How to log a user out of all devices signed into Microsoft 365

Cloud services are useful because anyone can connect to them from anywhere. Despite this being very beneficial, it can also be a great risk if an employee account is compromised. Hence why we believe it’s just as important to be able to disallow access when needed. So as you may have guessed — that will be the focus of this post.

Solution:

  1. Open the Microsoft 365 admin Centre
  2. Select “Users”
  3. Select “Active users”
  4. Select a user
  5. Click “Sign out”

Very shortly we’ll be going over a step-by-step image assisted guide of the above solution. To further benefit your security we’ll also be covering how you may change an employee’s password. To finish off, we will also be discussing the circumstances you may wish to sign a user out, or alter their password.

Quick links:

Sign users out of all devices on Microsoft 365

Step 1 – Open the Microsoft 365 admin centre

  • Please note that you will require administrative privileges to properly utilise this page. If you do not have the required permissions, you will need to proceed alongside someone who does.

Step 2 – Select “Users” > “Active users”

  • On the left side panel you’ll be able to see a series of options. Proceed with opening the “Users” dropdown category and selecting “Active users.” This will allow you to access a list of your current users.

Step 3 – Identify target user

  • Hit ctrl+f on windows and type your target user’s name to quickly locate them. Afterwhich, you may select their name, creating a prompt from which you may enact administrative actions on said user’s account.

Step 4 – Begin sign out process

  • Find and click “Sign-out.” This will identify each device the user has signed in with, and ensure they are signed out from each device. Please note however, that they will still be able to sign in again, provided they have all their valid credentials. As a result of this, it’s highly recommended you also reset the user’s password prior to signing them out.

Change users’ password on Microsoft 365 to log them out of all devices

Step 1 – Open the Microsoft 365 admin centre

  • Please note that you will require administrative privileges to properly utilise this page. If you do not have the required permissions, you will need to proceed alongside someone who does.

Step 2 – Select “Users” > “Active users”

  • On the left side panel you’ll be able to see a series of options. Proceed with opening the “Users” dropdown category and selecting “Active users.” This will allow you to access a list of your current users.

Step 3 – Identify target user

  • Hit ctrl+f on windows and type your target user’s name to quickly locate them. Afterwhich, you may select their name, creating a prompt from which you may enact administrative actions on said user’s account.

Step 4 – Select “Reset password”

  • Below the user’s name, you’ll be able to identify a “Reset password” option. Please select it to proceed. Doing so will produce a pop-out menu needed to alter the user’s password,

Step 5 – Set-up new password

  • While you are able to manually set a new password for the user, you will likely have noticed you’re also able to randomly generate a new password for use. Additional options also include having the new sign-in credentials emailed to you(can be insecure on some platforms), as well as requiring the user to create a new password of their own after next signing in once again.

When to sign users out of all devices or change passwords

Changing user’s passwords

Changing a user’s password will typically sign them out of all devices automatically. As such it’s a precaution to utilise only if you feel their account has been accessed without authorisation. This will both prevent the user and their hacker from maintaining access to company assets- thus supporting your data’s security.

Globally signing out users

Because signing the user out is ineffective if they still possess login permissions- it’s not advised to utilise this option immediately in the event of an account being compromised. This should be done last, or at the very least, after the account’s sign-in permissions and/or password have been amended to prevent signing back in. An alternative use for this feature could be to revoke a user’s access to assets after discharge from a role they may have had with the company.

Our related articles:

Jack Mitchell

Jack Mitchell has been the Operations manager at telecoms and MSP Optionbox for more than 4 years. He has played a crucial role in the company, from marketing to helpdesk, and ensures that the IT requirements of over 300 clients are continuously met. With his innate passion for technology and troubleshooting and a particular interest in Apple products, Jack now delivers the most comprehensive tech guides to make your life easier. You can connect with Jack on LinkedIn.

Recent Posts