locked
ADAL (modern auth) does not want to load in Outlook 2013 RRS feed

  • Question

  • We installed a new WS 2016 with Office 2013, both are patched to latest versions. Exchange env is hybrid with modern auth enabled in O365. Now when a user with a cloud mailbox starts outlook on this machine they keep getting credential prompts because we have configured our ADFS to only allow modern auth and the user is prompted for a basic auth. So I had to look into why outlook was presenting a basic auth credential window instead of a modern auth one. When digging further by enabling TCOTrace it seems ADAL is not even loading at all when Outlook starts up. This is literally the very first thing that is logged:

    2018/11/14 15:31:56:738::[3416] IdentityLiblet::IsADALMinimumVersionInstalled ADAL.DLL version: 1.0.2019.909

    2018/11/14 15:31:56:784::[3416] IdentityLiblet:TryToEnableADAL not enabling ADAL

    2018/11/14 15:31:56:784::[3416] IdentityManager Offline Init (6AC80000)

    2018/11/14 15:31:56:784::[3416] IdentityManager: Initializing Profiles

    2018/11/14 15:31:56:784::[3416] LiveId service: is not using INT environment

    Notice the "TryToEnableADAL not enabling ADAL" line. However it does not mention at all why. The only place on the internet mentioning a similar issue is this video https://youtu.be/YtOufp8FN5Q?t=3980 . However in that video there is a convenient message mentioning an enabled reg key. However there is no such mention in the log file I have. Things tried

    • Office has been repaired

    • ADAL.dll also been copied over from a working machine to rule out corruption

    • EnableADAL reg key obviously was added

    • no restrictions to internet (for troubleshooting this machine has been opened to all traffic)

    • We also use hybrid AD join, the status is all fine and works fine when going to o365 for example

    • We also use hybrid AD join, the status is all fine and works fine when going to o365 for example

    Any other suggestions?

    Wednesday, November 14, 2018 4:15 PM

Answers

  • Well problem has been solved, basically the culprit was CSI.dll which was not the correct version. According to the following article: https://docs.microsoft.com/en-us/office365/admin/security-and-compliance/multi-factor-authentication-plan?view=o365-worldwide

    MSI-based installations

    For MSI-based installations, you must have the following software installed, at file version listed below or a later file version. If your file version is not equal to or greater than the file version listed, update it using the link in the Update KB Article column.

    File nameInstall path on your computerWhere to get the updateVersionMSO.DLLC:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSO.DLLKB308548015.0.4753.1001CSI.DLLC:\Program Files\Common Files\Microsoft Shared\OFFICE15\Csi.dllKB308550415.0.4753.1000Groove.exeC:\Program Files\Microsoft Office\Office15\GROOVE.EXEKB308550915.0.4763.1000Outlook.exeC:\Program Files\Microsoft Office\Office15\OUTLOOK.EXEKB308549515.0.4753.1002ADAL.DLLC:\Program Files\Common Files\Microsoft Shared\OFFICE15\ADAL.DLLKB30550001.0.2016.624Iexplore.exeC:\Program Files\Internet ExplorerMS14-052Not applicable

    How insane is it to patch Office to the latest build but not having all necessary dll files patched with it. Thanks Microsoft.

    • Marked as answer by Najib br Wednesday, November 14, 2018 6:35 PM
    Wednesday, November 14, 2018 6:34 PM

All replies

  • Well problem has been solved, basically the culprit was CSI.dll which was not the correct version. According to the following article: https://docs.microsoft.com/en-us/office365/admin/security-and-compliance/multi-factor-authentication-plan?view=o365-worldwide

    MSI-based installations

    For MSI-based installations, you must have the following software installed, at file version listed below or a later file version. If your file version is not equal to or greater than the file version listed, update it using the link in the Update KB Article column.

    File nameInstall path on your computerWhere to get the updateVersionMSO.DLLC:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSO.DLLKB308548015.0.4753.1001CSI.DLLC:\Program Files\Common Files\Microsoft Shared\OFFICE15\Csi.dllKB308550415.0.4753.1000Groove.exeC:\Program Files\Microsoft Office\Office15\GROOVE.EXEKB308550915.0.4763.1000Outlook.exeC:\Program Files\Microsoft Office\Office15\OUTLOOK.EXEKB308549515.0.4753.1002ADAL.DLLC:\Program Files\Common Files\Microsoft Shared\OFFICE15\ADAL.DLLKB30550001.0.2016.624Iexplore.exeC:\Program Files\Internet ExplorerMS14-052Not applicable

    How insane is it to patch Office to the latest build but not having all necessary dll files patched with it. Thanks Microsoft.

    • Marked as answer by Najib br Wednesday, November 14, 2018 6:35 PM
    Wednesday, November 14, 2018 6:34 PM
  • Good to hear that! Thank you for sharing the experience here.

    Regards,
    Steve Fan


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Thursday, November 15, 2018 9:00 AM