If you want the phone disabled/enabled on an ad-hoc basic, you need to use autoset relocate. Code+Pin will make the phone "signed off", you will see the difference if you reg-scsu for it. The PEN is gone.
So make sure RELOCATE is active in FEASU (dis-feasu

If not, activate it with cha-feasu.
Get your sign off/on codes, add them if not there with add-wabe;
DIS-WABE:GEN,,0&&15,,SIGNOFF&SIGNON;
H500: AMO WABE STARTED
------------------------------------------------------------------------------
| DIGIT INTERPRETATION VALID FOR ALL DIAL PLANS |
------------------------------------------------------------------------------
| | CALL PROGRESS STATE |NODE/DIGIT| RESERVED/CONVERT |
| CODE | 1 11111 11112 22| ANALYSIS | DNI/ADD-INFO |
| |0 12345 67890 12345 67890 12| RESULT | *=OWN NODE |
------------------------------------------------------------------------------
| *12 |. ....* ..... ..... ..... ..| SIGNON | |
| #12 |. ....* ..... ..... ..... ..| SIGNOFF | |
------------------------------------------------------------------------------
Get the PIN for your extension. If not there, add it with add-persi:stn
DIS-PERSI:STN,68683;
H500: AMO PERSI STARTED
+--------------+--------------+------------------------------------+
| STNO | PIN | PINTYPE |
| | | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15|
+--------------+--------------+------------------------------------+
| | | |
| 68683 | 38686 | X X X X . X X . . . X X X X X|
| | | |
+--------------+--------------+------------------------------------+
AMO-PERSI-111 PERSONAL IDENTIFICATION DATA
Dial the sign off code and pin, #12 38686, you will get a tone, hang up, go off hook, phone is now disabled, you should get a message. reg-scsu now, you will see it is signed off. Dial the sign on code, *12 38686, get the tone, hang up, phone now works.
If above doesn't work, it just needs some minor PIN changes.
You don't need to signon to the same port you signed off, you can't swap over analogs and digitals but analog/analog and digital/digital can be reconfigured across ports this way. You can't signon to a port that is not in signoff state though.