Microsoft 365 Apps activation network connection issues
This article will help you troubleshoot network connection issues when activating Microsoft 365 apps. When you’re having network connection issues, you might encounter an error such as the following example:
We’re having trouble activating Office.
Try the following troubleshooting methods to solve the problem.
Note Some of these troubleshooting methods can only be performed by a Microsoft 365 admin. If you aren’t an admin, see How do I find my Microsoft 365 admin?
Activating Microsoft 365 on Windows 8.1 or earlier
To activate Microsoft 365 Apps, TLS 1.2 must be enabled on the operating system. Some older operating systems, such as Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012, require an update to enable TLS 1.2 by default.
Important Running Microsoft 365 Apps on these older operating systems isn’t supported. For more information, see End of support resources for Office.
- If you are running Windows 7 or Windows Server 2008, make sure that Service Pack 1 is installed.
- Enable TLS 1.2 as the default protocol by using this easy fix, and then restart the device.
- From Start, select Control Panel >Internet options >Advanced settings.
- If TLS 1.2 isn’t checked, check it, then select Apply and OK.
- Restart the device, and then try activating Microsoft 365 again.
- From Start, type check for updates, and select Check for updates from the search results.
- Select Check for updates.
- Download and install available updates.
- Restart the device and try to activate Microsoft 365 again.
Are you behind a proxy server? If you’re not sure, ask your administrator. If so, you (or your administrator) might have to change the proxy settings for Windows HTTP clients. To do this, follow these steps:
- Open a Command Prompt window as an administrator. From Start, type cmd.exe in the search box, right-click Command Prompt in the list, and then select Run as administrator.
- Type netsh winhttp set proxy , and then press Enter.
You need to allow the URLs and IP addresses in this list.
You can also allow Microsoft 365 to bypass the proxy server by creating a PAC file. For more information about creating a PAC file, see Managing Microsoft 365 endpoints.
Check whether you’re behind a firewall
Are you behind a firewall? If you’re not sure, ask your administrator. If you’re behind a firewall, it might have to be configured to enable access to the following URLs:
- officecdn.microsoft.com
- ols.officeapps.live.com/olsc
- activation.sls.microsoft.com
- odc.officeapps.live.com
- crl.microsoft.com/pki/crl/products/MicrosoftProductSecureServer.crl
- crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl
- crl.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl
- www.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl
- go.microsoft.com
- Office15client.microsoft.com
- login.windows.net
- login.microsoft.com
- login.microsoftonline.com
- crl.microsoft.com
- cdn.odc.officeapps.live.com
- ajax.aspnetcdn.com
- officeclient.microsoft.com
- aadcdn.msauth.net
- aadcdn.msauthimages.net
- enterpriseregistration.windows.net
Each firewall will have a different method to enable access to these URIs. Check your software’s documentation for instructions or ask your administrator to do this for you.
For more information about Microsoft 365 Apps for enterprise URLs and IP addresses, see Microsoft 365 URLs and IP address ranges.
Check BrokerPlugin process
Some antivirus, proxy, or firewall software might block the following plug-in process:
Temporarily disable your antivirus software. Contact your system administrator to find out if you are behind a proxy or firewall that is blocking this process. If so, you will also need to temporarily disable your proxy or firewall connection. If you connect through a Virtual Private Network (VPN), you might need to temporarily disable your VPN also.
If the process isn’t blocked, but you still can’t activate Microsoft 365, delete your BrokerPlugin data and then reinstall it using the following steps:
- Open File Explorer, and put the following location in the address bar:
%LOCALAPPDATA%\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\AC\TokenBroker\Accounts - Press CTRL + A to select all.
- Right-click in the selected files and choose Delete.
- Put the following location in the File Explorer address bar:
%LOCALAPPDATA%\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AC\TokenBroker\Accounts - Select all files and delete them.
- Restart the device.
- Download and run the SaRA package for sign in issues.
Check external DNS for incorrect CNAME records
Check your external DNS for an MSOID CNAME record that points to clientconfig.partner.microsoftonline-p.net.cn .
This CNAME record is required only for customers who use Microsoft 365 that’s operated by 21Vianet. 21Vianet is a service that’s available in China. If this CNAME record is present, and your Microsoft 365 service is not operated by 21Vianet, users on your custom domain will receive a «custom domain isn’t in our system» error message. Because of this error, users won’t be able to activate their Microsoft 365 apps license. If you find this CNAME record, delete it, and wait for DNS replication to update the DNS record.
- Right-click the network icon in the System Tray.
- Select Open Network & Internet Settings.
- Select Change adapter options.
- Right-click your network connection, and then select Properties.
- Uncheck Internet Protocol version 6.
- Try to activate Microsoft 365 again.
- Re-enable IPv6.
- From Start, type services.msc , and then select the Services app.
- Make sure that the following services are all running:
- Network Connected Devices Auto-Setup
- Network List Service
- Network Location Awareness
- Windows Event Log
- If any of these services is not running, right-click the service and select Start.
- If you have a problem starting the service, run the System File Checker using the following steps:
- From Start, type cmd. Right-click Command Prompt in the search results and select Run as administrator.
- At the command prompt, type sfc /scannow
- When the scan completes, restart the device.
The Network Connectivity Status Indicator (NCSI) is an OS feature that determines whether access to the Internet is available.
Check if NCSI is registering your internet connection using the following steps:
- From Start, type powershell , and then select Windows PowerShell from the search results.
- At the command prompt, type the following command, and then press Enter:
Get-NetConnectionProfile - If IPv4Connectivity says Internet, it suggests NCSI is registering your internet connection correctly. If it says NoTraffic or LocalNetwork, it is not.
- If you aren’t behind a proxy, type the following command and then press Enter:
nslookup dns.msftncsi.com . - If the address resolves, it suggests NCSI is registering your internet connection correctly.
- Check HTTP Probe destinations by opening your browser and putting the following URLs in your address bar:
- For Windows 10 version 1607 or later, http://www.msftconnecttest.com/connecttest.txt and http://ipv6.msftconnecttest.com/connecttest.txt should return Microsoft Connect Test.
- For Windows 10 version 1511 or earlier, http://www.msftncsi.com/ncsi.txt and http://ipv6.msftncsi.com/ncsi.txt should return Microsoft NCSI.
If NCSI isn’t registering your internet connection, try setting it to use GlobalDNS using the following steps:
- From Start, type regedit, and then select Registry Editor from the results.
- Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows\NetworkConnectivityStatusIndicator .
- Right-click the registry value and select New, then select DWORD.
- Name the DWORD UseGlobalDNS , and set the value to 1.
- Try activating Microsoft 365 again.
Important Before editing the registry, it’s strongly recommended that you back up the registry. For instructions, see How to back up and restore the registry in Windows.
- From Start, type regedit, and then select Registry Editor from the results.
- Navigate to HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/ CurrentVersion/Internet Settings/Connections .
- Right-click Connections, and select Rename.
- Rename Connections to Connections.old.
- Restart the device and try activating Microsoft 365 again.
Important Before editing the registry, it’s strongly recommended that you back up the registry. For instructions, see How to back up and restore the registry in Windows.
- From Start, type regedit, and then select Registry Editor from the results.
- Navigate to HKEY_USERS/S-1-5-20 .
- Right-click the registry value and select Permissions.
- If NETWORK SERVICE is listed, select it. Make sure that Full Control and Read are checked.
- If NETWORK SERVICE isn’t listed:
- Select Add.
- In the field labeled Enter the object names to select, type network service.
- Select Check names. When the service is found, select OK.
- Make sure that Full Control and Read are checked, and then select Apply and then OK.
- Open a Command Prompt window as an administrator. From Start, type cmd.exe in the search box, right-click Command Prompt in the list, and then select Run as administrator.
- Type netsh int ip reset , and then press Enter.
- Type netsh winsock reset , and then press Enter.
- Restart the device.
- Try to activate Microsoft 365 again.
Important Resetting Edge settings might cause certain webpages that rely on custom settings to not work properly.
- Open Edge and select the three dots at the top.
- Select Settings.
- Select Reset settings, and then Restore settings to their default values.
- After the process completes, close Edge and try to activate again.
- From Start, type regedit, and then select Registry Editor from the results.
- Navigate to HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com .
- Delete all subfolders of officeclient.microsoft.com .
- Restart the device and try to activate again.
To do so, follow the steps in Disabling security defaults.
Fix Outlook connection problems for Microsoft 365 account
If you’re using Outlook to access your Microsoft 365 email account or another Exchange-based email account, and you’re having problems, we want to get you back to sending and receiving email as quickly as possible.
If you’re looking for help with Outlook.com, check Get help with Outlook.com. If you’re looking for help with Outlook for Mac, check Outlook for Mac Help.
Let us fix your Outlook connection problems for you
We can diagnose and fix several common Outlook connectivity issues for you. If our automated tool can’t fix your issue, or you’d like to fix it yourself, see the next section.
Let us fix your issue Support and Recovery Assistant for Microsoft 365 Need more help? Contact support for business products — Admin Help Fix software update and profile issues
Out-of-date software and corrupted Outlook profiles are two of the most common issues that can prevent you from sending and receiving email. If you’re an admin with multiple users reporting problems, you also should check for service issues with Microsoft 365.
Common Outlook fixes
