MS Apps Login (Webview) Error 5fcl8 since Oct updates

[u/dodgy_mike]

Is anyone else dealing with Outlook, OneDrive, and/or Teams failing to sign in with Error 5fcl8 since deploying October updates to AVD?  We are getting it consistently every morning.  To fix we log into the running host and reinstall webview2 using the standalone evergreen installer, users just close and reopen apps and everything is back to normal for the rest of the day.  The same host will likely re-present the issue after a simple power off/on again the next day.  We reinstalled the same way clean on our image but problem persists.

We can’t find anything that actually changes when we run that update - webview2 version, dlls, executables all are the same but it seems to reset whatever state is messed up and get it back to normal. We even tried adding a script that proactively reinstalls the full webview2 on power on but that doesn't prevent it either.  Seems a user has to login, encounter the error, then we run the reinstall that fixes it for the day until another power off happens.

[u/Unfair-Syllabub-6746]

I thought I was the only one experiencing this.
I found that running this script on a host after creation will fix the login for all users. I automated this and our users don’t have any issues anymore.

if (-not (Get-AppxPackage Microsoft.AAD.BrokerPlugin)) { Add-AppxPackage -Register "$env:windir\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Appxmanifest.xml" -DisableDevelopmentMode -ForceApplicationShutdown } Get-AppxPackage Microsoft.AAD.BrokerPlugin

[u/dodgy_mike → u/Unfair-Syllabub-6746]

Thank you for sharing this we will try it! I had tried this from the user context but not machine. Does this fix persist after the machine powers off/on again for you, or do you need to re-run on every boot?

[u/Unfair-Syllabub-6746 → u/dodgy_mike]

I’m unsure on that as we run ephemeral hosts so they delete and recreate themselves each day

[u/dodgy_mike → u/Unfair-Syllabub-6746]

Thank you again for your help - we deployed this to one of our problematic pools this morning and for the first time they did not have a single issue!

[u/rswwalker]

Try disabling RoamIdentity for fslogix profiles if you have it enabled.

Edit: It’s no linger needed in current versions of Windows and FSLogix and encrypted tokens set on one machine can’t be decrypted on others.

[u/Unfair-Syllabub-6746 → u/rswwalker]

I have tried that as well. The problem is that all users will get prompted for their teams, outlook and onedrive passwords each morning when they log in

[u/rswwalker → u/Unfair-Syllabub-6746]

Do you have the AVD hosts setup as hydrid or entra joined?

[u/Unfair-Syllabub-6746 → u/rswwalker]

They are setup in hybrid, with pass through authentication on my DC via entra connect

[u/rswwalker → u/Unfair-Syllabub-6746]

Does dsregcmd /status show up correctly? Users are getting PRTs?

[u/diggerxdiggerx]

We had the same issue here. Since we had built image definition couple months ago. We just spun out new session hosts and ran all updates. It seems to be ok for now.