Office 2019 with fslogix and CVAD 2203 CU2 showes "Account repair" under options

[Jens Strohschnitter1709152492]

On every start of one of the office-products (published app or desktop) under options->office-account there is a message which says that all of our users have to repair my account.

(see attachment)

Everything works fine, office is activated and ms account is signed in. But what can I do to disable the repair message ?

 

We are running Server 2019 with Office 2019 (not Office 365) and fslogix (only for outlook).

[Jens Strohschnitter1709152492]

SOLVED:

 

With removing the hive on logon, the repair message does not occur anymore. Whatever the problem is, with this workaround it was solved

 

remove-item "HKCU:\Software\Microsoft\Office\16.0\Common\Identity" -force -recurse

[Ken Z]

Jons

 

do you have a redirections.xml file enabled?

 

regards

 

Ken Z

[Jens Strohschnitter1709152492]

Hello Ken,

 

thx for your reply. Nope there is no redirections.xml enabled. But we're using Citrix UPM and fslogix together. 

FSLogix only for Outlook (O365) and Citrix UPM for the profile itself.

 

Jens

[Jeff Riechers]

Make sure you have the updated admx and adml files for FSLogix loaded and ensure that Office Activation is stored in the FSLogix profile.

[Jens Strohschnitter1709152492]

Thx Jeff but we are still on 2.9.8228.50276 of fslogix with its current ADMX/ADML files. We do not have problems with office activation (it's correctly activated).

The only thing is, that the above message appears on every new start of Word/Excel/Outlook. There are no restrictions - everything works fine but still this message appears.

This message comes up since we have enabled Office signin in the GPO: "Block signing into Office" -> disabled.

 

[Ken Z]

Jons

 

I've assumed you've Googled that error message and tried all the obvious solution that were presented? e.g. https://www.minitool.com/news/there-are-problems-with-your-account.html

 

Regards

 

Ken Z

[Jens Strohschnitter1709152492]

Ken

 

I've seen this article and if I remove the whole regkey 

HKEY_CURRENT_USER > Software > Microsoft > Office > 16.0 > Common > Identity

And open Excel/Word/Outlook without logging off, the message disappears.

 

So I removed the key in the ntuser.dat of the user and logged in again. But still the message appears.

 

Strange - it must have something to do with the key and I think a GPO setting which creates the key. 

[Ken Z]

Jons

 

so have you tried creating a GPP (group policy preference) that deletes the key every time a user logs in?

 

Regards

 

Ken Z

[Jens Strohschnitter1709152492]

Ken

 

 

I`ve excluded the key via Citrix UPM - it seems that the root case is another application that uses Outlook-integration. Starting with a clean registry, the identity key is created after new logon.

 

So I will check out which of the apps on the system corrputs the key.

 

 Best regards

Jens

 

[Jens Strohschnitter1709152492]

Ken

 

We've checked out any app on the system without to be successfull. But what I've seen is, that a non multisession system (Windows 11 CDI) with same apps and GPOs  and also fslogix does not have the issue. Office account is correctly signed in and no account error occurs. Strange. Seems that this only happens multisession hosts (Server 2019 and 2022).

 

Jens

[Jeff Riechers]

Is office 2019 installed with MAK or KMS?  

 

If you check the UPM registry and the FSLogix store could these keys be stored in both locations?

 

This article goes into more detail.  Maybe setup a scheduled task to remove at logoff.

 

https://learn.microsoft.com/en-us/sharepoint/troubleshoot/security/problem-with-your-account

[Jens Strohschnitter1709152492]

@jeff riechers 

 

We use KMS for Office 2019.

 

FSLogix is only used for O365. No regkey settings are stored here.

 

For my understandings -  I think excluding the whole reghive "HKEY_CURRENT_USER > Software > Microsoft > Office > 16.0 > Common > Identity" on logon is the same as removing these two regkeys on logoff:

 

-HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity\[FederationCacheExpiration]

-HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity\[FederationProvider]

 

?

[Jens Strohschnitter1709152492]

I've now added an remove of the hive on logon - and now the account seems to be repaired and the message does not occur anymore. I will wait for feedback of our users but it looks good.

For whatever reason the key must completely removed ...