[ms office - o365] 365 apps SSO

[ryanplym]

Hi

 

We are having a strange issue, in our computer labs, when a student signs into windows and clicks on, for example, Microsoft Word, it prompts them to sign in although Teams logs in automatically, edge/chrome logs them in but none of the installed apps. OneDrive is also prompting them to sign in.

 

I have changed the following:

 

Administrative Templates/Microsoft Office 2016/Subscription Activation/Automatically activate Office with federated organization credentials

 

Enabled

 

User Configuration\Preferences\Windows Settings\Registry

Key Path: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoftazuread-sso.com\autologon

Value Name: https

Value Type: REG_DWORD

Value Data: 0x1 (1)

 

Key Path: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\windows.net.nsatc.net\aadg

Value Name: https

Value Type: REG_DWORD

Value Data: 0x1 (1)

 

User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone\Allow updates to status bar via script

Enabled

 

 

One of the IT teachers had a observation this morning which did not go down well at all. I am not sure what else to do. I have used delprof to remove any profiles on the machine, did gpupdate /force, ensured the policy was enabled

 

Any help or support is very much appreciated

 

Thanks

[Olliedawg]

Are your devices Azure AD Hybrid?

 

I have a computer GPO set to silently sign into OneDrive, seems to work well

 

"Computer Configuration/Administrative Templates/OneDrive/Silently sign in users to the OneDrive sync app with their Windows credentials"

 

I'm not sure if this also signs them into Teams/Office.. ours just seems to work. Same with Edge sign in, I have a GPO set to sign them into edge also.

[ryanplym]

Hi

Thanks for your reply, I just checked and this has been enabled. Thanks for the suggestion

 

[ryanplym]

Do you have this policy enabled in your computers OU or users OU? I have mine enabled in both. I wonder if this might be the cause?