tenantaccessblocked

Question

UTC Date: 2026-01-27T17:07:52.338Z
Client Id: 51F46F5C8E52446B99756DC52E7C7F6D
Session Id: 197ef562-11c8-474e-a94e-f38d7a062ab3
Client Version: 20260116004.03
BootResult: configuration
Back Filled Errors: Unhandled Rejection: Error: 500:undefined|undefined:undefined
err: Microsoft.Exchange.Data.Storage.TenantAccessBlockedException
esrc: StartupData
et: ServerError
estack: Error: 500
    at Object.w [as createStatusErrorMessage] (https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a1ea87aa.js:2:8755)
    at https://res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.a1ea87aa.js:2:41511
st: 500
ehk: X-OWA-Error
efe: CH2PR15CA0004
ewsver: 15.20.9564.6
emsg: TenantAccessBlockedError

Answer 1

The error message you are encountering, TenantAccessBlockedException, indicates that access to the tenant is blocked, likely due to inactivity. When a tenant becomes inaccessible due to inactivity, it can generate errors like the one you are seeing, which is a common response when trying to access a blocked tenant.

To resolve this issue, the tenant administrator can request reactivation of the tenant within 20 days of it entering an inactive state. If the tenant is not reactivated within this period, it will be deleted and cannot be recovered. For further assistance, the administrator should reach out to Microsoft support.

If you are an application owner or developer, it is advisable to minimize authentication requests to this deactivated tenant until it is reactivated.

---

References:

• Tenant inaccessible due to inactivity

Answer 2

I use the account daily, billing is up to date.

Answer 3

Hi @Alexander Rau

Thank you for reaching out to Microsoft Q&A forum. 

The error you're seeing - TenantAccessBlockedException - typically appears when a Microsoft 365 tenant has been blocked at the organization level. This can happen if:

• Your Microsoft 365 subscription was temporarily suspended due to an expired domain, billing issue, or past‑due balance, or
• You recently renewed your domain, but the update hasn’t fully propagated through Microsoft’s backend systems yet (this can take up to 24 hours).

Because this is an organization‑level block, it must be addressed by your Microsoft 365 Global Admin role (IT admin); individual users cannot resolve it by reinstalling apps, clearing cache, or changing local settings.

To proceed, please have your Global Administrator complete the following steps:

1. Verify and resolve any billing‑related issues

• Sign in to the Microsoft 365 Admin Center.
• Navigate to Billing > Bills & payments and settle any overdue balance.
• Then go to Billing > Your products, select the Microsoft 365 or Exchange Online subscription, and check the status.
  • If the subscription shows Suspended or Disabled, select Reactivate subscription and follow the prompts (including updating the payment method if needed).

Since you’ve confirmed your billing is up to date, you can skip Step 1 and continue with the remaining steps.

2. Check for compliance‑related holds

• Review the Microsoft 365 Compliance portal to ensure there are no compliance blocks or enforcement actions impacting tenant availability.

Note: After clearing overdue balances or reactivating a subscription, Microsoft may take 1–3 hours (up to 24 hours) to fully restore services. During this time, you may still see the error: “Tenant is blocked with Microsoft.Exchange.Data.Storage.TenantAccessBlockedException.

 

3. Use PowerShell to verify and unblock accounts

Your Global Admin can run the following commands: Verify if your SKU (license) is Active:

Connect-MsolService

Get-MsolAccountSku

• Run:
• Set-MsolUser -UserPrincipalName ******@domain.com -BlockCredential $false
• This unblocks the user (if individual account was locked).

If a suspension/block is confirmed but cannot be resolved via the admin portal, your Global admin should submit a ticket with Microsoft support.  

A technical support engineer can initiate a remote session to review the issue in detail, confirm the backend configurations, and run any required synchronization tools to help resolve the problem. If additional expertise is needed, they can involve the appropriate specialized team for deeper investigation.

Here’s what your Microsoft 365 Global Admin (IT Admin) should do next:    

• Your Global Admin should open a support ticket with Microsoft to receive advanced diagnostics and technical assistance. Detailed instructions are available here: Get support - Microsoft 365 admin.      
• If phone assistance is preferred, your admin can use the following link to find the correct contact number: Global Customer Service phone numbers - Microsoft Support   
• If your subscription is managed through a Microsoft partner or reseller, they can also assist with opening a support request and liaising with Microsoft on your behalf.   

Note: If you are not the Global Administrator, please work with your Microsoft 365 Global Admin to complete these steps, as only they have the required permissions.

I apologize for redirecting you the related team support, as the moderators in this community don’t have access to the detailed system needed to troubleshoot this effectively due to privacy and security constraints. But Microsoft’s support team has elevated permissions and access to backend systems that we, as community moderators, do not. This ensures your issue is handled with the right tools and expertise and helps you get a faster resolution.    

I hope this information helps. Please try the steps and let me know whether they resolve the issue. If the problem persists, we can work together to find a solution.

Should you have any questions or need further assistance, feel free to share them in the comments so I can continue to support you.

If you found this post helpful, I encourage you to mark it as an accepted solution. This will make it easier for other community members with similar questions to find answers quickly.

Thank you for your kindness and for contributing to the forum. 

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 4

Hi @Alexander Rau,

Thank you for the confirmation.

If you're the only admin, in this situation, the Microsoft Data Protection Team has tools and processes in place to unblock and regain access to administrator accounts. You can try reaching out to our Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support.

Please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While we do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues, we’ll continue doing our best to support you within the scope of our responsibilities.   

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:     

IVR: What kind of problem are you concerned about?  

You: Authenticator.   

A: What products do you use?  

You: Office 365 for business.

Verification: Education or company account?  

You: For companies

IVR: Are you an administrator?    

You: Yes.

IVR: Are there any other administrators in your organization?    

You: No.

IVR: Do you need a... Service request?    

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.

If you cannot reach a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription.

To set up a new tenant, please follow these steps:

Visit Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

Follow the guided setup process to create a new account for a new tenant.

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to tenantaccessblocked error, which prevents me from access into my account. I’m the global admin, but I’m locked out.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support.

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance.