Using classic Outlook for Windows in business environments
Please let your developers know that the people with 2FA/MFA setup are also having the issue.
Based on experiments over the last few days, I think there are multitude of issues at play:
- Possible authentication/security related issue on the server-side - it sounds like the team has improved or at least they thought they fixed the issue.
- Code changes related to 1) has not propagated to all servers and it has been several days, so one would expect those code changes should have reach all the key servers.
- Still possible issues related to IP address changes. I have noticed an increase in password prompts when I transition from 1 IP address to another. Scenario is:
a) leave office (one IP address) and transition to different IP on the mobile network - this surely will cause prompt(s)
b) enter hotel and transition from mobile network to another IP address of the hotel's - this will likely cause the prompt(s)
c) hotel WiFi may disconnect, so the device momentarily fallback to mobile network - this could cause prompts.
In my case, office IP address and hotel IP address are the same, so I do not see the security risk here. I also not introducing new devices onto my account, so the known/assigned UUID to the device should provide some level of assurance. Competing platform does not have such issue with their email accounts. And to be blunt, this seems like a design issue not to factor into consideration of these very likely network transitions.
In short, either the fix has not reached all servers or the fix still have weaknesses against real-world scenarios.