OneDrive for Business 0x8004de40 sign-in error keeps returning for help desk teams: Fix Guide

Help desk teams supporting OneDrive for Business users often see error code 0x8004de40 when users try to sign in. The error appears as a pop-up that says “Something went wrong” or “We couldn’t sign you in.” This error blocks all OneDrive operations including file sync, sharing, and access to Files On-Demand. The root cause is a corrupted or expired authentication token stored in the Windows Credential Manager or a misconfigured Work or School account in Windows Settings. This guide explains the exact causes and provides three tested methods to resolve the error permanently for any user.

Why Error 0x8004de40 Occurs in OneDrive for Business

Error 0x8004de40 is an authentication failure code. It means OneDrive received a token from the Microsoft identity platform but the token is expired, malformed, or not valid for the requested resource. This happens when the cached credential in Windows Credential Manager no longer matches the user’s current Microsoft Entra ID session.

Three specific scenarios cause this error most often. First, the user changed their Microsoft 365 password but did not sign out and sign back in to OneDrive. The old token remains cached and fails validation. Second, a help desk reset the user’s account password or performed a password sync from on-premises Active Directory to Microsoft Entra ID. The cached token becomes stale. Third, the device registration state in Windows Settings > Accounts > Access work or school becomes corrupted after a Windows update or a domain join change.

The error is not caused by network problems or firewall rules. It is purely a token and credential mismatch issue. Help desk teams can resolve it by clearing all cached authentication artifacts and forcing a fresh sign-in flow.

Step-by-Step Fixes for Error 0x8004de40

Use these three methods in order. Each method clears a different layer of cached authentication data. Test after each method before moving to the next.

Method 1: Remove Stored Credentials from Windows Credential Manager

1. Open Credential Manager
   Press the Windows key and type Credential Manager. Click the result to open the Control Panel app.
2. Switch to Windows Credentials
   Click Windows Credentials in the top row of tabs. Scroll down to the section labeled Generic Credentials.
3. Remove all Microsoft Office and OneDrive entries
   Look for entries that start with MicrosoftOffice or OneDrive Cached Credential. Click the arrow to expand each entry, then click Remove. Confirm the deletion when prompted.
4. Close Credential Manager and restart OneDrive
   Right-click the OneDrive cloud icon in the system tray and select Close OneDrive. Wait 10 seconds. Open OneDrive from the Start menu. Sign in with the user’s Microsoft 365 credentials.

If the error disappears, the problem was a stale token. If the error returns, proceed to Method 2.

Method 2: Disconnect and Reconnect the Work or School Account

1. Open Windows Settings
   Press Windows key + I. Navigate to Accounts and then click Access work or school.
2. Disconnect the current account
   Click the Microsoft Entra ID-connected account entry. Click Disconnect. Read the warning that this removes the device from management. Click Yes to confirm.
3. Restart the computer
   This step ensures all cached device registration data is cleared from memory and disk.
4. Reconnect the account
   Open Windows Settings again. Go to Accounts > Access work or school. Click Connect. Select Join this device to Azure Active Directory and sign in with the user’s Microsoft 365 credentials.
5. Open OneDrive and sign in
   Launch OneDrive from the Start menu. The app should detect the connected account and complete sign-in without error 0x8004de40.

This method fixes device registration corruption. If the error persists, proceed to Method 3.

Method 3: Unlink and Relink OneDrive on the PC

1. Open OneDrive settings
   Right-click the OneDrive cloud icon in the system tray. Click the gear icon and select Settings.
2. Go to the Account tab
   Click the Account tab at the top of the settings window.
3. Unlink this PC
   Click Unlink this PC. Read the warning that files will stop syncing. Click Unlink account to confirm.
4. Restart OneDrive
   Close the settings window. Right-click the OneDrive icon again and select Close OneDrive. Wait 10 seconds. Open OneDrive from the Start menu.
5. Sign in again
   OneDrive will prompt for sign-in. Enter the user’s Microsoft 365 email and password. Complete any multi-factor authentication prompts. The sync should start without error 0x8004de40.

Method 3 resets all OneDrive-specific authentication state while keeping local files intact. No files are deleted during this process.

If OneDrive Still Shows Error 0x8004de40 After the Main Fixes

OneDrive error 0x8004de40 appears after a password reset

When a help desk resets a user’s password, the cached token in OneDrive becomes invalid immediately. The user must sign out of all Microsoft 365 apps before signing in again. Run Method 1 first. If the error returns, run Method 2. The disconnect-and-reconnect step forces Windows to request a new device token from Microsoft Entra ID.

Error 0x8004de40 appears on a newly imaged computer

If a help desk deploys a new computer using a cloned image, the device ID might conflict with the original computer. Open an elevated PowerShell prompt and run dsregcmd /leave. Then run dsregcmd /join to re-register the device. After that, run Method 2 and Method 3 in order.

Error 0x8004de40 returns every few days

This pattern indicates that the user’s Microsoft 365 session token expires but OneDrive is not refreshing it automatically. Check if the user’s tenant has a Conditional Access policy that requires device compliance or multi-factor authentication every 24 hours. The user must sign out of all Microsoft 365 apps and sign in again. If the issue repeats, ask the tenant admin to review the sign-in logs in Microsoft Entra admin center for token refresh failures.

Token Refresh vs Credential Reset: Key Differences for Error 0x8004de40

Item	Token Refresh	Credential Reset
What it does	Requests a new access token from Microsoft Entra ID without user interaction	Deletes all cached tokens and requires the user to sign in again
When it works	During normal token lifetime within 90 days for primary refresh tokens	After password change, device unjoin, or credential corruption
User action needed	None — happens in the background	User must sign in with password and possibly MFA
Help desk effort	None — automatic	Requires remote guidance or on-site visit
Resolution for 0x8004de40	Does not fix the error	Fixes the error in all cases

Help desk teams should always start with a credential reset rather than waiting for a token refresh. The error 0x8004de40 only occurs when the cached token is already invalid, so a refresh attempt will fail.

You now have three tested methods to resolve OneDrive error 0x8004de40 for any user. Start with Credential Manager cleanup, then disconnect the work or school account, then unlink OneDrive. For recurring cases, check Microsoft Entra sign-in logs for Conditional Access policy blocks. Create a help desk knowledge base article with the exact steps from this guide to reduce ticket resolution time.