Fix Outlook and OneDrive Errors After Changing a User UPN Domain
Question details
Resolve Outlook and OneDrive sign-in and synchronization errors that occur after changing a synchronized user's UPN and SMTP address to a new domain in Microsoft 365.
- Product
- Microsoft 365 Outlook and OneDrive
- Device & OS
- not provided
- Scenario
- An administrator changed a synchronized user's UPN and SMTP address to a new domain. New accounts work, but older synchronized accounts fail to sign in.
- Observed behavior
- Outlook error 801C0003, OneDrive error 0x8004DE40, and Microsoft 365 application sign-in failures after the UPN domain change.
Confirm that the new domain is verified in the Microsoft 365 admin center, not only in local DNS, and make sure you have access to Microsoft Entra ID or Azure AD Connect to check synchronization status.
Verify the New Domain and UPN Synchronization in Microsoft 365
Use this solution first to confirm the new domain is valid in Microsoft 365 and the affected user's UPN has synchronized correctly.
Outlook error 801C0003 and OneDrive error 0x8004DE40 often indicate an Azure AD authorization failure. A domain that only exists in local DNS is not enough; it must be a verified domain in Microsoft 365 and the changed UPN must reach Microsoft Entra ID.
Sign in to the Microsoft 365 admin center, go to Settings > Domains, and confirm the new domain shows a Healthy or Verified status.
Go to Users > Active users, open the affected user account, and verify that the username or UPN field shows the new domain instead of the old domain.
If the UPN is still outdated on the Azure AD Connect server, open PowerShell and run Start-ADSyncSyncCycle -PolicyType Delta, then wait a few minutes.
Open the Microsoft Entra admin center, find the user, and check the directory sync status and sign-in logs for authorization failures.
Check Azure AD Connect Synchronization and Active Directory Replication
Use this solution if the first checks pass but older synchronized accounts still cannot be changed to the new domain.
Use WPS Office as a Lightweight Alternative When Microsoft 365 UPN Domain Errors Block Outlook and OneDrive
If Microsoft 365 identity and domain errors keep interrupting Outlook and OneDrive, WPS Office provides a free, lightweight way to open, edit, and share documents with full Microsoft Office compatibility, a familiar ribbon UI, and no dependency on Microsoft 365 authentication for local file work.
- 1. Download WPS Office: Go to the official WPS Office website and click Download WPS Office Free to get the installer.
- 2. Install and launch WPS Office: Run the installer, follow the on-screen setup steps, and open WPS Office on your Windows, macOS, Linux, Android, or iOS device.
- 3. Open or create a document: Use WPS Writer, WPS Spreadsheet, or WPS Presentation to open existing Microsoft Office files or create new ones without Microsoft 365 sign-in.
Frequently Asked Questions
Why does Outlook show error 801C0003 after a UPN domain change?
Error 801C0003 usually indicates an Azure AD authorization failure. Confirm the new domain is verified in the Microsoft 365 admin center, check that the user's UPN has synchronized to Microsoft Entra ID, and run Start-ADSyncSyncCycle -PolicyType Delta if necessary.
Why do only older synchronized accounts fail after the domain change?
New accounts may be created directly in Microsoft 365 and receive the new domain immediately, while older synchronized accounts still have stale UPN or proxy address values from on-premises Active Directory. Check the user in Microsoft Entra ID and force an Azure AD Connect delta sync.
How can I force Azure AD Connect to synchronize a changed UPN?
On the Azure AD Connect server, open PowerShell and run Start-ADSyncSyncCycle -PolicyType Delta. You can also run repadmin /syncall /APeD on a domain controller to force Active Directory replication first.
Does WPS Office fix Microsoft 365 domain or Entra ID sign-in errors?
No, WPS Office cannot change Microsoft 365 tenant identity settings or fix Outlook and OneDrive Azure AD authorization errors. However, WPS Office can open, edit, and save Microsoft Office documents locally without requiring Microsoft 365 authentication.
What should I check if OneDrive shows 0x8004DE40 after a UPN change?
Check that the new domain is verified in Microsoft 365, the affected user's UPN is updated in Microsoft Entra ID, and the account is not blocked from sign-in. This error is often related to sign-in or authorization state after domain changes.
