Share via

New Guest User Cannot Reset Password

Peter Ivers 0 Reputation points
2026-05-08T20:06:14.1133333+00:00

We invited a guest user.  He accepted the invite and it takes him to https://myapplications.microsoft.com/ with no apps listed.  No Teams app.  When he attempts to add an account to his desktop Teams it prompts for a password.  His own domain P/W does not work, and I cannot reset his password, it says I this is not the home directory for him.  When he attempts to reset the password it says he is not allowed to and ask the admin.  On my end it says an admin on his home directory can reset the password, but they are not seeing the account. Are there specific instructions for them? I have added 65 other guests the same way with no issues like this.

[Moderator note: personal info removed]

Microsoft Teams | Microsoft Teams for business | Sign up and Sign in | Sign in
0 comments No comments

3 answers

Sort by: Most helpful
  1. Nathan Roberts (SN) 11,391 Reputation points Volunteer Moderator
    2026-05-10T12:26:52.2533333+00:00

    Hey there, Peter Ivers

    So how do I tell him to access our Teams site?

    Comment from OP - https://learn.microsoft.com/en-us/answers/c/2649149

    When he has joined your organisation as a guest user, your organisation should be listed on his organisation work account here: https://myaccount.microsoft.com/organizations

    User's image

    If your organisation is listed (Where it says 'Microsoft' for me), then he will be able to switch to it from Microsoft teams. He just needs to click onto his organisation name on the top-right of the Teams desktop app.

    User's image

    Then he should see your organisation name on the drip down under his account.

    User's image

    Once he clicks onto your organisation, Teams will reload into your tenant, and he will be able to access teams, channels, and resources he has been granted permissions to.

    Hope this helps,
    Nathan

    Was this answer helpful?

    0 comments No comments

  2. Alexis-NG 16,270 Reputation points Microsoft External Staff Moderator
    2026-05-08T21:14:37.4366667+00:00

    Hi Peter Ivers,

    I hope you are doing well.

    I'd love to help you understand your situation better.

    When you invited a guest user, they will receive an email invitation to access an organization's Microsoft 365 resources (such as Teams, SharePoint, or OneDrive), they should follow the steps below to accept the invitation and gain access as a guest user.

    Your guest have to find and open the email invatation.

    The email invitation may look similar to this

    User's imageClick the "Accept invitation" button.

    This will redirect them to a Microsoft sign-in page.

    If their email is already a Microsoft account, It will take them to Step 4

    If it’s other provider, you will receive an access code via email.

    User's image

    User's image

    They may be prompted to accept permissions requested by the organization (e.g., access their profile info).

    User's image

    Click Accept to proceed.

    The organization may require Multi-Factor Authentication to protect access: They’ll be prompted to set up MFA using an authentication method.

    Follow the on-screen instructions to complete MFA enrollment.

    User's image

    They’ll only need to do this the first time or when security settings change.

    Once MFA is completed and the invitation is accepted, you will be redirected to the resource you were invited to (e.g., a SharePoint site or a Teams workspace).

    Note: If nothing assigned yet, The My Apps page opens, and you'll see the message "There are no apps to show."

    This is where you should verify the guest account in your tenant by navigating to Microsoft 365 Admin Center > Users > Guest users > [Guest name] and confirm whether any access or resources have been assigned to the account yet.

    User's image

    Next, since your guest's email is already associated with a Microsoft 365 account, they will be directed to their own organization's login page to enter their password. Guest accounts use their own organization credentials. They does not have a password in your tenant. They must sign in using the credentials from their home organization (their own domain). This is why you are unable to reset their password, only their home tenant admin can manage it.

    If the user cannot sign in, their IT administrator needs to verify that:

    • The account exists in their directory
    • The account is active and not blocked.
    • The account can only be reset by them.

    This responsibility falls under your guest’s IT administrator, as they manage the account in the home tenant. Since the issue originates from their environment rather than yours, there is no action you can take on your end to resolve it.

    Their IT admin can find their account under Users > Active users in Microsoft 365 Admin Center or check sign-in logs via Entra Admin Center > Users > Sign-in logs.

    User's image

    Once the guest’s IT administrator has resolved the sign-in issue on their end, you can consider remove and re-invite the user to prevent any potential conflicts. In the meantime, please ensure that the appropriate access is configured by assigning them to the correct groups and granting the necessary resources so they can view content within your tenant.

    I hope this provides enough clarity and helps you stay inform with your current situation.

    In the meantime, if you see my replies bring helpful information, please kindly accept it as an answer and vote it up by your original account, which raised this question. Once marked, it will automatically pin to top. As other users will also search information in this community, your valuable vote up will definitely also help other users who have similar queries easily to find the correct channel and useful information more quickly.   

     

    Thank you for your patience and your understanding. If you have any questions or need further assistance, please feel free to share them in the comments on this post so I can continue to support you.   


    Note: Follow the steps in this documentation to enable email notifications if you want to receive email notifications related to this topic.

    Was this answer helpful?


  3. AI answer

    2026-05-08T20:06:33.3666667+00:00

    The guest user’s password and sign-in are controlled by the user’s home directory (home Microsoft Entra tenant), not by the resource tenant where the Teams guest access is granted. Because this tenant is not the home directory for that guest, the password cannot be reset from this side.

    Key points from the scenario and context:

    1. Password reset ownership
      • Administrators can reset a user’s password only if their tenant is the user’s home directory.
      • If the user signs in using an account from another organization (a B2B guest), only an admin in that home organization can reset the password.
      • This tenant therefore correctly shows the message that the password can only be reset by an admin in the user’s home directory.
    2. What the home-tenant admin must do
      In the user’s home organization (where the account actually lives):
      • An admin with the required role must locate the user in their own Microsoft Entra directory and reset the password there, following their standard “reset a user’s password” process.
      • If the user’s source of authority is on-premises Active Directory, the home-tenant admin must reset the password on-premises (or via password writeback if configured).
      • If the user’s source of authority is an external Microsoft Entra ID, only that external tenant’s admin or the user themselves can reset the password.
    3. Why the home-tenant admin may not see the account
      • The account used as a guest in this tenant is the same account that should exist in the home tenant. If the home-tenant admin “does not see” the account, it usually means they are searching the wrong tenant or wrong UPN, or the user is using a different identity than expected.
      • The guest object that appears in this tenant is just a B2B guest representation; it does not create a new home account. The home admin must look for the original account in their own directory, not in this tenant.
    4. Self-service password reset (SSPR) for the guest
      • For B2B users, password reset is supported only if the home organization has Microsoft Entra self-service password reset (SSPR) enabled and the user is allowed to use it.
      • If the guest user sees a message like “Your account is not enabled for password reset” or “Please contact your administrator,” it means SSPR is not enabled for them in the home tenant, or they are not registered. In that case, they must contact their home-tenant admin.
    5. No apps in My Apps portal
      • Seeing an empty My Apps portal in the resource tenant simply means no apps (including Teams) have been explicitly assigned to that guest user there. This does not affect their password; it only reflects app assignment.

    Summary of required actions:

    • The guest user must work with their home organization’s Microsoft Entra admin.
    • The home admin must reset the password in the home tenant (or on-premises AD if that is the source of authority) and/or enable and configure SSPR for that user.
    • This tenant cannot reset that user’s password because it is not the home directory.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.