Jan 24 2023 06:18 AM
Hey!
We use Microsoft intune and our organization is set to use modern authentication. Our users and their computers are experiencing login issues and we have linked it to modern authentication issue. We found it by running the Microsoft Support and Rocovery assistant. To solve this, we pushed out HKEY_CURRENT_USER\Software\Microsoft\Exchange\AlwaysUseMSOAuthForAutoDiscover via a script from intune or running the rocover assistand that change this on the comuter.
But we have a number of users who have received the registry key, but the problem remains + that Microsoft Support and Rocovery assistant reports that modern authentication is not activated. It's just like something changes back to legacy connecting.
Where should I start looking?
Jan 25 2023 02:36 AM
Jan 25 2023 03:53 AM
It started with Outlook getting a ! over the icon. Now users are having problem with Teams (login) and Excel/word.
Jan 25 2023 04:25 AM
Jan 25 2023 06:50 AM - edited Jan 25 2023 06:51 AM
HI!
We have had this problems from the start of using AAD and Intune, it is about 6 month. It is hard to pin-point when it happens. (no ADFS)
The stranges thing is that when we run the Microsoft support assistant it changes the setting to start us Modern Auth ... but the same user can after a week have the sam problem and MS support assistant have to chang to modern auth again.
Jan 25 2023 06:57 AM
Jan 31 2023 07:16 AM
Jan 31 2023 07:20 AM - edited Jan 31 2023 07:23 AM
SolutionIf you go to admin.microsoft.com, click on the question mark sign, type in a question (Like adfs, for example), click on Contact Support at the bottom, and then New Microsoft service request. Or don't you see that button? (I'm doing this as a Global Admin btw, you will need to have the Global admin, Helpdesk admin, or Service support admin role)
Feb 08 2023 03:44 AM
Feb 08 2023 03:55 AM
Jan 31 2023 07:20 AM - edited Jan 31 2023 07:23 AM
SolutionIf you go to admin.microsoft.com, click on the question mark sign, type in a question (Like adfs, for example), click on Contact Support at the bottom, and then New Microsoft service request. Or don't you see that button? (I'm doing this as a Global Admin btw, you will need to have the Global admin, Helpdesk admin, or Service support admin role)