Microsoft 365 License Assigned But Apps Won’t Activate: The Real Fix (2026 Updated Guide)

Quick answer

If a Microsoft 365 license is assigned in the admin center but Word, Excel, or Outlook still show “Account needed” or run in reduced-functionality mode, the license has not propagated to the device — usually because the Apps sublicense inside the license bundle is unchecked, the device is signed in with the wrong account, or stale credentials in Windows are intercepting the activation handshake. Sign out of every Office app, clear the work account from Windows, then sign back in. If that fails, the fix is on the admin side, not the device.

Before you start

  • You need to know which Microsoft 365 plan was assigned. Microsoft 365 Business Basic does not include the desktop apps. If that’s what’s been assigned, no amount of troubleshooting on the device will help — the user needs Business Standard, Business Premium, or one of the Apps SKUs.
  • Don’t reinstall Office until the basics are checked. A reinstall takes 30–60 minutes and almost never fixes a license-propagation problem.
  • Don’t run third-party “Office repair” tools. Microsoft ships its own Office activation troubleshooter inside the Get Help app. Use that. Anything else is unnecessary risk.
  • If you’re the IT person fixing this for someone else, you’ll likely need access to both the device and the Microsoft 365 admin center. The fastest fixes alternate between the two.

What this means

A Microsoft 365 license has two layers. The license itself is the SKU you pay for — say, “Microsoft 365 Business Premium.” Within that license sit individual service plans (sublicenses): Exchange Online, OneDrive, Teams, and Microsoft 365 Apps for Business. Assigning the license in the admin center doesn’t always switch on every service plan inside it. It often does. Sometimes it doesn’t, and the apps service plan is the one that gets missed.

When a user signs in to Word, the app calls Microsoft’s Office Licensing Service, presents the user’s identity, and receives a token granting (or denying) activation. If the apps sublicense inside the license is unchecked, the licensing service correctly refuses to activate the desktop apps even though the parent license looks assigned. The error you see — “Account needed,” “We can’t verify your subscription,” “Unlicensed product” — describes the symptom but not the cause.

The other common cause is stale credentials. Windows caches every work and school account that signs in to it, and Office uses those cached tokens for activation. If a user previously signed in with a personal Microsoft account, or if a license was reassigned without clearing the cached credential, the cached token is being used instead of the fresh one — and the cached token doesn’t include the new license entitlement.

Where this error appears

SurfaceWhat you’ll see
Word / Excel / PowerPoint (desktop)Yellow banner at the top: “Account needed. Most features are turned off.”
Outlook (desktop)Title bar shows “(Unlicensed Product)”; new email composition is disabled
OneDriveSign-in succeeds but “You’re signed in but not licensed” appears in account settings
File menu → Account”Product Information” shows no subscription, or shows the wrong subscription
Activation prompt”Sorry, we can’t verify the subscription used by this product”

If the apps work fine on the web (microsoft365.com/apps) but won’t activate on the desktop, the license is reaching the user’s identity but not the device. That narrows the problem to credentials or sublicense state, not subscription status.

Common causes

  • The Apps sublicense is unchecked inside the assigned license. The most under-documented cause. The parent license shows as assigned; the desktop-apps service plan inside it is off.
  • The wrong plan is assigned. Microsoft 365 Business Basic includes web and mobile apps only. Microsoft 365 F1 and F3 frontline plans similarly have no desktop entitlement on most SKUs. If Business Basic was assigned by mistake, no fix will work until the plan is changed.
  • Stale Windows credentials. A previous personal Microsoft account is cached and being used for activation instead of the work account.
  • Credential Manager has an orphaned Office entry. A rare but stubborn cause where Office reads expired tokens from Windows Credential Manager.
  • The user is signed into Office with a personal account, not the work account. Easy to miss: the email address looks similar but the tenant is different.
  • The 30-day grace period has expired. Office stays activated for ~30 days without an internet check-in. If a device hasn’t connected in over a month and a license was reassigned in that window, activation can fail until the device is online and rechecked.
  • Multiple Office installations. A leftover Office 2016 or Office 2019 installation conflicting with Microsoft 365 Apps. Less common in 2026 but still encountered on older devices.
  • Conditional Access blocking the licensing service endpoint. A misconfigured policy can block *.office.com or *.officeapps.live.com for the user, preventing activation. This is an admin-side cause and ties into the CAA50021 admin checklist.

Fixes to try first

The order matters. These are sequenced from cheapest-to-try to most disruptive.

1. Verify the assigned plan actually includes desktop apps

Before touching the device, log in to the Microsoft 365 admin center, go to Users → Active users, select the affected user, and open Licenses and apps.

The plan name needs to be one of:

  • Microsoft 365 Business Standard
  • Microsoft 365 Business Premium
  • Microsoft 365 Apps for Business
  • Microsoft 365 Apps for Enterprise
  • Microsoft 365 E3, E5, A3, or A5
  • Office 365 E1, E3, E5 (with Apps add-on)

If the plan is Microsoft 365 Business Basic, Microsoft 365 F1, Microsoft 365 F3 (web-only), or Office 365 F3 (web-only), the user has no desktop apps entitlement. You’re not going to fix this on the device. Change the assigned plan.

2. Toggle the Apps sublicense inside the license

This is the fix that resolves the largest share of “license assigned but won’t activate” tickets.

In the admin center, on the affected user’s Licenses and apps page, expand the Apps section underneath the assigned license. Confirm that Microsoft 365 Apps for Enterprise (or the relevant Apps service plan for your SKU) is checked. If it’s already checked, uncheck it, save, then re-check it and save again. This forces the licensing service to refresh.

Wait 5–10 minutes, then have the user close every Office app, reopen Word, and check File → Account.

3. Sign out and sign back in

On the device, open Word. Click the user’s name or initials at the top right, then Sign out. Close every Office app — this includes Outlook, Teams, OneDrive, and the New Outlook for Windows if installed.

Reopen Word. When prompted, sign in with the work or school account that holds the license. Confirm the email address is exact: the tenant name in @contoso.onmicrosoft.com is easy to mistype, and a personal @outlook.com lookalike is even easier to pick by accident.

4. Disconnect and reconnect the work account in Windows

On Windows 11, open Settings → Accounts → Access work or school. If the affected work account is listed, select it and click Disconnect. Restart the device. Then open Access work or school again and click Connect to add the account fresh.

This step is non-destructive for the user — it doesn’t remove their files or local data — but it forces Windows to drop its cached identity broker token and request a new one. If a stale credential was the problem, this almost always fixes it.

5. Clear cached Office credentials from Credential Manager

Open Control Panel → Credential Manager → Windows Credentials. Look for any entries that begin with:

  • MicrosoftOffice16_Data:
  • MicrosoftOffice16:
  • MS.Outlook:
  • OneDrive Cached Credential

Remove every entry that matches those prefixes. Restart the device. Open Word and sign in fresh.

This step is safe — Office and Outlook will simply prompt for credentials again on next launch — but it should be done before reinstalling anything.

Advanced fixes

If the steps above haven’t worked, the problem is likely structural. The following fixes are more disruptive and should be done with the user available.

Reset Office activation state

Microsoft publishes an official troubleshooter that resets the device’s licensing state. Open Get Help on Windows (search “Get Help” in the Start menu), search for Microsoft 365 activation troubleshooter, and follow the prompts. The tool pulls down a fresh license token and rebuilds the activation cache without uninstalling Office.

This is the only “automated” tool we recommend running. It’s first-party Microsoft, ships with Windows, and is reversible.

Run the Office License Removal Tool (Mac)

If the device is a Mac, Microsoft ships a free License Removal Tool that strips all license files cleanly. Reinstalling licenses after running it is a clean restart. Search Microsoft’s support documentation for “Office License Removal Tool” — direct linking is unstable but the tool name is consistent.

Repair the Microsoft 365 installation

Repair is the second-to-last resort, not the first. Settings → Apps → Installed apps, find Microsoft 365, click Modify, and choose Quick Repair first. If the apps still won’t activate, run Online Repair. Online Repair takes 30–60 minutes, requires an internet connection, and reinstalls every Office component while preserving user data. We have a dedicated guide on how to repair Microsoft 365 without losing files if you want the full sequence.

Uninstall and reinstall Office

If repair fails, uninstall Office completely using the Microsoft Support and Recovery Assistant (SaRA) — it removes registry entries and license files that the standard uninstaller leaves behind. Then download a fresh installer from the user’s Microsoft 365 portal at portal.office.com/account/?ref=Harmony#installs and reinstall.

This is a 60-90 minute commitment. Don’t skip the earlier steps to get here faster — you’ll spend the same time and probably finish without solving the problem.

If you’re on a work or school device

If the device is managed by an IT department, two specific causes are worth flagging:

Your administrator may need to verify the license is fully provisioned. Sometimes a license appears assigned in the admin center but the underlying Entra ID (formerly Azure AD) provisioning hasn’t completed. If the user is brand new, this can take up to 30 minutes after license assignment. If it’s been longer than 30 minutes and apps still won’t activate, the admin should remove and re-add the license to force a re-provision. There’s a dedicated admin path for new Microsoft 365 users who can’t sign in covering the full provisioning checklist.

Conditional Access may be blocking the activation endpoint. Less common but real. If your organization runs Conditional Access policies, the licensing service endpoints (*.office.com, *.officeapps.live.com, *.microsoftonline.com) need to be reachable. Ask whoever manages your tenant to check that no policy is blocking the user, the device, or the IP range from those endpoints.

If you don’t have admin access and the user-side fixes haven’t worked, that’s the moment to escalate. The error message belongs on the user’s screen; the cause is increasingly likely on the admin side.

When to stop

Stop and escalate if:

  • You’ve confirmed the assigned plan includes desktop apps, toggled the Apps sublicense, signed out and back in, and the apps still won’t activate after 30+ minutes.
  • The device is encrypted with BitLocker and managed by an organization, and you’re considering an Office uninstall or registry edit. Get the IT admin involved before you change anything that could trigger a recovery prompt.
  • You’re seeing additional errors alongside the activation failure — particularly Office activation error 0x80070005, CAA50021, or any 0xCAA-prefixed code. Those have specific causes that override the generic license fix sequence.
  • The user is brand new to the organization and this is their first attempt to sign in. The problem may be provisioning, not licensing — and that’s an admin checklist, not a device-level fix.
  • You’ve spent more than two hours on it. Past that point, you’re chasing a long-tail cause and a fresh pair of eyes (or a support ticket) is faster.

Official references

FAQ

How long after I assign a Microsoft 365 license should the apps activate?

In normal conditions, within 5–10 minutes once the user signs in. Provisioning can take up to 30 minutes for newly-created users in Entra ID. If it’s been more than 30 minutes and the apps still show as unlicensed, the license has propagated but something on the device or in the sublicense state is intercepting it.

Can I assign more than one Microsoft 365 license to the same user?

Yes, but it’s almost always a mistake when troubleshooting activation. Two overlapping licenses can confuse the licensing service into not picking either. Remove all licenses, save, then assign the single intended license fresh. This is also a useful diagnostic — if removing and reassigning fixes the problem, the original assignment didn’t fully propagate.

Why does the user’s web Office work but not the desktop apps?

Different licensing paths. Web apps activate against a lighter-weight check that succeeds even when the desktop activation handshake is failing. If the web works and desktop doesn’t, the user’s license is fine — the failure is in the desktop activation flow, which means stale credentials, an unchecked Apps sublicense, or a policy blocking activation endpoints.

Should I uninstall and reinstall Office to fix this?

Almost never the right first move. A reinstall takes an hour and rarely fixes license problems because the license isn’t stored in the Office installation — it’s stored in the user’s identity and Windows credential cache. Reinstall is a last resort, after license verification, sublicense toggle, sign-out/sign-in, credential clearing, and Office repair have all been tried.

Does this error mean my Microsoft 365 subscription has expired?

No. The “license assigned but won’t activate” pattern specifically means the subscription is active and assigned — that’s why the admin center shows it as assigned. Expiration produces a different error: “We couldn’t find any Office products” or “Subscription canceled.” If you’re seeing those, the license assignment isn’t the issue.

The user has Microsoft 365 Business Basic. Can I change them to Business Standard quickly?

Yes, in the admin center. Go to the user’s Licenses and apps, uncheck Business Basic, save, then check Business Standard and save. The cost difference is billed prorated. The user’s mailbox, OneDrive, and SharePoint files are unaffected — they’re tied to the user’s identity, not the license SKU. After the swap, the desktop apps should activate within a few minutes.

↑ Back to top