Error code 80090016 Trusted Platform Module has malfunctioned.

Open Regedit.MSC with administrator account and navigate to :

HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb

Afterwards create DWORD (32-bit) Value Key

Rename it with : ProtectionPolicy  and set value to 1

Afterwards try to open affected 365 App it should force it log in page and enroll again. 

At this stage Outlook,OneDriveshould work as expected.

After researching this for a while - and finally trying out this solution... it was... actually a solution! Thumbs up! Thanks!

So as an update to my last post... 

I had already cleared Credential Manager & cleared the TPM which resolved the issue until the laptop restarted. 

The AAD Broker Plugin fix didn't work for me sadly.  Tried the following regkeys that I found during my searches into this issue but none of them worked;

HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb ProtectionPolicy =1

HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity DisableAADWAM=1

HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity DisableADALatopWAMOverride=1

I tried them each individually and restarted between each one, but no joy.

I checked the HP Update Assistant and all updates from there were already applied.

I then applied the latest Windows Updates which were

KB4580364 - Cumulative update

Connexant Audio

I also did a search for optional Windows Updates and there was a HP firmware one (I didn't note the name of this update to put it on here I'm afraid) so I decided to apply that one too because I'm convinced it's the TPM chip on these HPs that are not compatible with 2004 in my case. 

After a restart, Outlook, OneDrive & all other office apps logged straight in as expected.  The user needed to get onto their machine after letting me work on it for so long, so I didn't get to test restarting again to see if I could 'break it' again! So I'm waiting to hear back from them tomorrow, but fingers crossed this has fixed it - it's certainly the best it's been since 2004 was applied.

I really hope MS admit this is a widespread issue & get to the bottom of this one ASAP and publish a proper fix.  Good luck everyone (I might be back tomorrow of course!)

Hi,

           For me, it worked after doing these steps-

Go to control panel

Open user accounts

Select your account and click on properties

Now just toggle between radio button (your current selected radio button to some other and again to you original)

Click apply then ok

It will ask for sign-out do it. After re-login windows, everything worked me as before, normal signing procedure for outlook and allowing device management to organisation and all working fine

I am facing same issue ... still no resolution. Any more solution on this. Not sure if I need to change my computer as this is TPM related issue.

Hi Anna,

Thank you for your reply. Unfortunately, it didn't work.  I used the recovery assistant and it created a new outlook profile. I wanted another Office 365 email added with my other 2. With the new profile, it creates a lot of extra steps to check that email.  When I tried to manually add the email again, I got the same error.

Another part of my question is about the "Work or school account" that was created.  I'm getting this annoying pop up asking me to log into my "Work or school account" and it keeps coming back even after putting in the password.

Do you know what will happen when I remove my “work account” and leave my Microsoft account?