Outlook prompts for password every morning on one laptop

MSP Toolkit
Practical troubleshooting paths for MSP technicians dealing with real-world support failures.
Submitted by Anonymous (not verified) on

Field Summary

Daily Outlook password prompts on one laptop usually mean that workstation is losing or rejecting an Office identity token. If OWA and another workstation work, focus on Credential Manager, Work or School account state, Office sign-in, Outlook profile/cache, and Conditional Access evidence for that device.

Common Symptoms

  • Prompt appears every morning, after reboot, or after network change.
  • OWA works immediately.
  • Same mailbox works on another PC.
  • Prompt may be legacy Windows credential box or modern auth dialog.
  • Other Office apps may show account warnings.

Fast Triage

  1. Confirm this is one laptop, not the user everywhere.
  2. Test OWA and another Office web app.
  3. Check Windows date/time, network, and VPN state at first login.
  4. Capture prompt type and timestamp.
  5. Check whether password, MFA, Office update, or device compliance changed recently.

Likely Causes

  • Stale ADAL/WAM token cache.
  • Old password saved in Credential Manager.
  • Duplicate or stale Work or School account.
  • Outlook profile or OST corruption.
  • Conditional Access/compliance requirement failing only on that device.
  • Office build/channel issue.

Useful Commands

outlook.exe /safe

Tier 1 Fix Path

  1. Update Office and reboot once if pending.
  2. Close Office apps and remove stale Microsoft/Office/Outlook credentials.
  3. Remove duplicate Work or School entries only when clearly stale.
  4. Sign into Word/Excel first, then Outlook.
  5. Use Outlook safe mode if add-ins are suspected.

Tier 2 / Admin Investigation

  1. Review Entra sign-in logs for morning failures and CA result.
  2. Check device compliance/registration if policies require it.
  3. Compare Office build/channel to a working laptop.
  4. Review Outlook connection status and Autodiscover if prompts pair with disconnects.
  5. Check profile health before rebuild.

Advanced Remediation

Create a new Outlook profile only after token and credential cleanup fails. Use session revocation when sign-in logs show stale token behavior. Full Office repair is for multi-app identity breakage, not a first response.

Verification

  • Outlook opens after reboot without prompting.
  • Mail sends/receives and calendar syncs.
  • Entra logs show successful authentication from that laptop.
  • User confirms next-morning behavior if this was recurring.

Ticket Notes to Capture

  • Laptop, user, Office build, prompt type, OWA result, Entra result, credentials removed, Work/School account state, profile action, next-day verification.

Escalate When

  • CA/compliance policy blocks the device.
  • Multiple laptops begin prompting after tenant policy change.
  • New profile and token cleanup fail repeatedly.
  • Entra logs show risk or authentication failures beyond helpdesk scope.

Prevention

Standardize password-reset aftercare: OWA test, Office account check, Credential Manager cleanup, Work or School review, and sign-in log check before profile rebuild.

Subjects
Microsoft 365
Outlook