Can i ask do you have a hybrid environment or are you in the middle of a staged migration.
I dealt with an issue where users were being prompted for passwords half way through a migration from on premise to cloud. The pop up was coming from requests to servers internally like calendars from users that hadn't been migrated.
Also could you describe your exchange setup Hybrid, Dirsync, Federated or just built in accounts?
Graham