Account disabled

Question

I have a customer account on AAD that is in a "disabled" state, and I can't figure out how to reenable, or how to find someone with permission to do it. I routinely add customers, and this is the first time one has ended up in a disabled state that I can't fix.

Answer 1

it depends if the account is synchronized from on-premises or not

• if it is synchronized than enable it in AD users&computers or use powershel 'enable-adaccount' and the status will synchronize to AAD
  https://learn.microsoft.com/en-us/powershell/module/activedirectory/enable-adaccount
• if it is not synchronized than enable it in admin.microsoft.com via user Account tab >'Unblock sign-in' as shown in the following picture
  

or use powershell (AzureAD module)
'Set-AzureADUser -ObjectID fabricec@litwareinc.com -AccountEnabled $true'
https://learn.microsoft.com/en-us/microsoft-365/enterprise/block-user-accounts-with-microsoft-365-powershell#block-access-to-individual-user-accounts

if you use risk based policies you additionaly need to first remediate the risk that blocked the user sign-in

https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-remediate-unblock

regards

Answer 2

You can try using Graph API:

https://learn.microsoft.com/en-us/graph/api/user-update?view=graph-rest-1.0&tabs=http

Import-Module Microsoft.Graph.Users
$userId = "name@domain.com"

$params = @{
	accountEnabled = true
}

# A UPN can also be used as -UserId.
Update-MgUser -UserId $userId -BodyParameter $params

---

If this is helpful please accept answer.