Outlook prompting creds from 1 user, username resolves incorrectly\inconsistently

Posted on 2014-02-27
Medium Priority
Last Modified: 2014-03-06
Got a weird one for you fine folks.  I have a single user who has recently started getting prompted for credentials when launching Outlook.  He is on Outlook 2013 but I can reproduce the problem on a different workstation with Outlook 2007.  The correct login format is domain\username, but when Outlook launches it's trying to use fullemailaddress@domain.com to authenticate.  Once he's supplied the correct credentials Outlook is happy for the remainder of the session until he reboots.  

I first cleared his credential store and created a new profile from the Mail snap-in.  I noticed that when entering his username and selecting 'check name', it resolves to fullemailaddress@domain.com.  This does not happen for any other user.  Where it gets weird is if I enter gibberish into the username field, it obviously fails....but when I enter his username again in the prompt which comes up following the 'name cannot be matched to a name in the address list' notice and then 'check name' it correctly resolves to his underlined domain username.  Afterward, using that profile, he's good until the following restart when Outlook again assumes the fullemailaddress@domain.com for authentication.

I've checked out the attribute editor and compared him against another staff member and haven't seen any obvious discrepancies.  Autodiscover tests are all successful and no other user has this problem.  This feels like a value got flipped and I'll have to use ADSIedit to correct it, but I don't know what to look for.  Suggestions?  Thanks!

Outlook 2013 (reproduced problem on Outlook 2007), Exchange 2007, Server 2008 (not R2) domain.
Question by:GS-Help
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 63

Accepted Solution

Simon Butler (Sembee) earned 1200 total points
ID: 39892446
Single user issues are rarely worth doing much with other than creating a new account.
The fact that Outlook pops up with the email address for authentication would suggest that Autodiscover is failing. As it is just one user and follows the user to another machine points at the account.

You could try moving the user to another database, or if you have multiple servers then another server would be even better. That could have the affect of cleaning up/resetting the account attributes.

However if that doesn't work, new account, forward the old one to the new one.


Author Comment

ID: 39892482
Thanks for the followup.  I didn't mention that it's the owner (of course) and redoing everything would be a significant timesink.  Single server, single database. Autodiscover looks just fine and tests successfully after he authenticates and as noted, no other users, old or newly created, have any problems whatsoever.  I'd rather fix the glitch.
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39892548
Doesn't really matter who it is, the fix is the same, because you could spend hours looking for a problem. It usually is a director/VP of some description with the problem, but my answer is always the same. I gave up thinking about the person's role in the business a long time ago and it allows me to resolve issues a lot quicker.

On Exchange 2007 and higher you can have multiple databases, so if you don't have another one, create it and move the user about.

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!


Author Comment

ID: 39892852
Not really a fix so much as a workaround, I don't want a single user hanging out in their own database just because.  I'll try creating a new database, moving the mailbox to that database, then back and report results.  I dislike bandaids.
LVL 11

Assisted Solution

hecgomrec earned 300 total points
ID: 39895315
Could you please try to make sure this machine is able to ping the desire server using DNS and IP.

Try checking if the DNS are set properly at client level (PC) and make sure you flush and re-register dns.

Also, check that in the accounts settings, more settings, security tab, the option "Always prompt for logon credentials" is not selected.
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39895707
That was pretty much what I was expecting.
Although it is best practise to have multiple databases, as it makes restores from backups much quicker. If a client has more than 30 users they get additional databases on my designs.


Author Comment

ID: 39909892
They have fewer than 30 users fwiw.  Mailbox move didn't change a thing and the client has declined to have any more time spent on the issue and will just live with it.  Thanks for trying.


The DNS settings are all fine, server and workstations are reachable from each other.  The key point here is that I can set up his account on other machines and get the same results, but if I do other users in the same location they have no problem.  It's definitely something specific to his account.  The prompting for credentials setting is not set but would also not be relevant as the problem is that Outlook insists on using the wrong credentials.  Some points all around for effort, thanks.

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
Outlook for dependable use in a very small business   This article is about using the Outlook application (part of Microsoft Office) in a very small business, or for homeowners where dependability and reliability are critical requirements. This …
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Suggested Courses
Course of the Month14 days, 6 hours left to enroll

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question