Hello @David Taylor ,
Thank you for posting your query on Microsoft Q&A. Kindly check the following info to dig this further:
- If the devices are Hybrid AD joined and you have ADFS in your environment If yes then Validate if secure hash has been updated to SHA256
Login with old password users who still have access and check event logs errors from the device by navigating to :
- Windows > Security > Look for events coming from "Logon" and "Special Logon" task category.
- Application and Service Log >Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin and look for errors.
- Navigate to device settings > accounts > access work or school > info > sync and see if you see any device sync errors.
Thanks,
Akshay Kaushik
Please "Accept the answer", "Upvote" and share your feedback (Yes/No) if the suggestion works as per your business need. This will help us and others in the community as well.