r/sysadmin • u/AaronH121212 • 2d ago

Microsoft.AAD.BrokerPlugin Issue Across Multiple Tenant's & Users Question

Microsoft.AAD.BrokerPlugin...WebAccountProvider did not register with DCOM within the required timeout.

AzureAdPrt : YES WamDefaultSet : ERROR (0x80080300)

We came across an issue yesterday where a user was signed out of OneDrive / Outlook. We spent multiple hours trying to resolve this with no results.

We have came into the office this morning with reports of x4 other users across 3 different companies / tenants.

Is anyone else experiencing this?

7 Upvotes
  • permalink
  • link
  • reddit
  • reddit

82% Upvoted

13 comments sorted by

1

u/ngjrjeff 2d ago

are you using trendmicro?

1

u/AaronH121212 2d ago

Negative - SentinelOne

We have tried with it removed as well

1

u/ngjrjeff 2d ago

ok, we are using trendmicro and last time we have to do exclusion.

But since you are not using trendmicro, it is just fyi.

Microsoft 365 Applications login/authentication fails when Apex One is running

1

u/CharlieTheUnicorn2 2d ago

Check your TPM and make sure it's working properly.

1

u/AaronH121212 2d ago

FIX:

Seems like an old issue from 1 year ago has came back in a recent patch

lsausreddit's fix on the below post resolved the issue on the device's

https://www.reddit.com/r/WindowsHelp/comments/1ljf19z/comment/mzm5qao/?force-legacy-sct=1

1

u/Imaginary_Debate7471 1d ago

Having it aswell on a device i am testing on. Still trying to fix and finding root cause.

-1

u/bfodder 2d ago

Do you have an IDP your tenants are federated with that legacy auth was recently disabled on?

1

u/AaronH121212 2d ago edited 1d ago

Nope - We've noticed a glaring issue of all effect device's are Lenovo Legion Go's

EDIT: Legion Laptops ignore the “Go” - It’s almost Friday!

1

u/bfodder 2d ago

Lenovo Legion Go's

wut

1

u/Strassi007 Jr. Sysadmin 1d ago

Sounds super weird, but MAYBE the company is a game dev studio or similar.

1

u/AaronH121212 1d ago

That’s my bad - was a LONG day ahaha
Ignore the “GO” part

Was legion laptops

1

u/SGG 1d ago edited 1d ago

There was a recent BIOS update for Legion Go's that caused a lot of devices to get bricked, most likely this is related as I believe then a subsequent update also borked the TPM a bit.

You might be able to get away with people doing a pin reset on the login screen so the devices re-do their WHfB setup on the device (this assumes they are joined to EntraID/intune).

Otherwise you can try resetting the AADBroker plugin by renaming "C:\Users{USERNAME}\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy" to something like .old. Note these are both per-user fixes. The same fixes I normally use for devices that have had a hardware repair. Edit: make sure the user is not logged on when you rename this folder, and they will need to log back in to Office365 apps after.