Ok, not certain yet but think it was the proxyaddresses problem. Unsure why it is not causing the same problem with everyone but I have just run a test with a fake Y7 account. Nothing in proxyaddresses, reset password using AD, couldn't logon to OWA, added email address to proxy addresses, allowed me to logon with new password. Further testing required but feels like progress!!