How to fix Outlook error 0x8004011c in Windows?

Error 0x8004011c means classic Outlook could not set up the new mail account, so the wizard ends with Something went wrong and Outlook couldn't set up your account. It shows up most on company PCs joined to a domain, where Windows cannot create its encryption key for saved passwords. Connect to the office network or VPN first, then add the account again.

Facts checked on 15 October 2026. Steps written for classic Outlook for Microsoft 365 and Outlook 2016 to 2024 on Windows 11 (25H2 and 26H2) and Windows 10 22H2, read against Microsoft's documentation and Microsoft support answers.

What Outlook error 0x8004011c means

You add a second mailbox in classic Outlook, type the address and password, and the wizard stops with a short message instead of a green tick. In current Outlook it reads Something went wrong and Outlook couldn't set up your account. If you add the account from Control Panel > Mail instead, the window says An unknown error occurred, error code: 0x8004011c.

The code itself comes from MAPI, the layer under classic Outlook that loads each mail account. 0x8004011C is the MAPI error MAPI_E_UNCONFIGURED: the account provider could not be configured. It says that setup failed, not why. Your mailbox, the server and the password are usually fine, because the same account often works on a phone or in a browser.

What causes error 0x8004011c in Outlook, ranked

When Outlook saves the password of a new account, Windows encrypts it with the Data Protection API (DPAPI). On a domain PC, DPAPI must back up its master key to a writable domain controller the first time. Microsoft documents that since KB2992611 and in all versions of Windows 10 and later, the key is not created when that backup fails. Outlook profile creation is one of the failures Microsoft lists.

Before you start: check whether your PC is on a domain

The first two fixes are only for domain PCs. This check takes a minute and tells you which branch of the chart to follow.

1. Press Win + R, type this and press Enter:

   sysdm.cpl

2. Open the Computer Name tab. If it shows Domain: with a name, the PC is on a domain. If it shows Workgroup:, it is not.
3. On a domain PC, select Start, type credential manager and open Credential Manager.
4. If it fails to open with error 0x80090345, Microsoft's DPAPI article applies to you: go to Fix 1.

How to fix Outlook error 0x8004011c on Windows

Close Outlook before each fix and open it again after. Keep the server settings of the account you add at hand (IMAP or POP server, port, encryption) in case Outlook asks for them. Your existing mailboxes are not touched by Fix 1 to Fix 3.

Fix 1. Connect to the office network or VPN and add the account again

5 to 10 minutesLow riskDomain PCs, first. Above all a new laptop, or a user who signed in for the first time away from the office.

Microsoft's DPAPI article says the master key is created once the PC can reach a writable domain controller. After that, Windows can protect the mail password and Outlook finishes the setup.

1. Close Outlook.
2. Connect the laptop to the office network, or start the company VPN and wait until it says it is connected.
3. Sign out of Windows and sign in again while the connection is up.
4. Open Credential Manager again. It should now open without an error.
5. Open Outlook, select File > Add Account and add the mail account again.

Your IT department can confirm that a writable domain controller answers with the command Microsoft gives. Run it in Command Prompt and replace the domain name with yours.

Lists a writable domain controller if one is reachable. An error means none is.

nltest /dsgetdc:yourdomain.local /writable

Fix 2. Set the DPAPI ProtectionPolicy value in the registry

15 minutesRead the warningDomain PCs that cannot reach a writable domain controller, used by one person on this one computer only.

With ProtectionPolicy set to 1, Windows backs up DPAPI master keys on the PC instead of on the domain controller. Microsoft documents the value in KB 3205778, and a Microsoft support answer for 0x8004011c used the same value, which the user confirmed fixed it.

1. Press Win + R, type regedit and select OK. Select Yes in the permission prompt.
2. Paste this path into the address bar and press Enter:

   HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb

3. Select File > Export, keep Selected branch and save the file.
4. Right-click the empty right pane and select New > DWORD (32-bit) Value.
5. Name it ProtectionPolicy, double-click it, set Value data to 1 and select OK.
6. Close Registry Editor and restart the PC, as Microsoft's article asks.
7. Open Outlook and add the account again.

Fix 3. Test adding the account in a local Windows account

10 minutesLow riskHome PCs, and domain PCs where Fix 1 and Fix 2 did not help or are not allowed.

Microsoft notes that local accounts always back up DPAPI keys on the PC, so the domain cause cannot occur there. A fresh account also has a clean Outlook profile. If the account adds there, the problem is in your own profile or its domain sign-in.

1. Create a test local account: Create a new user account to test a problem.
2. Sign out and sign in to the new account.
3. Open Outlook, skip the Microsoft 365 sign-in if asked, and add the same mail account.
4. Note the result, sign out and go back to your own account.

Fix 4. Create a new Outlook mail profile and add the account there

10 minutesLow riskThe test account worked, or other accounts in your current profile also misbehave.

MAPI loads every account from the mail profile. A new profile starts without the settings of the old one, so a damaged profile cannot block the setup. If the error shows in the new profile too, the profile is not the cause.

1. Close Outlook.
2. Open Control Panel, set View by to Small icons and select Mail (Microsoft Outlook).
3. Select Show Profiles, then Add, and type a name such as Outlook2.
4. Add your main mailbox first, then the new account. For IMAP or POP, choose manual setup and enter the server names and ports from your mail provider.
5. Select Prompt for a profile to be used, select OK and open Outlook with the new profile.
6. Keep the old profile until the new one shows all your mail, then remove it in the same window.

Fix 5. Repair Microsoft Office with Online Repair

15 to 30 minutesLow riskLast, when the error appears in every profile and every Windows account.

Online Repair downloads and replaces every Office file, including the MAPI parts that load mail accounts. It is not where 0x8004011c usually comes from, but it rules out a damaged install.

1. Close Outlook and the other Office apps.
2. Press Win + R, type this and press Enter to open Programs and Features:

   appwiz.cpl

3. Select your Microsoft Office or Microsoft 365 entry and select Change.
4. Choose Online Repair, select Repair and wait until it finishes. Step by step: How to repair Microsoft 365 or Office.
5. Restart the PC and add the account in Outlook again.

If Outlook still shows error 0x8004011c

When every fix failed, check the account itself and collect what IT or your mail provider will need. The table sorts the common signs.

• Event Viewer: on a domain PC, IT can turn on DPAPI auditing. Microsoft logs event 4692 when a master key backup is attempted, with a failure reason when it fails.
• For IT or support: the exact message, the account type (IMAP, POP, Exchange), whether the PC is on a domain, whether Credential Manager opens and the result of the local account test.
• Workaround: until it is fixed, read the mailbox in the provider's web mail or on your phone.

How to keep error 0x8004011c from coming back

• Sign in to a new work laptop on the office network or VPN the first time, so Windows creates its DPAPI key while a domain controller is reachable.
• Add new mail accounts while connected to the company network on a domain PC.
• Use ProtectionPolicy only where Microsoft allows it: one user on one PC, and remove it if that changes.
• Keep Office and Windows updated. Windows 10 left support on 14 October 2025, so a Windows 10 PC no longer gets security fixes.

Frequently asked questions

What is error 0x8004011c in Outlook?

It is the MAPI error MAPI_E_UNCONFIGURED, which means classic Outlook could not configure the mail account you were adding. Outlook shows it as Something went wrong and Outlook couldn't set up your account, or in Control Panel as An unknown error occurred, error code: 0x8004011c. The code says that setup failed but not why. On domain PCs the usual reason is that Windows could not create its DPAPI key for saved passwords, which Fix 1 and Fix 2 address.

Why does Outlook say something went wrong and it couldn't set up your account?

The message is generic: Outlook shows it whenever the last step of adding an account fails. With code 0x8004011c the failure is in configuring the account on this PC, not at the mail server. On a work laptop, check whether it is on a domain and whether Credential Manager opens. If Credential Manager fails, the PC cannot reach a writable domain controller, and connecting to the office network usually lets the setup finish.

Is 0x8004011c a Windows 11 or a Windows 10 problem?

It happens on both. Microsoft's DPAPI article says the domain behavior applies to all versions of Windows 10 and later, which includes Windows 11 25H2 and 26H2. The error comes from classic Outlook, so the fixes are the same on both systems. Windows 10 left support on 14 October 2025, so a Windows 10 PC no longer gets security fixes, but that does not cause this error.

Does error 0x8004011c affect Outlook 365?

Yes, when you use classic Outlook from Microsoft 365. The error appears when you add a second account, such as Gmail or another IMAP or POP mailbox, to classic Outlook on a domain PC. The Microsoft 365 mailbox itself keeps working. The new Outlook for Windows uses a different way of adding accounts, so this code is not its typical message.

Is it safe to set ProtectionPolicy to 1?

It is safe on a PC used by one domain user who does not sign in to other computers. Microsoft warns against it where users roam between PCs: a password changed elsewhere can leave the locally backed up keys tied to the old password, and the protected data can be lost. On a company laptop, ask IT first. Always export the registry key before the change so you can undo it.

Should I turn off the firewall or antivirus to fix 0x8004011c?

No. We found no source that ties this code to the firewall or to antivirus software. The setup fails inside Windows, while Windows protects the password, not on the network. If you want to rule out a security program, pause it for one attempt and turn it back on at once: Turn off Microsoft Defender protection for a moment. Allowing Outlook through the firewall by hand is not needed for adding a mail account.

Will I lose my emails if I follow these fixes?

Not with Fix 1 to Fix 3: they change only how Windows protects passwords and add a test account. Fix 4 creates a new mail profile next to the old one, so nothing is removed until you decide. IMAP and Exchange mail comes back from the server. A POP account keeps mail in a .pst file on the PC, so note its location and back it up before you remove an old profile.

What is error 0x80040111 in Outlook?

It is a different code from the same MAPI family, and this page does not cover it. People search both codes together because they look alike and both appear when Outlook cannot load an account. The fixes here are written for 0x8004011c, the account configuration failure. If your window shows 0x80040111 instead, search for that exact code.

Geht immer noch nicht: what if Outlook still does not work?

This page is in English. If Outlook still fails after every fix, the cause is outside Outlook. Check that the account works in the provider's web mail and on a phone, then follow the section after the fixes. On a work PC, give IT the exact message, the account type and whether Credential Manager opens. They can check the domain controllers with nltest and DPAPI events in Event Viewer.