I found that stub implementation for CreatePrivateObjectSecurity / DestroyPrivateObjectSecurity prevents Microsoft Exchange client from working properly. After changing these stubs to return an empty security descriptor and destroy it Exchange works much better. It can now read mail and calendar. I'm looking for suggestions what minimal implementation for these functions would be acceptable as a patch.