Regarding the Outlook on IOS or Android issues; for me, in my environment, my users' Active Directory logon name differs from their email address. A few week ago I was able to get around this problem by simply leaving the domain field blank in the Outlook account setup page and using their correct AD logon name, in the form mailto:email address removed for privacy reasons. However, this does not work anymore when setting up new users or for users whose password expired and must enter a new password in the Outlook app. To get this to work I had to add the email domain in Active Directory Domains and Trusts under Properties then UPN Suffixes. I then changed the users' AD logon account to match their email address, which becomes available in AD Users and Computers in the drop down under the Account tab.