Hi there,
a customer of us is in a strange situation. After beeing hacked the rebuilt on-premises domain is still not yet connected to O365 via AAD Connect. That's just for additional information. Currently O365 ProPlus is not yet enrolled due to additional needed effort. Only some pilots are using it. The majority is utilizing Office 2016 and so Outlook 2016.
After some registry tweaks for autodiscover Outlook 2016 is running quite fine. But occasionally some Outlook clients are freezing. It looks like it is the point of time where the MFA session has to be renewed after 14 days.
Sorry for the German screenshot, but I guess you can recognize that this is the logon prompt for O365 which is freezing.
We are seeing this only for already created Outlook profiles and there only for a part of the workforce. But there is no context between the locations or different subdomains.
I have seen a quite good chance that it might be solved with the following KB.
Outlook prompts for password and doesn't use Modern Authentication to connect to Office 365
Adding the registry key AlwaysUseMSOAuthForAutoDiscover was not the solution.
In most cases the issue can only be solved by a new profile creation. Even a restart of the whole PC is not working.
Any other ideas?
Kind regards,
woelki
Hey guys,
unfortunately no replies yet. Btw I have created a Microsoft ticket, but they say "hey, we cannot guarantee 100% perfect Outlook connection." The support wanted to play through the default troubleshooting with cached mode on/off, new profile. I have been asked a lot if the modern authentication has been fully enabled and yes, as you can see in the screenshot it is a password prompt for the modern authentication.
So I'm still trying to force the Microsoft support to dig even deeper with a more technical approach.
In Azure Sign-Ins I have searched for the affected users had this Outlook problem today. Just before the helpdesk solved the problem, you can see a lot of errors for the non-interactive
sign-ins, you can see a lot of errors for the Office 365 Exchange Online resource via the Microsoft Office application.
The error coder AADSTS50078 is not included in the Azure error code collection.
Presented multi-factor authentication has expired due to policies configured by your administrator, you must refresh your multi-factor authentication to access '{resource}'.
So it looks like that users who got these errors in a row have the Outlook sign-in issue. But in total I see several thousands of these notifications in the tenant, in most cases single ones.
Are these Azure sign-in failures quite normal?
Should I cross-post this in the identity forum?
Kind regards,
woelki