Windows OS Hub
  • Windows Server
    • Windows Server 2022
    • Windows Server 2019
    • Windows Server 2016
    • Windows Server 2012 R2
    • Windows Server 2012
    • Windows Server 2008 R2
    • SCCM
  • Active Directory
    • Active Directory Domain Services (AD DS)
    • Group Policies
  • Windows Clients
    • Windows 11
    • Windows 10
    • Windows 8
    • Windows 7
    • Windows XP
    • MS Office
    • Outlook
  • Virtualization
    • VMWare
    • Hyper-V
    • KVM
  • PowerShell
  • Exchange
  • Cloud
    • Azure
    • Microsoft 365
    • Office 365
  • Linux
    • CentOS
    • RHEL
    • Ubuntu
  • Home
  • About

Windows OS Hub

  • Windows Server
    • Windows Server 2022
    • Windows Server 2019
    • Windows Server 2016
    • Windows Server 2012 R2
    • Windows Server 2012
    • Windows Server 2008 R2
    • SCCM
  • Active Directory
    • Active Directory Domain Services (AD DS)
    • Group Policies
  • Windows Clients
    • Windows 11
    • Windows 10
    • Windows 8
    • Windows 7
    • Windows XP
    • MS Office
    • Outlook
  • Virtualization
    • VMWare
    • Hyper-V
    • KVM
  • PowerShell
  • Exchange
  • Cloud
    • Azure
    • Microsoft 365
    • Office 365
  • Linux
    • CentOS
    • RHEL
    • Ubuntu

 Windows OS Hub / Outlook / Outlook Keeps Asking For Credentials (Username and Password)

April 8, 2020 MS OfficeOutlookWindows 10

Outlook Keeps Asking For Credentials (Username and Password)

A very common problem is when Outlook  starts asking for the user credentials, even if the correct password is specified. It looks like this: after starting Outlook successfully connects to the on-premises Exchange server (or Office 365 mailbox), the user sees a list of folders in the mailbox and new emails in the Inbox. But after a few minutes of normal work, a window appears for entering the user name and password. The user enters the password and presses OK, but the window with the prompt to enter the credentials appears again. By clicking the “Cancel” button, the user can continue to work with Outlook, but after a while the window asking for the password pops up again (sometimes the user account may be locked at the same time).  The problem occurs in different versions of Outlook (2019/2016/365) and Windows (there was a problem in both Windows 7/8.1 and Windows 10).

Outlook 2016 keeps asking for a password

Most admins in this case try to recreate the mail profile, reinstall Office – but this usually does not help. Outlook with some periodicity still requires the user to enter a password.

Consider several ways that can help you to remove the annoying password request window in Outlook.

First of all, of course, you need to make sure that the user enters the correct password, and didn’t forget it :).

Also, try to connect to your mailbox through the web interface (OWA) and log in. Perhaps the problem is that the user password has expired (the password has expired according to the domain password policy settings) and must be changed.

Contents:
  • Clear Saved Outlook Credentials
  • Disable “Always Prompt for Credentials” Option in Outlook
  • Outlook Anywhere and NTLM authentication
  • Outlook: Disable Office 365 Autodiscover
  • Change Office 365 User Authentication Method
  • Recreate Your Outlook Profile
  • Temporary Disable Your Anti-virus and Firewall Protection
  • Poor Network Connection to Exchange Server

Clear Saved Outlook Credentials

Check if you have Outlook saved passwords stored in the Windows Password Manager (Credential Manager), try to delete them all. To do this, go to Control Panel\All Control Panel Items\User Accounts\Manage your credential -> Windows Credentials. Find the saved passwords for Outlook/Office in the Generic Credentials list and remove them.

clear outlook saved credentials

To directly access Credential Manager, run the command:

rundll32.exe keymgr.dll,KRShowKeyMgr

saved passwords in the Credential Manager

Disable “Always Prompt for Credentials” Option in Outlook

Open your Outlook Account Settings (File -> Account Settings -> Account Settings), double click on your Exchange account. Go to More settings -> select Security tab. Clear the checkbox Always prompt for credentials in the User identification section.

If you have an Office 365 mailbox connected, this tab should have an additional “Logon network security” field. Make sure that “Anonymous Authentication” is not selected.

Always prompt for credentials

Outlook Anywhere and NTLM authentication

If your Outlook is configured to access the Exchange mailbox using Outlook Anywhere (MAPI over HTTP), verify that NTLM authentication is used. At the same time, you need to check the authentication type used for the IIS site on the Exchange server.
If the computer with a problem Outlook is not joined to the Active Directory domain, then on the contrary, you should try to switc from NTLM authentication to Basic.

Outlook: Disable Office 365 Autodiscover

Somewhere in the fall of 2016, an update was released for Outlook 2016 that enabled a mandatory check of the Office 365 cloud connection point. You can verify this by using the Fiddler or TCPView tools and track the attempts to connect to the autodiscover-s.outlook.com and outlook.office365.com servers.

To disable this check, go to the registry key HKEY_CURRENT_USER\Software \Microsoft\Office\16.0\Outlook\AutoDiscover and create new DWORD parameter named ExcludeExplicitO365Endpoint and value 1. Restart Outlook.

The ExcludeExplicitO365Endpoint registry parameter is applicable to Outlook 2016 version 16.0.6741.2017 and newer (this parameter is additional to the list of parameters that determine the types of Autodiscover processes when Outlook starts:

You can make changes to the registry with the following command:

reg add HKEY_CURRENT_USER\Software\Microsoft\Office\x.0\Outlook\AutoDiscover /t REG_DWORD /v ExcludeExplicitO365Endpoint /d 1
Or, using the PowerShell cmdlet Set-ItemProperty:
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover" -Name 'ExcludeExplicitO365Endpoint' -Value 1 -Type DWORD –Force

Change Office 365 User Authentication Method

If your mailbox has been migrated from on-premises Exchange to Office 365 or you have two mailboxes connected in Outlook (one from the on-premises Exchange, the second from Office 365) and you use an RPC connection, in this case Outlook doesn’t use Modern Authentication (also used for MFA). In this case, your credentials are sent to Office 356 instead of token. To force Outlook to use Modern Authentication for RPC connections, you need to add the AlwaysUseMSOAuthForAutoDiscover DWORD parameter with the value 1 to the registry key HKCU\Software\Microsoft\Exchange.

Set-ItemProperty -Path " HKCU:\Software\Microsoft\Exchange" -Name 'AlwaysUseMSOAuthForAutoDiscover' -Value 1 -Type DWORD -Force

The registry settings can be deployed to domain computers using a GPO.

Ensure that a Modern Authentication is enabled for your Office 365 account in the Office 365 Admin Center (Settings -> Services & add-ins).

enable office 365 modern authentication

If on the contrary you want to completely disable Modern Authentication in Outlook 2016/2019/365 (this authentication method should be disabled in the Admin Center), you need to configure the following registry settings:

This method should help to fix problems with constantly requested credentials in Outlook 2016/2019 with Office 365 mailbox connected.

Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Office\16.0\Common\Identity" -Name EnableAdal -Value 0 -Type DWORD –Force
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Office\16.0\Common\Identity" -Name DisableADALatopWAMOverride -Value 1 -Type DWORD –Force
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Office\16.0\Common\Identity" -Name DisableAADWAM -Value 1 -Type DWORD –Force

Recreate Your Outlook Profile

If all of these methods above did not help you get rid of the problem, try to delete and recreate your Outlook profile. You can create a new Outlook profile using the Mail icon in the Control Panel or using the outlook.exe /manageprofiles command.

re-create outlook profile using mail app

If the Mail app icon is missing in Control Panel, it can be restored this way.

Temporary Disable Your Anti-virus and Firewall Protection

Perhaps the Exchange connection problem is caused by your anti-virus or firewall software. Try to temporarily disable it and check whether Outlook continues to prompts a password.

Poor Network Connection to Exchange Server

A poor and unstable network connection to the Exchange server and/or domain controller can also be a source of periodic password requests in Outlook. You can test the network performance using the iperf tool.

Also check the computer time, it should differ from the time on the domain controller for no more than 5 minutes. If more, check the NTP time synchronization scheme in your domain.

11 comments
4
Facebook Twitter Google + Pinterest
previous post
How to Configure MariaDB Master-Master/Slave Replication?
next post
Using Attribute Editor in Active Directory Users and Computers

Related Reading

Windows Security Won’t Open or Shows a Blank...

May 17, 2022

How to Manually Install Windows Updates from CAB...

May 16, 2022

RDS and RemoteApp Performance Issues on Windows Server...

May 16, 2022

Fix: You’ll Need a New App to Open...

April 27, 2022

How to Completely Uninstall Previous Versions of Office...

April 26, 2022

11 comments

Dave M. February 28, 2019 - 9:30 am

The random password box popping up has been driving me insane for months and your fix worked, thanks! The trick was:

To disable this check, go to the registry key HKEY_CURRENT_USER\Software \Microsoft\Office\16.0\Outlook \AutoDiscover and create a DWORD parameter named ExcludeExplicitO365Endpoint and value 1. Restart Outlook.

Thank you!!

Reply
The Funky Tech Guy April 5, 2022 - 9:24 am

This worked for me like a damn charm. Thank you so much!!

Reply
King Otto June 19, 2019 - 9:53 pm

Alll above solutions did not work for me (May 2019 Windows Pro update, Office fully updated June 19th 2019).
However what worked for me was to set my default inbox to open Outlook with to my Windows account @outlook.com e-mail inbox instead of my default e-mail address (from my internet-provider). As soon as I set it back, I get prompted for my outlook.com e-mail password again… I think this is where the problem needs to be solved, let’s hope Microsoft will take a look at this.
Hope this willl help you guys and girls!

Reply
King Otto June 19, 2019 - 9:59 pm

Oh yeah by the way, you can set this in Outlook >>> Options >>> Advanced (options) >> Outlook startup and closing (translated from Dutch, sorry if it is not officialy exactly the same). Simply select the inbox of your microsoft e-mail account.
Best regards to y’all

Reply
serg November 19, 2019 - 5:07 am

There is a similar issue in Exchange 2019 CU3. MSFT say it will be fixed in the next CU.
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\AutoDiscover
DisableAutodiscoverV2Service to 1

Reply
glnz May 30, 2020 - 7:53 pm

Different issue but couldn’t find a way to email you, Mr. OS Hub.
I’m a normal “User” at my law firm, and my PC now has Win 10 Pro 64-bit and Office 2016 32-bit.
Each time my Admins repair, reinstall or upgrade my Office, I have a recurring problem opening attachments from Outlook email. When I double-click on an attachment in an email, Outlook always FIRST prompts me “Would you like to open the file or save it to your computer?”, and the option for “Always ask before opening this type of file” is checked but greyed out, so I cannot uncheck it. I don’t like being prompted.
To let me uncheck the “Always ask” option, my Admins must first give me Admin status rights, and only then can I uncheck “Always ask before opening this type of file”. That’s not so fast for them. Right now, one of my Admins had to spend more than an hour on this.
SO … is there any permanent setting or script they could run that would let me uncheck “Always ask before opening this type of file” without being an Admin myself?
Thanks.
And even though most of your articles are way above my skillset, I enjoy reading your website.
glnz

Reply
Tom Partridge January 29, 2021 - 1:33 pm

This one worked for mine. Thank you!
“Outlook: Disable Office 365 Autodiscover”

Reply
Ralph June 30, 2021 - 10:22 am

Just a quick note about my experience, as it had a bunch of consultants and Microsoft support scratching their heads for quite a while before we finally resolved it. Scenario was that all mailboxes were in O365, with a technically hybrid environment and on-prem AD. The hybrid part was an on-prem Exchange 2016 used for managing Exchange attributes that are not possible to change in EOL when your user accounts are synced from on-prem. What happened was the Exchange server had been updated to the latest CU a few weeks earlier and, over the weekend, had had Windows updates installed. The initial credential prompt only initially was reported as affecting Outlook 2013 users, which sent us down the incorrect rabbit hole of Modern Authentication and Office updates. What ended up being the case was that the IIS virtual directories used by Exchange had been corrupted by some combination of the CU update and Windows updates. I’m still not clear what the issue was there, but the CU had been installed for weeks and the Exchange setup logs and event viewer showed the system as having been rebooted as part of the setup, but Add/Remove Programs showed the install date as the date when the Windows updates were installed. In any case, the symptoms were the same as when the CU is installed without running as Administrator, presenting errors in the ECP, OWA and, most crucially, AutoDiscover virtual directories. Running the UpdateCas.ps1 script, followed by IISreset, fixed the problem.

Reply
Ian Clegg July 6, 2021 - 3:17 pm

Hello, don’t know if someone could help. We have Exchange 2016 on prem in hybrid mode. All users currently have their mailboxes on prem bar some test accounts. Users on Azure AD only devices are being prompted for a password when launching outlook. Do we need to have Modern authentication enabled on prem to prevent this password request?
Modern auth is enabled in azure but not on prem. Test mailboxes migrated to 365 also ask for a password but it is for the on prem public folder. Hoping to fix this as well.

Reply
Tom Stone July 28, 2021 - 11:46 pm

Cheers for this applying the Registry fix looks like it has solved the problem – funny thing is we have been on Office 365 connecting to a on prem 2016 Exchange system and never had this issue – it was only when we built and migrated to the on Prem Exchange 2019 system this started showing up – i was just about to start days of testing on different login methods to OWA and MAPI etc before I found this so thanks for saving me a wekends worth of work

Reply
Bart October 6, 2021 - 6:34 pm

Hi Tom Stone, do you also have alle mailboxes migrated to o365 and use outlook2016 that is continuesly asking to log in. Outlook shows the o365 login (not that onprem/legacy grey popup) but the same login screen that you’ll get when logging into o365 by a webbrowser.
We also have exchange2019 onprem for user management and experience the above.
Which fix are you referring to ?

Reply

Leave a Comment Cancel Reply

Categories

  • Active Directory
  • Group Policies
  • Exchange Server
  • Microsoft 365
  • Azure
  • Windows 11
  • Windows 10
  • Windows 7
  • Windows Server 2019
  • Windows Server 2016
  • Windows Server 2012 R2
  • PowerShell
  • VMWare
  • Hyper-V
  • MS Office

Recent Posts

  • Create Organizational Units (OU) Structure in Active Directory with PowerShell

    May 17, 2022
  • Windows Security Won’t Open or Shows a Blank Screen on Windows 10/ 11

    May 17, 2022
  • How to Manually Install Windows Updates from CAB and MSU Files?

    May 16, 2022
  • RDS and RemoteApp Performance Issues on Windows Server 2019/2016

    May 16, 2022
  • Deploying Software (MSI Packages) Using Group Policy

    May 12, 2022
  • Updating VMware ESXi Host from the Command Line

    May 11, 2022
  • Enable or Disable MFA for Users in Azure/Microsoft 365

    April 27, 2022
  • Fix: You’ll Need a New App to Open This Windows Defender Link

    April 27, 2022
  • How to Reset an Active Directory User Password with PowerShell and ADUC?

    April 27, 2022
  • How to Completely Uninstall Previous Versions of Office with Removal Scripts?

    April 26, 2022

Follow us

woshub.com

ad

  • Facebook
  • Twitter
  • RSS
Popular Posts
  • How to Install Only Specific Apps in Office 2016/Office 365?
  • How to Check Office 2019, 2016 and 365 License Activation Status?
  • Office 2019 Deployment Guide for Enterprise Using Deployment Tool
  • Read and Write Data to Excel File with PowerShell
  • Office 2016 vs. Office 365: Differences and Licensing
Footer Logo

@2014 - 2018 - Windows OS Hub. All about operating systems for sysadmins


Back To Top