Solution:
Root Cause: Invalidated OAuth2 Refresh Token
When Google Workspace security tokens expire due to administrative credential policies, password resets, or device revokations, GWSMO's cached OAuth2 refresh token becomes invalid. Outlook continues attempting connection using stale credentials, triggering repeated authentication failures in the GWSMO tray service.
# Diagnostic Verification:
Check the GWSMO log files in
%LOCALAPPDATA%\Google\Google Apps Sync\Tracing\ (e.g.,
gsync-*.log). Look for authentication failure entries:
text
AUTH_E_OAUTH2_TOKEN_INVALID or HTTP response code 401 Unauthorized
# Step-by-Step Fix:
1. Close Microsoft Outlook completely and end related processes:
powershell
Stop-Process -Name "outlook", "GSyncMOApp" -Force -ErrorAction SilentlyContinue
2. Open the Windows Start Menu, locate
Google Workspace Sync, and click
Re-authorize Google Workspace Sync.
3. A browser window will open. Log into the target Google Workspace account, complete 2FA prompts, and grant permissions to GWSMO.
4. If re-authorization fails, delete the local cached registry token keys:
cmd
reg delete "HKCU\Software\Google\Google Apps Sync\SignIn" /f
5. Relaunch Outlook to trigger the native GWSMO login prompt and rebuild OAuth tokens.
# Prevention & Long-Term Monitoring:
Ensure Google Workspace Admin console policies allow GWSMO under Apps > Google Workspace > Settings for Gmail > End User Access.