Skip to content
Entralyzer Docs

Disable user in Microsoft 365 (Block sign-in)

In this guide, you’ll learn how to disable and block a Microsoft 365 user sign in.

When an employee leaves your organization, one of the first steps is to block the user from signing in to prevent unauthorized access. Next, reset their password. You can also sign the user out of all Microsoft 365 services.

Step 1. Block user sign-in

Section titled “Step 1. Block user sign-in”

Blocking someone prevents anyone from signing in as this user, and is a good idea when you think their password or username may have been compromised. When you block someone, it immediately stops any new sign-ins for that account, and if they’re signed in, they’ll be automatically signed out from all Microsoft services within 60 minutes. This won’t stop the account from receiving mail, see step 3 to block email access.

  1. Log into the Microsoft 365 Admin Center and go to Users > Active Users

  2. Click on the user account you want to block from signing in.

    select user account

  3. Select Block sign-in at the top of the page.

    select block sign in

  4. Select the box Block this user from signing in then Save changes

    select block user from sign on

    It could take up to 60 minutes to sign the account out of all microsoft services.

Step 2. Reset user password

Section titled “Step 2. Reset user password”

  1. Log into the Microsoft 365 Admin Center and go to Users > Active Users

  2. Select the user, then click reset password at the top of the page.

    Reset Password

  3. You can set a new password and require a password change at the next sign in.

    Reset Password options

  4. The account will now be signed out and forced to make a new password next login.

Step 3. Block email access

Section titled “Step 3. Block email access”

If the user has a mailbox you can block access with the following steps.

  1. Log into the Microsoft 365 Admin Center

  2. On the left side under Admin Centers Select Exchange

    exchange admin center

  3. Go to Recipients > Mailboxes

    go to mailboxes

  4. Select the mailbox you want to block access to.

  5. Under Email apps & Mobile Devices select Manage email app settings

    manage email app settings

  6. On the Manage email apps settings page, turn off all email app access by switching each option to Off:

  • Outlook desktop (MAPI)

  • Exchange Web Services

  • Mobile (Exchange ActiveSync)

  • IMAP

  • POP3

  • Outlook on the web

    outlook settings

    Click Save to block email access for this account.