Windows OS Hub
  • Windows Server
    • Windows Server 2016
    • Windows Server 2012 R2
    • Windows Server 2012
    • Windows Server 2008 R2
    • SCCM
  • Active Directory
    • Group Policies
  • Windows Clients
    • Windows 10
    • Windows 8
    • Windows 7
    • MS Office
    • Outlook
  • Virtualization
    • VMWare
    • Hyper-V
  • PowerShell
  • Exchange
  • Home
  • About

Windows OS Hub

  • Windows Server
    • Windows Server 2016
    • Windows Server 2012 R2
    • Windows Server 2012
    • Windows Server 2008 R2
    • SCCM
  • Active Directory
    • Group Policies
  • Windows Clients
    • Windows 10
    • Windows 8
    • Windows 7
    • MS Office
    • Outlook
  • Virtualization
    • VMWare
    • Hyper-V
  • PowerShell
  • Exchange

 Windows OS Hub / Outlook / Outlook Keeps Asking For Credentials (Username and Password)

April 8, 2020 MS OfficeOutlookWindows 10

Outlook Keeps Asking For Credentials (Username and Password)

A very common problem is when Outlook  starts asking for the user credentials, even if the correct password is specified. It looks like this: after starting Outlook successfully connects to the on-premises Exchange server (or Office 365 mailbox), the user sees a list of folders in the mailbox and new emails in the Inbox. But after a few minutes of normal work, a window appears for entering the user name and password. The user enters the password and presses OK, but the window with the prompt to enter the credentials appears again. By clicking the “Cancel” button, the user can continue to work with Outlook, but after a while the window asking for the password pops up again (sometimes the user account may be locked at the same time).  The problem occurs in different versions of Outlook (2019/2016/365) and Windows (there was a problem in both Windows 7/8.1 and Windows 10).

Outlook 2016 keeps asking for a password

Most admins in this case try to recreate the mail profile, reinstall Office – but this usually does not help. Outlook with some periodicity still requires the user to enter a password.

Consider several ways that can help you to remove the annoying password request window in Outlook.

First of all, of course, you need to make sure that the user enters the correct password, and didn’t forget it :).

Also, try to connect to your mailbox through the web interface (OWA) and log in. Perhaps the problem is that the user password has expired (the password has expired according to the domain password policy settings) and must be changed.

Contents:
  • Clear Saved Outlook Credentials
  • Disable “Always Prompt for Credentials” Option in Outlook
  • Outlook Anywhere and NTLM authentication
  • Outlook: Disable Office 365 Autodiscover
  • Change Office 365 User Authentication Method
  • Recreate Your Outlook Profile
  • Temporary Disable Your Anti-virus and Firewall Protection
  • Poor Network Connection to Exchange Server

Clear Saved Outlook Credentials

Check if you have Outlook saved passwords stored in the Windows Password Manager (Credential Manager), try to delete them all. To do this, go to Control Panel\All Control Panel Items\User Accounts\Manage your credential -> Windows Credentials. Find the saved passwords for Outlook/Office in the Generic Credentials list and remove them.

clear outlook saved credentials

To directly access Credential Manager, run the command:

rundll32.exe keymgr.dll,KRShowKeyMgr

saved passwords in the Credential Manager

Disable “Always Prompt for Credentials” Option in Outlook

Open your Outlook Account Settings (File -> Account Settings -> Account Settings), double click on your Exchange account. Go to More settings -> select Security tab. Clear the checkbox Always prompt for credentials in the User identification section.

If you have an Office 365 mailbox connected, this tab should have an additional “Logon network security” field. Make sure that “Anonymous Authentication” is not selected.

Always prompt for credentials

Outlook Anywhere and NTLM authentication

If your Outlook is configured to access the Exchange mailbox using Outlook Anywhere (MAPI over HTTP), verify that NTLM authentication is used. At the same time, you need to check the authentication type used for the IIS site on the Exchange server.
If the computer with a problem Outlook is not joined to the Active Directory domain, then on the contrary, you should try to switc from NTLM authentication to Basic.

Outlook: Disable Office 365 Autodiscover

Somewhere in the fall of 2016, an update was released for Outlook 2016 that enabled a mandatory check of the Office 365 cloud connection point. You can verify this by using the Fiddler or TCPView tools and track the attempts to connect to the autodiscover-s.outlook.com and outlook.office365.com servers.

To disable this check, go to the registry key HKEY_CURRENT_USER\Software \Microsoft\Office\16.0\Outlook\AutoDiscover and create new DWORD parameter named ExcludeExplicitO365Endpoint and value 1. Restart Outlook.

The ExcludeExplicitO365Endpoint registry parameter is applicable to Outlook 2016 version 16.0.6741.2017 and newer (this parameter is additional to the list of parameters that determine the types of Autodiscover processes when Outlook starts: see an article Slow Exchange AutoDiscover in Outlook 2016).

You can make changes to the registry with the following command:

reg add HKEY_CURRENT_USER\Software\Microsoft\Office\x.0\Outlook\AutoDiscover /t REG_DWORD /v ExcludeExplicitO365Endpoint /d 1
Or, using the PowerShell cmdlet Set-ItemProperty:
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover" -Name 'ExcludeExplicitO365Endpoint' -Value 1 -Type DWORD –Force

Change Office 365 User Authentication Method

If your mailbox has been migrated from on-premises Exchange to Office 365 or you have two mailboxes connected in Outlook (one from the on-premises Exchange, the second from Office 365) and you use an RPC connection, in this case Outlook doesn’t use Modern Authentication (also used for MFA). In this case, your credentials are sent to Office 356 instead of token. To force Outlook to use modern authentication for RPC connections, you need to add the AlwaysUseMSOAuthForAutoDiscover DWORD parameter with the value 1 to the registry key HKCU\Software\Microsoft\Exchange.

Set-ItemProperty -Path " HKCU:\Software\Microsoft\Exchange" -Name 'AlwaysUseMSOAuthForAutoDiscover' -Value 1 -Type DWORD -Force

The registry settings can be deployed to domain computers using a GPO.

Ensure that a Modern Authentication is enabled for your Office 365 account in the Office 365 Admin Center (Settings -> Services & add-ins).

enable office 365 modern authentication

If on the contrary you want to completely disable Modern Authentication in Outlook 2016/2019/365 (this authentication method should be disabled in the Admin Center), you need to configure the following registry settings:

This method should help to fix problems with constantly requested credentials in Outlook 2016/2019 with Office 365 mailbox connected.

Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Office\16.0\Common\Identity" -Name EnableAdal -Value 0 -Type DWORD –Force
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Office\16.0\Common\Identity" -Name DisableADALatopWAMOverride -Value 1 -Type DWORD –Force
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Office\16.0\Common\Identity" -Name DisableAADWAM -Value 1 -Type DWORD –Force

Recreate Your Outlook Profile

If all of these methods above did not help you get rid of the problem, try to delete and recreate your Outlook profile. You can create a new Outlook profile using the Mail icon in the Control Panel or using the outlook.exe /manageprofiles command.

re-create outlook profile using mail app

If the Mail app icon is missing in Control Panel, it can be restored this way.

Temporary Disable Your Anti-virus and Firewall Protection

Perhaps the Exchange connection problem is caused by your anti-virus or firewall software. Try to temporarily disable it and check whether Outlook continues to prompts a password.

Poor Network Connection to Exchange Server

A poor and unstable network connection to the Exchange server and/or domain controller can also be a source of periodic password requests in Outlook. You can test the network performance using the iperf tool.

Also check the computer time, it should differ from the time on the domain controller for no more than 5 minutes. If more, check the NTP time synchronization scheme in your domain.

6 comments
3
Facebook Twitter Google + Pinterest
previous post
How to Configure MariaDB Master-Master/Slave Replication?
next post
Using Attribute Editor in Active Directory Users and Computers

Related Reading

How to Sign a PowerShell Script (PS1) with...

February 25, 2021

How to Shadow (Remote Control) a User’s RDP...

February 22, 2021

Configuring PowerShell Script Execution Policy

February 18, 2021

Configuring Proxy Settings on Windows Using Group Policy...

February 17, 2021

Updating Group Policy Settings on Windows Domain Computers

February 16, 2021

6 comments

Dave M. February 28, 2019 - 9:30 am

The random password box popping up has been driving me insane for months and your fix worked, thanks! The trick was:

To disable this check, go to the registry key HKEY_CURRENT_USER\Software \Microsoft\Office\16.0\Outlook \AutoDiscover and create a DWORD parameter named ExcludeExplicitO365Endpoint and value 1. Restart Outlook.

Thank you!!

Reply
King Otto June 19, 2019 - 9:53 pm

Alll above solutions did not work for me (May 2019 Windows Pro update, Office fully updated June 19th 2019).
However what worked for me was to set my default inbox to open Outlook with to my Windows account @outlook.com e-mail inbox instead of my default e-mail address (from my internet-provider). As soon as I set it back, I get prompted for my outlook.com e-mail password again… I think this is where the problem needs to be solved, let’s hope Microsoft will take a look at this.
Hope this willl help you guys and girls!

Reply
King Otto June 19, 2019 - 9:59 pm

Oh yeah by the way, you can set this in Outlook >>> Options >>> Advanced (options) >> Outlook startup and closing (translated from Dutch, sorry if it is not officialy exactly the same). Simply select the inbox of your microsoft e-mail account.
Best regards to y’all

Reply
serg November 19, 2019 - 5:07 am

There is a similar issue in Exchange 2019 CU3. MSFT say it will be fixed in the next CU.
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\AutoDiscover
DisableAutodiscoverV2Service to 1

Reply
glnz May 30, 2020 - 7:53 pm

Different issue but couldn’t find a way to email you, Mr. OS Hub.
I’m a normal “User” at my law firm, and my PC now has Win 10 Pro 64-bit and Office 2016 32-bit.
Each time my Admins repair, reinstall or upgrade my Office, I have a recurring problem opening attachments from Outlook email. When I double-click on an attachment in an email, Outlook always FIRST prompts me “Would you like to open the file or save it to your computer?”, and the option for “Always ask before opening this type of file” is checked but greyed out, so I cannot uncheck it. I don’t like being prompted.
To let me uncheck the “Always ask” option, my Admins must first give me Admin status rights, and only then can I uncheck “Always ask before opening this type of file”. That’s not so fast for them. Right now, one of my Admins had to spend more than an hour on this.
SO … is there any permanent setting or script they could run that would let me uncheck “Always ask before opening this type of file” without being an Admin myself?
Thanks.
And even though most of your articles are way above my skillset, I enjoy reading your website.
glnz

Reply
Tom Partridge January 29, 2021 - 1:33 pm

This one worked for mine. Thank you!
“Outlook: Disable Office 365 Autodiscover”

Reply

Leave a Comment Cancel Reply

Categories

  • Active Directory
  • Group Policies
  • Exchange
  • Windows 10
  • Windows 8
  • Windows 7
  • Windows Server 2016
  • Windows Server 2012 R2
  • Windows Server 2008 R2
  • PowerShell
  • VMWare
  • MS Office

Recent Posts

  • How to Sign a PowerShell Script (PS1) with a Code Signing Certificate?

    February 25, 2021
  • Change the Default Port Number (TCP/1433) for a MS SQL Server Instance

    February 24, 2021
  • How to Shadow (Remote Control) a User’s RDP session on RDS Windows Server 2016/2019?

    February 22, 2021
  • Configuring PowerShell Script Execution Policy

    February 18, 2021
  • Configuring Proxy Settings on Windows Using Group Policy Preferences

    February 17, 2021
  • Updating Group Policy Settings on Windows Domain Computers

    February 16, 2021
  • Managing Administrative Shares (Admin$, IPC$, C$, D$) in Windows 10

    February 11, 2021
  • Packet Monitor (PktMon) – Built-in Packet Sniffer in Windows 10

    February 10, 2021
  • Fixing “Winload.efi is Missing or Contains Errors” in Windows 10

    February 5, 2021
  • How to Move (Clone) Windows to a New Hard Drive (HDD/SSD)?

    February 4, 2021

Follow us

woshub.com
  • Facebook
  • Twitter
  • RSS
Popular Posts
  • Configuring KMS Server for MS Office 2019/2016 Volume Activation
  • How to Extend Office 2019/2016 & Office 365 Trial to 180 Days?
  • How to Install Only Specific Apps in Office 2016/Office 365?
  • Office 2019 Deployment Guide for Enterprise Using Deployment Tool
  • Office 2016 vs. Office 365: Differences and Licensing
  • Managing Microsoft Office Settings with GPO Administrative Templates
Footer Logo

@2014 - 2018 - Windows OS Hub. All about operating systems for sysadmins


Back To Top