Domain locked in inaccessible tenant

Question

I am the legal owner of a domain. 

This domain is currently locked in an old Microsoft 365 tenant that I cannot access anymore

The tenant was operated by a CSP, but the CSP cannot release the domain.

This is a Domain Ownership Dispute and a Data Protection request under GDPR (Articles 16, 17, 21).

I request that Microsoft removes my domain from the inaccessible tenant so I can use it again.

 

I can provide:

 

– DNS TXT verification (That has already happened; we have already set the TXT entry for the setup ([Moderator note: personal info removed]).

– Proof of domain ownership

– Company registration documents (if needed)

Answer 1

Dear Markus Walter,

Thank you for posting your question in the Microsoft Q&A forum. 

Based on your description, you are unable to use a domain that is currently registered to an old tenant managed by a CSP. You are correct that in situations like this, engagement with the Data Protection Team is required.

However, Microsoft Q&A moderators do not have the necessary access to escalate cases directly to the Data Protection Team. You will need to create a support ticket from the Microsoft 365 Admin Center as a Global Administrator for the case to be properly routed. 

There are two possible approaches to remove the domain: 

1/ You may create a support ticket requesting domain removal. Within the ticket, you will need to provide proof of domain ownership and company registration documents. This will allow the case to be routed to the Data Protection Team, who will then contact you with the next steps. 

2/ Alternatively, you may attempt to regain access to the old tenant by raising a support ticket for a tenant lockout scenario to Data Protection Team. Once access is restored, you can follow the official Microsoft documentation to remove the domain from that tenant. 

To raise a support ticket, you can follow the below:

• Go to the admin center
• On the bottom right side of the page, select Help & support.
  • 

I hope you can get your domain release soon. 

---

If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Microsoft must remove the domain from the existing tenant, and this can only be handled through a formal support/data protection process; it cannot be done via forums or self-service.

Use the following path based on the documented guidance for domain disputes and inaccessible tenants:

1. Treat this as a domain dispute and tenant access issue
   • A domain that is already verified in another Microsoft 365 tenant cannot be added to a new tenant until it is removed from the original one.
   • When the domain is held in a different tenant and cannot be removed by the current admin/CSP, the documented next step is to open a support request with Microsoft from the tenant where the domain is to be added.
2. Open a support request from the target tenant
   • Sign in to the Microsoft 365 tenant where the domain should be added (the new/active tenant).
   • As a Global Administrator, open a service request with Microsoft Support from that tenant’s admin portal.
   • Clearly state that this is a domain dispute/domain locked in another Microsoft 365 tenant and that the old tenant is inaccessible.
   • Provide:
     • The domain name.
     • Proof of domain ownership (registrar records, invoices, WHOIS where applicable).
     • Confirmation that DNS TXT verification is already in place.
     • Any company registration documents that support ownership.
   • Reference that the domain is currently held in another Microsoft 365 tenant that cannot be accessed and that the CSP cannot remove it.
3. If unable to remove the domain from the current tenant
   • For domain disputes where the domain is held in a different Microsoft 365 tenant and neither the customer nor partner can remove it, the documented guidance is:
     • The end-customer Global Administrator (of the tenant where the domain should be added) or the partner must submit a support request to Microsoft from that tenant.
   • Microsoft’s Data Protection/Support teams then validate ownership and can assist with releasing the domain from the inaccessible tenant so it can be added to the new tenant.
4. If locked out of the old tenant entirely
   • If there is still a need to regain access to the old tenant (for example, to manage or remove the domain directly), a support ticket must be opened so the Data Protection Team can help:
     • Reset credentials of an administrator account, or
     • Help claim ownership of the tenant, if applicable.
   • This is also done via a support ticket and, where necessary, via the published global customer service phone numbers.
5. Important constraints
   • Microsoft will not allow the same custom domain to be verified in more than one Microsoft Entra tenant at the same time.
   • Once the domain is deleted from the old tenant and added/verified in a new tenant, it cannot be re-added to the old tenant if someone else later verifies it in a different tenant.

In summary, the next concrete step is to open a support request from the Microsoft 365 tenant where the domain is intended to be used, present DNS TXT verification and ownership evidence, and have Microsoft Support/Data Protection handle the domain dispute and removal from the inaccessible tenant.

---

References:

• Preventing tenant lockouts
• Discover your Microsoft cloud footprint FAQ
• Managing custom domain names in your Microsoft Entra ID
• Tenant inaccessible due to inactivity
• You get an error message when you try to remove a domain from Microsoft 365