:32 AM 5024 [Trace] Logging on using RPC over HTTP.
5/4/2018 11:40:32 AM 5024 [Info] Check if RPC over HTTP supported.
5/4/2018 11:40:32 AM 5024 [Info] RPC over HTTP is supported.
5/4/2018 11:40:32 AM 5024 [Trace] Using RPC over HTTP settings from the switch message.
5/4/2018 11:40:32 AM 5024 [Info] Options '0x0000002F' were set for profile 'CPUU_{b482ec94380443f5a8c76f0b0467df6e}'.
5/4/2018 11:40:32 AM 5024 [Info] Proxy server 'outlook.office365.com' was set for profile 'CPUU_{b482ec94380443f5a8c76f0b0467df6e}'.
5/4/2018 11:40:32 AM 5024 [Info] Principal name 'msstd:outlook.office365.com' was set for profile 'CPUU_{b482ec94380443f5a8c76f0b0467df6e}'.
5/4/2018 11:40:32 AM 5024 [Info]
5/4/2018 11:40:32 AM 5024 [Info] Credentials in Windows Credential Manager:
5/4/2018 11:40:32 AM 5024 [Info] 'MicrosoftOffice16_Data:ADALWAM:2f4648bc-55a4-4154-9e95-f51d701537d2' for user ''.
5/4/2018 11:40:32 AM 5024 [Info] 'MicrosoftOffice16_Data:ADALWAM:670ce74e-24bd-4f08-8864-1e2b33929f7d' for user ''.
5/4/2018 11:40:32 AM 5024 [Info] 'virtualapp/didlogical' for user '02ecdhzphgdozjoq'.
5/4/2018 11:40:32 AM 5024 [Trace] Started logging on to profile 'CPUU_{b482ec94380443f5a8c76f0b0467df6e}'.
5/4/2018 11:40:32 AM 5024 [Trace] Skipping ping, because the profile uses RPC over HTTP logons.
5/4/2018 11:40:32 AM 5024 [Trace] Try use the source password for target logon.
5/4/2018 11:40:32 AM 5024 [Trace] Getting saved credentials: emailaddress@source.com.
5/4/2018 11:40:33 AM 5024 [Trace] Hook procedure for the dialog box prompting for credentials was successfully installed.
5/4/2018 11:40:33 AM 5024 [Trace] Setting credentials for MAPILogon: emailaddress@target.mail.onmicrosoft.com.
5/4/2018 11:40:33 AM 5024 [Trace] Calling MAPILogon procedure.


There is a catch, in that the primarySMTP of the target mailbox is a subdomain of the target domain (see the MSEMS line), and does not match the target UPN. I wouldn't think this would prevent CPUU from prompting for target credentials, but it's the first time I'm using this so not sure. Is there something else in the INI I'm missing here?

 

 

Parents
No Data
Reply Children
No Data