> ## Documentation Index
> Fetch the complete documentation index at: https://university.triggr-app.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Re-enable Terminated Account
> Turns sign-in back on for an offboarded user in your client's Microsoft 365, and can convert their shared mailbox back to a user mailbox.
Re-enable Terminated Account brings back someone you offboarded with [User Offboarding](/core/workflows/user-offboarding). It turns their sign-in back on and, if you choose, makes their shared mailbox their own mailbox again. It needs [Microsoft 365 connected](/core/get-started/connect-microsoft-365) with a GDAP role that can enable users, such as [User Administrator](/integrations/microsoft-graph/recommended-roles), [Exchange access](/core/reference/microsoft-faq#exchange-online) to convert the mailbox, and the [desktop agent](/desktop-agent/overview) for a client that syncs on-premises Active Directory.
Before the first run, untick **Licensed users only** and **Active users only** under User directory filters. Offboarded accounts are blocked and usually unlicensed, so the User list leaves them out until you do.
## What the form asks
| Field | |
| - | - |
| User | Required, always on. The account to re-enable, picked from the client's users |
| Convert the shared mailbox back to a user mailbox? | Optional by default, and starts on No. Yes turns the shared mailbox User Offboarding made back into their own mailbox |
| Reason / ticket reference | Optional by default. For your records and the approver; not sent to Microsoft |
## What it does
1. Creates a ticket in your PSA, if Ticketing is on.
2. Waits for approval, if Approval is Internal or External, or a conditional override matches.
3. Re-enable Sign-in: turns sign-in back on for the account in the client's Microsoft 365.
4. Convert To Regular Mailbox: makes the mailbox a user mailbox again in the client's Exchange Online, if the form says Yes.
For an AD-synced account on a client that syncs on-premises AD, Set On-Prem Account State runs instead of Re-enable Sign-in: the desktop agent enables the account in Active Directory, then starts a delta sync if it runs on the Microsoft Entra Connect server. The mailbox is still converted in Exchange Online. If the Active Directory change fails, the run stops there.
With Log actions to the ticket on, the ticket also gets a note when the run starts, after Re-enable Sign-in and Convert To Regular Mailbox, and when the run completes. It doesn't set or send a password.
## What it doesn't undo
Re-enable Terminated Account reverses the blocked sign-in and, if you choose, the shared mailbox. Put back the rest of what User Offboarding changed yourself:
| User Offboarding changed | Put it back |
| - | - |
| Removed their licences | Assign them with [License Management](/core/workflows/license-management). A user mailbox needs an Exchange Online licence |
| Removed them from groups | Add them back with [Group Membership](/core/workflows/group-membership), or in the Microsoft 365 admin center |
| Reset their password | Give them a new one with [Password Reset](/core/workflows/password-reset) |
| Reset their MFA | Nothing to do: Microsoft asks them to register MFA again when they next sign in |
| Forwarded their email | Remove the forwarding in the Exchange admin center |
| Gave colleagues access to their mailbox | Remove it with [Remove Mailbox Delegation](/core/workflows/remove-mailbox-delegation), or in the Exchange admin center |
| Hid them from the address list | Run [Hide Mailbox from Global Address List](/core/workflows/hide-from-gal) and answer No |
| Set an out-of-office reply | Turn it off in Outlook or the Exchange admin center |
| Renamed them to an archive name | Change their display name in the Microsoft 365 admin center |
| Removed inbox rules and mobile devices | These are gone: they set up their rules again and re-add their phone |
| Moved a synced account to the disabled-users OU | Move it back in Active Directory |
## Configure it
Go to **Config** and click Re-enable Terminated Account, under Lifecycle.
| Setting | Where | What it does |
| - | - | - |
| Availability | Header | Internal only, Public form only, Internal + public or Disabled. List on homepage needs a public form. Base config only |
| User | Form config | Always on: the automation needs it |
| Convert the shared mailbox back to a user mailbox? | Form config | Hidden, Optional or Required. Hidden means no run converts the mailbox. Can differ per client |
| Reason / ticket reference | Form config | Hidden, Optional or Required. Can differ per client |
| Add field, Add section | Form config | Your own questions. They're saved with the request and can go in ticket templates, but aren't sent to Microsoft. Add client section asks one client only |
| Approval | Execution config | None runs on submit. Internal waits for a teammate or group; External waits for the client's approver, set on each client. Conditional overrides use a different approval when the answers match |
| Ticketing | Execution config | Create a PSA ticket for each run, with its type, priority, status, subject and body. Log actions to the ticket adds an internal or public note as each action completes |
| User directory filters | Execution config | Which users the User picker lists. Licensed users only and Active users only start ticked: untick both so offboarded accounts are listed. Exclude members of Entra roles you add (for example Global Administrator), and exclude specific users at a client's scope |
Approval, Ticketing and User directory filters are set on Base config and apply to every client unless you override them for one. For how Base config and client overrides work, see [How configuration works](/core/get-started/configure-user-onboarding#settings-for-each-client).
## Troubleshooting
With Active users only ticked under User directory filters, accounts whose sign-in is blocked are hidden; with Licensed users only ticked, so are accounts without a licence. **Untick both** on Base config, or for that client. Guests and anyone in an Entra role you've excluded stay hidden.
Re-enable Terminated Account works on a disabled account. [Restore the deleted user](https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/restore-user) in the Microsoft 365 admin center first, within 30 days of the deletion.
This ticket note means the desktop agent couldn't enable the account in Active Directory, and nothing was changed. The note includes the error. Enable the account in Active Directory, or fix the cause and run it again.
## Related
* [Workflow catalogue](/core/reference/workflow-catalogue)
* [Run a workflow](/core/use/run-a-workflow)
* [User Offboarding](/core/workflows/user-offboarding)
* [Account Unlock](/core/workflows/account-unlock), for an account that's blocked but wasn't offboarded
This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.