How to Limit Microsoft 365 Activation to One Computer per User
Question details
The administrator wants to restrict specific users to activating Microsoft 365 applications on only one device, overriding the default multiple-device allowance.

- Product
- Microsoft 365 Apps
- Device & OS
- not provided
- Scenario
- An IT administrator needs to enforce strict device-based licensing policies within an organization to manage software distribution and security.
- Observed behavior
- By default, Microsoft 365 allows multiple installations per user. Administrators need a way to set the maximum allowed Azure AD device joins to one, ensuring a single activation per license.
Ensure you have Global Administrator or Cloud Device Administrator privileges in your Microsoft Entra ID (formerly Azure Active Directory) tenant, and verify that your Microsoft 365 plan (e.g., Enterprise E3 or E5) supports device-based licensing.
Configure Device-Based Licensing Limits in Microsoft Entra Admin Center
Use Microsoft Entra ID device settings to restrict users to joining only one device, effectively limiting their Microsoft 365 activation to that single computer.
By leveraging device-based activation, organizations can manage Office app installations through hardware registration rather than user accounts. Configuring the maximum allowed joined devices ensures that users cannot activate the suite on unauthorized computers.
Sign in to the Azure portal at portal.azure.com or the Microsoft Entra admin center using your administrator credentials.
From the left-hand menu, select 'Azure Active Directory' (or Microsoft Entra ID), click on 'Devices', and then select 'Device settings'.
Locate the 'Users may join devices to Azure AD' option. You can set this to 'All' or 'Selected' depending on whether you want to apply the rule organization-wide or to specific groups.
Find the setting for 'Maximum number of devices per user' and change the limit from its default value strictly to '1'.
Save your configuration changes. Ensure the targeted users are properly assigned their Microsoft 365 Enterprise licenses via the admin center.

Manage and Remove Existing Device Activations
When a user reaches their 1-device limit and receives a replacement computer, administrators must manually remove the old device registration to allow a new activation.
Looking for a Simpler, Cost-Effective Office Suite? Try WPS Office
Managing complex Microsoft 365 licensing, strict device limits, and expensive subscription tiers can be incredibly cumbersome for IT teams. Consider switching to WPS Office. It provides robust tools for word processing, spreadsheets, and presentations without the rigid device activation restrictions and high costs of enterprise Microsoft subscriptions.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install the Software: Run the downloaded file and follow the straightforward on-screen prompts to install WPS Office on your computer.
- 3. Start Creating Instantly: Open WPS Office and immediately begin working on your documents, spreadsheets, and presentations without worrying about complex activation limits.

Frequently Asked Questions
What happens if a user tries to activate Microsoft 365 on a second device?
If the Entra ID device limit is set to 1, the user will receive an activation error indicating that the maximum device limit has been reached when they attempt to activate Office on the second computer.
Can I apply the one-device limit to specific users instead of the entire organization?
Yes. Within the Microsoft Entra device settings, you can choose 'Selected' under the 'Users may join devices to Azure AD' option. This allows you to apply the strict device limits only to specific Azure AD user groups.
Does Microsoft 365 Business Premium support device-based licensing?
Device-based licensing is generally reserved for Microsoft 365 Apps for enterprise, Enterprise E3, and Enterprise E5 plans. Standard Business plans typically rely on user-based licensing, which defaults to allowing up to 5 concurrent device activations.
How does a user activate Office once the limit is enforced?
The user simply logs into the computer using their Azure AD credentials. Because the device itself is licensed via the organization's Entra ID configuration, Microsoft 365 apps will automatically activate for that user on that specific authorized machine.




