Microsoft's October Windows Server Updates Cause Exchange Sign-In and Mail Flow Issues

Post Views: 9

Microsoft has acknowledged that the latest Windows Server security patches are causing sign-in and email delivery problems for certain Exchange Server configurations.

Problem Description

Microsoft reported that users running Windows Server 2019 or later may encounter difficulties accessing Outlook on the web (OWA) following the installation of the October 2026 updates. Affected systems have experienced errors such as “MapiExceptionMdbOffline: Unable to make connection to the server. (hr=0x80004005, ec=1142)” and disruptions in mailbox replication processes.

Root Cause

The root cause involves a change in the default memory allocation for the Endpoint Mapper service during Endpoint Lookup operations. The update enforces a limit of 512 simultaneous calls, which may be insufficient under high workloads.

Registry-Based Adjustment

Microsoft provided a registry-based adjustment to increase this threshold, allowing administrators to modify the “EpmapSavedContextCap” value to 65536 via the Windows Registry Editor. This adjustment requires a system reboot and should be monitored for recurring issues.

Unrelated to Exchange Server Updates

Microsoft clarified that these problems are unrelated to the October 2026 Exchange Server security updates and advised against uninstalling the patches. The company emphasized that any Exchange deployment on affected Windows versions could face similar challenges, with severity dependent on server traffic levels.

Extended Security Update Termination

Microsoft announced the termination of extended security updates for Exchange 2016 and 2019 this month, following a six-month extension granted in April 2026. This marks the end of support for these versions under the Extended Security Update (ESU) program.

Blue Report 2026 Findings

Additional findings from the Blue Report 2026 highlight that 37% of malicious activities are blocked when threat actors possess valid credentials. The report analyzed 338 million security simulations across customer environments to evaluate defensive measures.

Ongoing Investigation

Microsoft continues to investigate the issue while offering the registry workaround as a temporary solution. Administrators are encouraged to apply the fix and monitor system performance closely. The company has not yet provided a definitive timeline for a permanent resolution.

According to the Blue Report 2026, 37% of malicious activities are blocked when threat actors possess valid credentials.