If you run into an issue where one or two users who fail authenticate with IMAP but its working for the rest of the users for the domain, check to see if they have a backslash \ in their password.

If so, have them try to escape that backslash with another backslash as a workaround.

For example, instead of password: mae3sm\s  have them try mae3sm\\s .