Office 365 on premise RemoteApp issue "your account has problems. To fix them, log in again."

Question

Hello,

We are encountering a problem with the connection of Microsoft accounts of Office 365 users in RemoteApp on a virtualized RDS server farm on a private VMWare infrastructure.
Microsoft account login and license activation works fine.
The problem occurs when you change server and open an Office application (for example Excel) the system puts a yellow warning flag on the login with the following error:
"Your account has problems. To fix them, log in again."

The only solution that we have found for the moment is indeed to re-enter the Microsoft account login credentials once on each server (reconnect the account) but this is not possible in production because we have a farm of 8 servers and +300 users so we are not going to reconnect the accounts 1 to 1 by hand...

By following these links which somewhat resemble our problem:
https://learn.microsoft.com/en-us/answers/questions/712916/o365-apps-keeps-asking-to-sign-in-every-day-in-rds.html
https://learn.microsoft.com/en-us/answers/questions/712916/o365-apps-keeps-asking-to-sign-in-every-day-in-rds.html

I created a GPO that adds this value to the registry:
[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity "DisableAADWAM"=dword:00000001

This allows you to select the local AD account in the application [mylocaldomain.fr], and when you select the account manually, the warning disappears (normal because it's the local AD account)

but again we're not going to do that for all users on all servers...

we don't want to venture into synchronizing our AD with Azure for security/privacy reasons.

We want either to be able to ensure that the Microsoft account (mydomain**.com**) reconnects correctly when changing servers, which would obviously be ideal, or to disable connections once the license is activated.

NB: we use roaming profiles with folder redirection
We specify by GPO the location of the Office license token on a network share where we store the appdata, desktop etc...

The RDS server farm is in Windows Server 2019 Datacenter.
The AD is in Windows Server 2012R2.

Answer 1

Hi @CBOIN ,
Did you use the Single sign-on?
Did you use the shared activation mode for Office 365?
I suggest you go to Credential Manager- Windows Credentials to remove credentials related to Microsoft 365.
Then go to Registry Editor, locate to Computer\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity\Identities, delete Identities registry to reset it.
Serious problems might occur if you modify the registry incorrectly. Before you modify it, please remember to back up the registry for restoration in case problems occur.
Here is an article about how to back up and restore the registry in Windows: https://support.microsoft.com/en-us/topic/how-to-back-up-and-restore-the-registry-in-windows-855140ad-e318-2a13-2829-d428a2ab0692

Here is the similar problem thread, you may get any information from it:
https://answers.microsoft.com/en-us/msoffice/forum/all/office-365-on-rds-keeps-asking-users-to-activate/6f10a9b6-8f45-4062-a05b-217f87cb6b23

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

My solution to this problem was to exclude the Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy folder, i think i dont have to exclude all the subofolders, but for know its working. Its easy to test, take a copy of the Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy folder when office is working, when the activation problem shows up, close all office app and copy back the folder and start some office app.

<?xml version="1.0" encoding="UTF-8"?>
<FrxProfileFolderRedirection ExcludeCommonFolders="0">
<Excludes>
<Exclude Copy="3">AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy</Exclude>
</Excludes>
<Includes>
</Includes>
</FrxProfileFolderRedirection>