Event ID 1014 when users try to connect to their Exchange Online mailbox
Original KB number: 3154531
Symptoms
When users try to access their Exchange Online mailbox in Microsoft Outlook or Outlook on the web (formerly known as Outlook Web App), event ID 1014 is logged multiple times in the System log in Event Viewer:
Cause
This issue may occur if the request was blocked by third-party malware or an Internet protection suite. The time to live (TTL) on the outlook.office365.com
DNS record is five minutes. Therefore, Windows refreshes the record at an interval of five minutes. Third-party malware and Internet protection suites have been found to block the request at this frequency, which prevents users from using Outlook or Outlook on the web to connect to their Exchange Online mailbox.
Resolution
Work with your third-party vendor to set up exclusions for the outlook.office365.com
DNS record.
More information
Still need help? Go to Microsoft Community.
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for