Could you provide a sample zmprov ga
user@domain.com output for one of the affected users & enable extra logging?
Example: zmprov aal
user@domain.com zimbra.soap debug and tail -f /opt/zimbra/log/mailbox.log while attempting to login to the AJAX client.