Unable to Delete Tenant – Blocked by Microsoft Enterprise Applications

Question

Unable to Delete Tenant – Blocked by Microsoft Enterprise Applications

Navneet Mundra 5

We are trying to delete our tenant XX Technologies Ltd. but are unable to proceed. The portal shows the following error:

Unable to delete tenant XX Technologies Ltd.. Known issues exist where some enterprise applications are not capable to delete within the portal.
What we’ve already done Removed all subscriptions Removed all custom domains (only the *.onmicrosoft.com domain remains) Deleted all users except one Global Administrator Deleted all groups Removed all licenses

Deleted all **non-Microsoft enterprise applications through powershell
**
But for Microsoft system-owned apps (Exchange Online, Teams, SharePoint, etc.) we receive 403 Forbidden errors, which aligns with the known limitation.

Our ask

Are there any documented steps to remove these system-owned Microsoft apps, or is the only option to raise a Support Request to Microsoft to force-clean them from the backend? Has anyone else faced this issue recently, and how did you resolve it? Thanks in advance for any guidance.

Anonymous

2025-09-05T06:49:17.64+00:00
Hello @Navneet Mundra

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I do understand that you're facing issue while trying to delete the tenant XX Technologies Ltd. I understand that you've already completed most of the required steps, including:

Removing all subscriptions and custom domains

Deleting all users except one Global Administrator

Removing all groups and licenses

Successfully deleting all non-Microsoft enterprise applications via PowerShell.

However, you are receiving 403 Forbidden errors when trying to remove Microsoft system-owned apps such as Exchange Online, Teams, and SharePoint. A few enterprise applications can't be deleted in the Microsoft Entra admin center and might block you from deleting the tenant.

Use the following PowerShell code to remove those applications:

Install the Microsoft Graph PowerShell module by running the following command:

Install-Module Microsoft.Graph

Install the Az PowerShell module by running the following command:

Install-Module -Name Az

Create or use a managed administrative account from the tenant that you want to delete. For example: ******@tenanttodelete.onmicrosoft.com.

Open PowerShell and connect to Microsoft Entra ID by using admin credentials with the following command: Connect-MgGraph

Run the following commands to set the tenant context. DO NOT skip these steps or you run the risk of deleting enterprise apps from the wrong tenant.

Clear-AzContext -Scope CurrentUser

Connect-AzAccount -Tenant <object id of the tenant you are attempting to delete>

Get-AzContext

Run the following command to remove any enterprise apps that you can't delete:

Get-MgServicePrincipal | ForEach-Object { Remove-MgServicePrincipal -ObjectId $_.Id }

Run the following command to remove applications and service principals:

Get-MgServicePrincipal | ForEach-Object { Remove-MgServicePrincipal -ServicePrincipalId $_.Id }

Run the following command to disable any blocking service principals:

$ServicePrincipalUpdate =@{ "accountEnabled" = "false" } Get-MgServicePrincipal | ForEach-Object { Update-MgServicePrincipal -ServicePrincipalId $_.Id -BodyParameter $ServicePrincipalUpdate }

Sign in to the Microsoft Entra admin center as a Global Administrator, and remove any new admin account that you created in step 3.

Retry tenant deletion from the Microsoft Entra admin center.

Reference Document: https://learn.microsoft.com/en-us/entra/identity/users/directory-delete-howto

Kindly let us know if this helps or need more assistance on this issue. Thanks
Navneet Mundra 5 Reputation points

2025-09-05T06:57:39.25+00:00

Hi , As I mentioned earlier,I already performed all the steps you mentioned still not able to delete the tenant, if you have something new which is not available on internet pls post

2 answers

Your answer

Navneet Mundra 5 Reputation points

2025-09-05T06:57:39.25+00:00

Hi , As I mentioned earlier,I already performed all the steps you mentioned still not able to delete the tenant, if you have something new which is not available on internet pls post

Answer 1

All options tried using AI assistant-No luck..

Domain: yourdomain.co.za Tenant state: unmanaged / viral DNS host: MWEB ISP (no DNS access)

We confirm that no production Microsoft services depend on this tenant.

Entra ID support / Data Protection team

An unmanaged (viral) Microsoft Entra / Azure AD tenant was created automatically when a user signed up for a Microsoft service.

Unmanaged (viral) Azure AD / Microsoft Entra tenant created from ISP domain. Domain owner cannot add DNS records. Request: manual tenant cleanup / removal of unmanaged directory.

ONLY OPTION IS FOR BACKEND DOMAIN DETACHMENT/ TENANT CLEANUP - WORK .SCHOOL ACCOUNT

Answer 2

I would advise you to create a support ticket.
There are Applications that are owned by Microsoft-referred to as 1st Party and therefore the Service Principals may be a blocker to the tenant deletion.
In your tenant, on the main menu- find the Help+Support option.
Linking related questions for your reference
https://learn.microsoft.com/en-us/answers/questions/730895/azure-deletion-of-system-application-is-not-allowe
https://techcommunity.microsoft.com/discussions/azure/unable-to-delete-tenant/4421862

Share via

Unable to Delete Tenant – Blocked by Microsoft Enterprise Applications

2 answers

Your answer