'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Re-Enable an Accidentally Disabled Microsoft Entra Device
Question details
The user accidentally disabled a laptop through the Microsoft 365 admin portal while troubleshooting Outlook, resulting in being locked out of the device. The user is the sole administrator and cannot access the portal to reactivate the device or the admin account.
- Product
- Microsoft Entra ID
- Device & OS
- not provided
- Scenario
- Attempting to restore access to a locked device and administrator account after it was accidentally disabled.
- Observed behavior
- The laptop is locked, preventing login, and the sole administrator cannot access the Microsoft 365 admin portal to reverse the action.
Verify if there are any other global administrators within your organization's Microsoft 365 tenant who can log in to the portal from a working device.
Request Another Administrator to Re-Enable the Device
If your organization has multiple administrators, another admin can easily reactivate your device through the Microsoft Entra admin center.
Because your device and account are locked, you cannot perform this action yourself. Only an account with appropriate administrative privileges, such as a Global Administrator or Cloud Device Administrator, can re-enable the disabled device.
Have the other administrator log in to the Microsoft Entra admin center using their own credentials.
Go to 'Identity' in the left-hand navigation menu, select 'Devices', and then click on 'All devices'.
Search for your locked laptop using its device name or object ID. You will see its status clearly marked as disabled.
Select the device by clicking on it, then click the 'Enable' button located at the top of the device details pane.
Contact Microsoft Data Protection for Sole Administrators
If you are the only administrator and are completely locked out, you must contact Microsoft Support directly to regain access to your tenant.
Looking for a Hassle-Free Office Suite? Try WPS Office
Dealing with complex admin portals and device lockouts can be frustrating and disruptive to your workflow. WPS Office offers a free, lightweight, and easy-to-use alternative to Microsoft Office, ensuring seamless productivity without heavy IT overhead or cloud-locked devices.
Frequently Asked Questions
Can I re-enable a Microsoft Entra device without admin access?
No. Re-enabling a device in Microsoft Entra requires administrative privileges, such as a Global Administrator or Cloud Device Administrator role. You must contact another admin or Microsoft support to perform this action.
What happens when a device is disabled in Microsoft Entra?
When a device is disabled, it prevents users from authenticating with Microsoft Entra ID on that specific device. This effectively blocks access to Microsoft 365 services and can lock the user out of the machine entirely if it is an Entra-joined Windows device.
How long does it take for Microsoft Support to unlock a sole admin account?
The Data Protection team handles sole administrator lockouts. The process can take anywhere from a few hours to several days, as it requires strict security verification and multiple checks to securely prove tenant ownership before access is restored.
