Hi,
For your question, I want to confirm:
1. Does it works with a new mailbox?
2. Do you have try move problematic mailbox to other database?
3. Can you login ECP with problematic mailbox?
Please ensure "Do not require Kerberos preauthentication" option unchecked for problematic user in ADUC.
Also, try to disable OWA feature then enable it for testing:
Set-CASMailbox <Identity> -OWAEnabled $false/$true
Then, try to use Test-OWAConnectivity with problematic user credential to check test Outlook Web App connectivity:
https://technet.microsoft.com/en-us/library/aa997682%28v=exchg.141%29.aspx
If you can access ECP, please ensure you can configure all settings, especial Calendar folder.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.
Allen Wang
TechNet Community Support
