If an administrator has reset a user's local Windows password, Outlook, Teams, OneDrive and other Microsoft 365 apps may repeatedly ask them to sign in.
Disconnecting and re-adding the work account will usually fix the problem.
An administrator password reset can prevent Windows from decrypting the user's saved credentials using the Data Protection API (DPAPI). As a result, the cached Microsoft 365 sign-in details no longer work.
This applies to computers using a local Windows account with a work account added under Access work or school. It does not apply to computers joined directly to Microsoft Entra ID.
-
Close all Microsoft 365 apps.
-
Go to Settings > Accounts > Access work or school.
-
Select the affected work account and click Disconnect.
-
Restart the computer.
-
Open Outlook and sign in using the user's Microsoft 365 account, completing multi-factor authentication if prompted.
-
When asked whether to allow the organisation to manage the device, click OK to register the work account again.
The other Microsoft 365 apps should then sign in automatically.