Unable to Reactivate Device After Deletion – Admin Access Issue

Question

Unable to Reactivate Device After Deletion – Admin Access Issue

Kedarnath Reddy 0

Dear Support Team,

We recently deleted a device from our Microsoft 365 account. We now need to activate it again; however, we are encountering an issue.

I am the only Global/Master Admin for our organization, but when attempting to proceed, the system prompts me to contact the administrator. Under my login, I do not see any options that allow me to perform the required admin actions.

Could you please assist us in resolving this issue and guide us on how to reactivate the device?

Your support is much appreciated.

Moved from Microsoft 365 and Office | Other

0 comments

1 answer

Your answer

Answer 1

To reactivate a device that was deleted or disabled, two things must be checked: the device object in Microsoft Entra ID (Azure AD) and the local join/registration state on the device.

Verify and re-enable the device in Microsoft Entra ID
1. Sign in to the Azure portal with the Global Admin account.
2. Go to Microsoft Entra ID > Devices.
3. Search for the device (by name or user) and check whether it is Disabled or missing:
  - If it appears as Disabled, select the device and choose Enable.
  - If it does not appear (it was deleted), the device must be re-registered from the client side (see step 2).
If the device was disabled and is now enabled, retry the Microsoft 365 sign-in/activation scenario that was failing.
Re-register or rejoin the device if it was deleted If the device object was deleted, the device must be re-registered based on how it is joined: • Microsoft Entra hybrid joined (domain-joined + Entra)
1. On the device, open an elevated Command Prompt.
2. Run:
```
      dsregcmd.exe /debug /leave
```
3. Sign out and sign back in with a domain account to trigger automatic re-registration with Microsoft Entra ID.
• Microsoft Entra joined (Azure AD joined)
1. On the device, open an elevated Command Prompt.
2. Run:
```
      dsregcmd /forcerecovery
```
3. In the dialog that appears, select Sign in and complete the sign-in with the organization account.
4. Sign out of Windows and sign back in.
• Microsoft Entra registered (work account added on a personal device)
1. On the device, go to Settings > Accounts > Access work or school.
2. Select the work/school account and choose Disconnect.
3. Select + Connect and go through the sign-in process again to re-register the device.
Fix “Your organization has disabled this device” / AADSTS135011 If Microsoft 365 Apps or sign-in shows messages such as “Your organization has disabled this device” or error AADSTS135011:
1. Confirm the device is enabled in Microsoft Entra ID > Devices (as in step 1).
2. If the device object was deleted, perform the appropriate recovery:
  - Entra joined: dsregcmd /forcerecovery (elevated Command Prompt), then sign out/in.
  - Entra hybrid joined: dsregcmd /leave (elevated Command Prompt), then reboot and sign in with domain credentials.
  - Entra registered: disconnect and reconnect the work account under Access work or school.
If admin options are not visible If the Global Admin account does not see Microsoft Entra ID or Devices:
- Ensure sign-in is to the correct tenant where the subscription and devices exist.
- If the device cannot be recovered and no one deleted it, open a support request and provide an example of an affected device, as recommended in the documentation.

After the device is enabled and properly rejoined/registered, retry the Microsoft 365 sign-in or activation scenario.

References: