Home OSINT News Signals
CYBER

Microsoft Investigates Critical Synchronization and Connection Bugs in Classic Outlook Client

🕓 2 min read

Microsoft has launched an investigation into multiple critical issues plaguing its classic Outlook desktop client, which are causing significant email synchronization failures and connection problems for users. The company has acknowledged two primary bugs in a recently published support document. The first bug triggers persistent "Can't connect to the server" errors when users attempt to create groups within the classic Outlook client, specifically in environments where Exchange Web Services (EWS) is enabled for the tenant. According to Microsoft's diagnostics, the failure stems from an Azure Active Directory Graph API call (`ValidateUnifiedGroupProperties`) that is malfunctioning, returning an internal server error stating, "Both AAD and MSGraph clients are null or AAD Graph is disabled for this API." This indicates a breakdown in the communication between the legacy Outlook client and modern Microsoft Graph services, a common pain point in hybrid or transitioning IT environments.

In response, Microsoft's Outlook engineering team is actively developing an updated group management functionality that will utilize modern REST APIs instead of the deprecated AD Graph, aiming to resolve the underlying compatibility issue. Until this permanent fix is deployed, the company's official workaround advises affected administrators and users to create and edit distribution groups or Microsoft 365 groups exclusively through the new Outlook client (the web-view based successor) or via Outlook Web Access (OWA). This guidance effectively pushes organizations towards Microsoft's modern application ecosystem while a patch for the legacy software is in the works.

The second major issue under investigation involves synchronization errors with third-party email accounts, specifically Gmail and Yahoo, within the classic Outlook client. Users report encountering error codes `0x800CCC0F` and `0x80070057` after changing their account passwords. The core problem is that the classic client fails to prompt users for the new credentials, leaving the account in a disconnected state and halting all email sync. Microsoft has noted that password changes are a known trigger but is also investigating other, unspecified circumstances that could lead to the same authentication failure, suggesting a broader flaw in the client's credential management and renewal process for IMAP/POP accounts.

These ongoing issues with the classic Outlook client highlight the increasing challenges of maintaining legacy software within a rapidly evolving cloud and identity ecosystem. For enterprise cybersecurity and IT teams, such synchronization failures are not mere inconveniences; they can disrupt business communication, lead to data access gaps, and potentially force insecure workarounds. Microsoft's investigation and recommended migration to the new Outlook client underscore a strategic shift: encouraging users to abandon the older, feature-complete "classic" application in favor of the modern, service-tied client that receives continuous updates and security patches, thereby reducing the attack surface associated with outdated components.

Telegram X LinkedIn
Back to News