I have quite a few machines where after launching Outlook and trying to authenticate, they get a "something went wrong" error that Trusted Platform Module has malfunctioned, error code 80090016. The server message is "Keyset does not
exist Keyset does not exist".
If different users log in on the same computers, their Outlooks functions properly. So I assume it's something just in those users' profiles, but I'd prefer not to delete the users' profiles if there is a fix that could be done to each instead.
Anyone know how to fix this without completely deleting the user profile off the machine?
Here's the output of dsregcmd /status from a profile with the TPM error
+----------------------------------------------------------------------+
| Device State
|
+----------------------------------------------------------------------+
AzureAdJoined : NO
EnterpriseJoined : NO
DomainJoined : YES
DomainName : MyDomainIsHere
+----------------------------------------------------------------------+
| User State
|
+----------------------------------------------------------------------+
NgcSet : NO
WorkplaceJoined : NO
WamDefaultSet : ERROR
+----------------------------------------------------------------------+
| SSO State
|
+----------------------------------------------------------------------+
AzureAdPrt : NO
AzureAdPrtAuthority : NO
EnterprisePrt : NO
EnterprisePrtAuthority : NO
+----------------------------------------------------------------------+
| Diagnostic Data
|
+----------------------------------------------------------------------+
Diagnostics Reference : www.microsoft.com/aadjerrors
User Context : SYSTEM
Client Time : 2019-03-22 14:29:39.000 UTC
AD Connectivity Test : PASS
AD Configuration Test : FAIL [0x80070002]
DRS Discovery Test : SKIPPED
DRS Connectivity Test : SKIPPED
Token acquisition Test : SKIPPED
Fallback to Sync-Join : ENABLED
Previous Registration : 2019-03-22 14:29:04.000 UTC
Error Phase : discover
Client ErrorCode : 0x801c001d
+----------------------------------------------------------------------+
| Ngc Prerequisite Check
|
+----------------------------------------------------------------------+
IsDeviceJoined : NO
IsUserAzureAD : NO
PolicyEnabled : NO
PostLogonEnabled : YES
DeviceEligible : YES
SessionIsNotRemote : YES
CertEnrollment : none
PreReqResult : WillNotProvision
But here is the output from the same machine but under a new user profile for another user (I put stars where there was data I didn't feel appropriate to share publicly)
+----------------------------------------------------------------------+
| Device State
|
+----------------------------------------------------------------------+
AzureAdJoined : NO
EnterpriseJoined : NO
DomainJoined : YES
DomainName : MyDomainIsHere
+----------------------------------------------------------------------+
| User State
|
+----------------------------------------------------------------------+
NgcSet : NO
WorkplaceJoined : YES
WorkAccountCount : 1
WamDefaultSet : NO
+----------------------------------------------------------------------+
| SSO State
|
+----------------------------------------------------------------------+
AzureAdPrt : NO
AzureAdPrtAuthority : NO
EnterprisePrt : NO
EnterprisePrtAuthority : NO
+----------------------------------------------------------------------+
| Work Account 1
|
+----------------------------------------------------------------------+
WorkplaceDeviceId : *****************************
WorkplaceThumbprint : *****************************
WorkplaceIdp : login.windows.net
WorkplaceTenantId : *****************************
WorkplaceTenantName : *****************************
WorkplaceMdmUrl : https://wip.mam.manage.microsoft.com/Enroll
WorkplaceSettingsUrl :
NgcSet : NO