Outlook keep ask for password after logoff on RDS

Question

Outlook keep ask for password after logoff on RDS

Hello
After enable modern authentication for Outlook 2019(KMS) in Exchange Online, outlook 2019 continually prompts for password when users try to connect to Microsoft 365 and registers the device in Azure AD.

Our configuration:
• RDS farm windows server 2019(Registry: SharedComputerLicensing=1, AlwaysUseMSOAuthForAutoDiscover=1)
• UPD(user profile disk)
• Office 2019 Pro Plus(KMS)
• Exchange Online
• AD FS Single Sign-On
• SharedComputerLicensing=1 not helped

Outlook for Microsoft 365 work without problems after enable modern authentication, but we use Office 2019 activates with a KMS license.

Joyce Shen - MSFT 16,701 Reputation points

2022-10-10T02:10:18.483+00:00

Hi @Болдохонова Ольга Евгеньевна

Looks like you have correctly configured the registry key to compel Outlook to utilize modern authentication for RPC connections.

If so, I would suggest you use SARA tool to do a test to resolve the prompting password issue:

Details here: About the Microsoft Support and Recovery Assistant
Болдохонова Ольга Евгеньевна 6 Reputation points

2022-10-11T05:22:12.73+00:00

SARA not helped (not discover any problem)
Болдохонова Ольга Евгеньевна 6 Reputation points

2022-10-11T05:28:10.057+00:00

Outlook ask for password once, when user logon to rd session host. and worked normaly before logoff
Joyce Shen - MSFT 16,701 Reputation points

2022-10-13T07:46:11.213+00:00

Hi,

I would like to confirm does outlook 2019 prompt password once or continually? Make sure modern authentication is enabled both client-side and server-side.

The link here describes the authentication behavior for Office 2013, Office 2016, and Office 2019 client apps when they connect to Exchange Online with or without modern authentication.
Joyce Shen - MSFT 16,701 Reputation points

2022-10-18T05:42:02.327+00:00

Hi,

Is there any progress here about this question?
Болдохонова Ольга Евгеньевна 6 Reputation points

2022-10-24T07:35:35.103+00:00

Outlook ask for password once before logoff, but if session last for several days outlook may ask for password again.
Modern authentication is enabled on both server and client side

2 answers

Your answer

Joyce Shen - MSFT 16,701 Reputation points

2022-10-10T02:10:18.483+00:00

Hi @Болдохонова Ольга Евгеньевна

Looks like you have correctly configured the registry key to compel Outlook to utilize modern authentication for RPC connections.

If so, I would suggest you use SARA tool to do a test to resolve the prompting password issue:

Details here: About the Microsoft Support and Recovery Assistant
Болдохонова Ольга Евгеньевна 6 Reputation points

2022-10-11T05:22:12.73+00:00

SARA not helped (not discover any problem)
Болдохонова Ольга Евгеньевна 6 Reputation points

2022-10-11T05:28:10.057+00:00

Outlook ask for password once, when user logon to rd session host. and worked normaly before logoff
Joyce Shen - MSFT 16,701 Reputation points

2022-10-13T07:46:11.213+00:00

Hi,

I would like to confirm does outlook 2019 prompt password once or continually? Make sure modern authentication is enabled both client-side and server-side.

The link here describes the authentication behavior for Office 2013, Office 2016, and Office 2019 client apps when they connect to Exchange Online with or without modern authentication.
Joyce Shen - MSFT 16,701 Reputation points

2022-10-18T05:42:02.327+00:00

Hi,

Is there any progress here about this question?
Болдохонова Ольга Евгеньевна 6 Reputation points

2022-10-24T07:35:35.103+00:00

Outlook ask for password once before logoff, but if session last for several days outlook may ask for password again.
Modern authentication is enabled on both server and client side

Answer 1

Hi @Болдохонова Ольга Евгеньевна

Thanks for sharing your solution above! You could accept any helpful reply to close this thread!

According to my research: by default, Microsoft Office 365 ProPlus (2016 and 2019 version) uses Azure Active Directory Authentication Library (ADAL) framework-based authentication. Starting in build 16.0.7967, Office uses Web Account Manager (WAM) for sign-in workflows on Windows builds that are later than 15000 (Windows 10, version 1703, build 15063.138).
There are generally two problems we see WAM causing:

Users are unable to authenticate (particularly after a password reset)
Users are being prompted for 2FA less frequently

To work around the issue of users being unable to authenticate, you can add the following Registry keys on the client machine to suppress WAM and revert Outlook 2016 or Outlook 2019 back to ADAL:

HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity "DisableADALatopWAMOverride"=dword:00000001
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity "DisableAADWAM"=dword:00000001

Some related information: https://cloud.foetron.com/support/solutions/articles/14000107078-disable-adal-for-outlook-outlook-prompts-for-password
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

JayceYang 1,571 Reputation points Moderator

2022-10-28T08:45:03.637+00:00

@Болдохонова Ольга Евгеньевна
If the answer is helpful please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.

Answer 2

Болдохонова Ольга Евгеньевна 6

Using disableADALatopWAMOverride =1 helps with password prompts. But what consequences of using of this parameter? What is it doing?

Share via

Outlook keep ask for password after logoff on RDS

2 answers

Your answer