Overview
A disconnected Work or School account can interrupt Microsoft 365 access, device management, single sign-on, policy application, or access to organizational resources. Confirm which account is disconnected and whether the device is still organization-managed before reconnecting anything.
Why this happens
The connection can break because of password changes, expired authentication tokens, device registration issues, Entra ID state, network problems, management changes, or account disablement.
Before you begin
- Record the exact work account email address.
- Confirm internet connectivity.
- Record any message shown under Access work or school.
- Do not select Disconnect unless IT explicitly directs it.
Click-by-click troubleshooting
Step 1: Review the connected account
Action: Open Settings > Accounts > Access work or school. Select the listed work account.
Why this matters: Windows can contain multiple accounts, and only one may be affected.
What to look for: Look for the expected organization account, warning text, or a Fix button.
Expected result: You should identify the exact account and its Windows connection state.
Step 2: Test the same account in a browser
Action: Open a private browser window and sign in to the organization's normal Microsoft 365 portal using the same work account.
Why this matters: This separates an account credential problem from a Windows device-connection problem.
What to look for: Confirm whether the account signs in successfully and whether MFA or policy blocks access.
Expected result: The work account should authenticate successfully before Windows reconnection is attempted.
Step 3: Use the Fix option if Windows provides one
Action: Return to Settings > Accounts > Access work or school. If a Fix option is shown, select it and complete the approved sign-in process.
Why this matters: Windows can often refresh authentication without removing the device relationship.
What to look for: Look for a successful sign-in, MFA prompt, or specific error.
Expected result: The warning should clear while the existing work account remains connected.
Step 4: Check Windows account information
Action: Open Settings > Accounts > Your info and Settings > Accounts > Email & accounts. Review whether unexpected personal or old work accounts are present.
Why this matters: Multiple identities can cause confusing prompts and token mismatches.
What to look for: Look for old organizational accounts or account mismatch with the intended work identity.
Expected result: The user should understand which Windows identity and work account are active.
Step 5: Restart and retest Microsoft 365 access
Action: Save work, select Start > Power > Restart, then test a Microsoft 365 web application and any affected desktop application.
Why this matters: A restart can refresh device and application authentication after account repair.
What to look for: Look for continued sign-in prompts, access failures, or the Access work or school warning returning.
Expected result: The repaired account should remain connected and business applications should authenticate normally.
Step 6: Record device-management indicators
Action: In Settings > Accounts > Access work or school, note whether the account shows organization management information. Do not disconnect it.
Why this matters: Managed devices may depend on that connection for Intune, security policy, certificates, and access rules.
What to look for: Look for management, enrollment, or organization information associated with the account.
Expected result: You should know whether IT must repair device registration rather than simply re-add an account.
What to look for
- Browser sign-in fails: identity problem first.
- Browser works but Windows shows disconnected: device connection or token problem.
- A Fix button may repair authentication without removing management.
- Managed-device indicators mean Disconnect should not be used casually.
When to stop
When to contact IT
Contact J3 Systems Group if the browser account works but Windows remains disconnected, device management is involved, Fix fails, or access policies continue to block applications. Include article code KB-10.009, the work account, and screenshot of Access work or school.
Need help with this issue?
J3 Systems Group supports small businesses and nonprofits with Microsoft 365, Google Workspace, cybersecurity, devices, documentation, and day-to-day IT operations.
Contact J3 Systems GroupAuthoritative references
Vendor interfaces, licensing, and security guidance can change. Verify current platform behavior against the primary documentation below before making high-impact production changes.