![\"\"](\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2023\/04\/error.jpg\")
<\/p>\nSome time ago, one of my customers had the problem that after his environment was migrated to the cloud (hybrid with Microsoft 365), some users had sporadic logon problems with Microsoft 365 services.<\/p>\n
The phenomena can be described as follows:
\nUsers can log on to Microsoft 365 Services via the browser without any problems (everything is ok).
\nSSO partially does not work
\nUsers lose their logon in Office applications such as Word, Outlook or Teams.
\nRe-logon in the Office products has to be repeated several times
\nRe-logon does not always work directly (user gets an error message)<\/p>\n
Some of the users have also received the following message during re-logon:<\/p>\n
<\/p>\n
It was also interesting that only a handful of people were affected.<\/p>\n
\u00a0<\/p>\n
I had done a deeper analysis of the possible synchronization problems on different levels. The customer had configured the Azure AD Connect as hash sync.
\nAfter a deeper look in the Event Viewer, I noticed that there was a problem with the Session Broker.<\/p>\n
One of the solutions was to reload the Session Broker plugin for the affected clients. (This can be done with the following command):<\/p>\n
if (-not (Get-AppxPackage Microsoft.AAD.BrokerPlugin)) { Add-AppxPackage -Register \"$env:windir\\SystemApps\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Appxmanifest.xml\" -DisableDevelopmentMode -ForceApplicationShutdown } Get-AppxPackage Microsoft.AAD.BrokerPlugin<\/pre>\nHowever, this only really helped one user, and only temporarily. Therefore, I had to continue my analysis and was able to find the right solution.<\/p>\n
The problem was the Anti Virus Client (in this case the product from Trendmicro). After I had carried out the following points, the problem was finally solved:<\/p>\n
\u00a0<\/p>\n
Go to SECURITY AGENTS > go to the specific group where the issue occurs<\/p>\n
\u00a0<\/p>\n
I. Under Real-Time Scan \/ Scheduled Scan \/ Manual Scan> click +Add<\/strong><\/p>\nAdd the following directories in the Folders tab:<\/p>\n
C:\\Users\\*\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy*<\/p>\n
C:\\Windows\\SystemApps\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy*<\/p>\n
Add the following directories in the Files tab:<\/p>\n
C:\\Windows\\SystemApps\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin.exe<\/p>\n
\u00a0<\/p>\n
II. Add the following Under the Behavior Monitoring Approved List:<\/strong><\/p>\nC:\\Windows\\SystemApps\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin.exe<\/p>\n
C:\\Users\\*\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy*<\/p>\n
\u00a0<\/p>\n
III. Add the following files below for Trusted Program List:<\/strong><\/p>\nGo to Policies> Policy Management> Global Security Agent Settings> Trusted Program List > Add+<\/p>\n
C:\\Windows\\SystemApps\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin.exe<\/p>\n","protected":false},"excerpt":{"rendered":"
Some time ago, one of my customers had the problem that after his environment was migrated to the cloud (hybrid with Microsoft 365), some users had sporadic logon problems with Microsoft 365 services. The phenomena can be described as follows: Users can log on to Microsoft 365 Services via the browser without any problems (everything […]<\/p>\n","protected":false},"author":1,"featured_media":5121,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[685,1923],"tags":[],"class_list":["post-5115","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-active-directory","category-microsoft-365"],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/5115","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5115"}],"version-history":[{"count":4,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/5115\/revisions"}],"predecessor-version":[{"id":5120,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/5115\/revisions\/5120"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/media\/5121"}],"wp:attachment":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5115"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5115"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5115"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}