Hi all. Have an interesting one here. Helping a customer out with a good old ADMT AD migration. So far everything is going very well, except the user sign-on experience into Office 365.
After the user has been migrated, they can login successfully using their old\current password onto their device, but as soon as they access anything Office 365 related, it tells them incorrect username or password. The have SSPR so once their password is changed, all works ok again. They use PTA as well. Not sure if it might be there that things go wrong. Initially we thought it was only some users, but after going through the Azure logs, it seems like it is all. The ones that know SSPR well just go ahead and do it without logging tickets. I checked everything and running out of ideas. We might just include with the comms to the users that they change their password post migration. More info, we are using ADMT with the PES. SID filtering is disabled. PTA agents are healthy. One far fetched possible issue might be the Kerberos ticket one those. Not changed for the last three months.
Anyone have done anything similar in the past of come across this before?
