Password & Account Recovery

Fix Microsoft 365 Admin Password Change Organization Restriction

Algirdas JasaitisAlgirdas Jasaitis Oct 28, 2026 868 views

Question details

A Microsoft 365 global administrator is unable to change their password and receives an organization restriction error.

Fix the Microsoft 365 Password Change Organization Restriction
Product
Microsoft 365
Device & OS
not provided
Scenario
Attempting to change a global administrator password when Self-Service Password Reset is not enabled for the tenant.
Observed behavior
The system displays the error message, 'Your organization does not allow you to change your password on this site.'
Before you start

Determine if there are other active global administrators in your Microsoft 365 tenant, as they can bypass this restriction and reset your password on your behalf.

Solution 1Recommended

Request a Password Reset from Another Global Administrator

If your Microsoft 365 tenant has multiple administrator accounts, another active global administrator can manually reset your password through the admin center.

The fastest way to regain access is to have a secondary admin reset your credentials. This bypasses the need for Self-Service Password Reset (SSPR).

1
Log in to the Admin Center

Have the secondary administrator log in to the Microsoft 365 admin center using their own credentials.

2
Navigate to Active Users

In the left navigation menu, go to 'Users' and select 'Active users'.

3
Select the Locked Account

Find and select your locked administrator account from the user list.

4
Reset Password

Click the 'Reset password' button at the top of the pane and follow the prompts to generate a new password.

Request a Password Reset from Another Global Administrator
Enable Self-Service Password Reset: Once your access is restored, it is highly recommended to enable Self-Service Password Reset (SSPR) in the Microsoft Entra admin center to prevent future lockouts.
Free Microsoft Office alternative

Looking for a Hassle-Free Office Suite? Try WPS Office

Dealing with complex administrator settings and tenant lockouts can disrupt your workflow. If you need a powerful, standalone productivity suite that doesn't require complex organizational configurations, WPS Office is the perfect solution.

  1. 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
  2. 2. Install WPS Office: Run the downloaded file and follow the simple on-screen instructions to complete the installation.
  3. 3. Start Creating: Open WPS Office and instantly start creating or editing your documents, spreadsheets, and presentations.
Free and lightweight office suite with no complex tenant setup requiredFully compatible with Microsoft Word, Excel, and PowerPoint formatsFamiliar user interface ensuring a seamless transition from Microsoft OfficeBuilt-in PDF editing and cloud collaboration tools
microsoft office alternative - wps office

Frequently Asked Questions

Why am I getting this password restriction error in Microsoft 365?

This error occurs because Self-Service Password Reset (SSPR) has not been enabled for your tenant, or your account is synchronized and managed through an on-premises Active Directory or external identity provider.

How can I enable Self-Service Password Reset (SSPR) for my organization?

An active global administrator can enable SSPR by logging into the Microsoft Entra admin center (formerly Azure AD), navigating to 'Password reset' under the 'Protection' menu, and configuring the properties to allow 'All' or 'Selected' users to reset their own passwords.

What if I am the only administrator and I am completely locked out?

If you are the sole administrator, you cannot reset the password yourself. You must contact Microsoft 365 Phone Support and request assistance from the Data Protection team for administrator account recovery.