Share via

Error message: AADSTS5000225: This tenant has been blocked due to inactivity

Marco Renzi 0 Reputation points
2026-04-07T14:19:50.5133333+00:00

How do I fix this issue on my Azure account? thank you for the support.

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Q&A Assist
    2026-04-07T14:20:06.8866667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    The error AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra/Azure AD tenant behind the Azure subscription has been marked inactive and blocked. Resolution depends on how long it has been inactive and what access is still available.

    1. Determine whether the tenant can still be reactivated
      • Tenants blocked due to inactivity can be reactivated only within 20 days of entering the inactive state. After 20 days, the tenant is deleted and not recoverable.
      • This behavior and timeline are described in the “Tenant inaccessible due to inactivity” guidance.
    2. If the tenant has been inactive less than 20 days
      • A tenant administrator must contact Microsoft support to request reactivation:
        1. Use the published global support phone numbers to reach Microsoft support.
        2. Open a support case and provide tenant details (tenant ID, domain name, subscription info, and error message AADSTS5000225).
        3. Do not submit multiple requests for the same issue; wait for the decision on the existing case.
    3. If the tenant has been inactive more than 20 days
      • The tenant is deleted and cannot be restored.
      • In this case, the only path forward is to work with a new tenant:
        • Sign in to the Microsoft Entra admin center (https://entra.microsoft.com/) if possible.
        • Go to Entra ID → Overview → Manage tenants and create a new tenant.
        • Use the new tenant’s domain name or tenant ID in the Azure portal URL, for example:
          • https://portal.azure.com/<TenantId>
          • or https://portal.azure.com/<yourTenantName>.onmicrosoft.com
        • From the new tenant, configure new subscriptions and resources as needed.
    4. Additional practical workarounds seen in similar cases
      • If the account was created as a free Azure account and is blocked immediately when going to portal.azure.com, some users have:
        • Opened a clean browser session (e.g., Chrome incognito with all data cleared).
        • Gone to https://signup.azure.com and signed in with the same email.
        • Completed the flow to upgrade the existing free account to a pay‑as‑you‑go offer (often still with no charges if nothing is used), which restored access.
    5. If still locked out or unclear which tenant is affected
      • If there is only one global admin and that admin is locked out or cannot see the tenant, a support ticket is required so Microsoft’s internal Data Protection/Escalation team can investigate and assist.
      • Use the appropriate Microsoft support channel for Azure/Entra ID and provide the exact error AADSTS5000225 and any tenant identifiers available.

    References:

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.