rencore.com (opens in a new tab) Start a trial (opens in a new tab)

Devices with disabled user accounts

Last updated Policies Entra ID

AI summary

You can identify devices whose owners or user accounts are disabled in Microsoft Entra ID, helping you clean up stale devices from former employees. These forgotten devices clutter your inventory, distort compliance reports, and may hold company data, so you should verify they were returned and then disable and delete them.

Severity: Medium Operation Generally available

What it detects

Shows devices with disabled owners or user accounts.

Why it matters

When an account is disabled, usually because someone left, the devices registered to that person stay in Microsoft Entra ID. Stale devices clutter device lists, distort compliance and Conditional Access reports, and may still hold company data. Check whether each device was returned and wiped, then disable the device object and delete it later.

The rule

Every Device that has any Device Users where Account Enabled is false or any Device Owners where Account Enabled is false

In Rencore Governance

The Devices with disabled user accounts policy in Rencore Governance: the rule, its trend and the objects that match it
The policy page in a Rencore demo Environment, with sample results, captured October 2026.

Details

Applies to Device
Connector Entra ID
Severity Medium
Category Operation
Recommended No
Recommended automation None
License type Standard

Frequently asked questions

What does the devices with disabled user accounts policy detect?

The Devices with disabled user accounts policy shows devices with disabled owners or user accounts.

Which objects does the devices with disabled user accounts policy check?

The Devices with disabled user accounts policy checks Device objects from the Entra ID inventory and reports each one that matches its rule as a violation.

How severe is a violation of the devices with disabled user accounts policy?

Violations of the Devices with disabled user accounts policy have Medium severity. The policy is in the Operation category.

Which module includes the devices with disabled user accounts policy?

The Devices with disabled user accounts policy comes with the Entra ID connector in the Digital Workplace module of Rencore Governance, which every Plan includes.