u/xipodu — reddlx

Hey hey everybody just calm down!

I can’t be the only one that feels like this about Patty, more useless than Dale. Every time she’s on screen she either freezes, makes things worse, or contributes almost nothing

u/xipodu — 1 day ago

▲ 1 r/Outlook

Outlook credential prompts Pincode, sometimes wrong user account

Has anyone seen intermittent Outlook credential prompts in a WHfB Cloud Kerberos Trust + on-prem Exchange + ADFS environment, especially where Outlook

sometimes appears to prompt for a Pin?
sometimes appears to prompt for a different account?

Some users occasionally get a credential prompt when starting or using Outlook. Closing and reopening Outlook often resolves the issue. It does not happen consistently,and we have not found a clear pattern yet

On the affected client, `klist` shows that the user can obtain a Kerberos TGT for the on-prem domain

klist output :

Microsoft Windows [Version 10.0.26200.8246]
C:\Users\affecteduser&gt;klist
Current LogonId is 0:0x1061e0
Cached Tickets: (1)
#0&gt;     Client: affecteduser @ CONTOSO.COM
        Server: krbtgt/CONTOSO.COM @ CONTOSO.COM
        KerbTicket Encryption Type: AES-256-CTS-HMAC-SHA1-96
        Ticket Flags 0x40810000 -&gt; forwardable renewable name_canonicalize
        Start Time: 4/24/2026 12:10:11 (local)
        End Time:   4/24/2026 22:10:09 (local)
        Renew Time: 5/1/2026 12:10:09 (local)
        Session Key Type: AES-256-CTS-HMAC-SHA1-96
        Cache Flags: 0x1 -&gt; PRIMARY
        Kdc Called: ad01.contoso.com
C:\Users\affecteduser&gt;

In one recent case, the prompt appeared to reference a different account than the Windows logged-on user, and that person has never logged in to that computer.

Does not matter if its on-prem or vpn

Environment:

Windows Hello for Business enabled
Cloud Kerberos Trust
On-premises Active Directory
Microsoft Entra ID / Entra Connect
ADFS
 -&gt; Authentication methods
 --&gt; Form Authentication
 --&gt; Windows Authentication
 --&gt; Certicate Authentication
 --&gt; Microsoft Passport Authentication

Outlook client

Exchange : On-premises Exchange, does NOT have a SPN ( HTTP/mail.contoso.com, HTTP/autodiscover.contoso.com
 ), dont know why. 
Our exchange guy says that is not needed.


Logs :
No logs has been found to this error in ADFS
No logs has been found to this error in [https://security.microsoft.com/Advanced](https://security.microsoft.com/Advanced) Hunting
No logs has been found to this error in Sign in logs Entra

Any practical troubleshooting tips or known pitfalls would be appreciated.

reddit.com

u/xipodu — 1 month ago

▲ 2 r/exchangeserver+1 crossposts