TenantAccessBlockedError indicates that access to the tenant or account is blocked by Microsoft or by organizational policy, even if other services still appear to work.
Based on the available information, the following actions are supported:
- If this is an Outlook.com / Microsoft account scenario
- The account may be temporarily blocked due to unusual sign-in activity or suspicious behavior.
- Go to the Sign-in Helper to unblock the account: use the Sign-in Helper entry point described in the Outlook.com unblock article and follow the on-screen steps to verify identity and remove the block.
- If the account cannot be unblocked using the code or password change, follow the guidance in When you can't sign in to your Microsoft account from the same article.
- If the account is part of an organization (work or school)
- The tenant or account may be blocked by security policy (for example, tenant restrictions or mobile/product access blocks).
- Only the organization’s administrator can remove such a block. Contact the work or school IT administrator with:
- The exact error name:
TenantAccessBlockedError/TenantAccessBlockedException. - The time and approximate UTC timestamp of the failure.
- The fact that other services (OneDrive, Calendar via BusyCal, other Office apps) still work, but Outlook on the web fails.
- The exact error name:
- The admin must review tenant status and any security policies (such as tenant restrictions or product access blocks) and request reactivation/unblock from Microsoft if the tenant or account has been blocked.
- If sign-in attempts have been rate-limited or blocked
- Multiple failed sign-in or recovery attempts can cause temporary lockouts.
- Wait at least 24 hours without additional sign-in or recovery attempts, then try again from a familiar device and network.
- If still blocked, follow the Outlook.com unblock flow and, if applicable, submit the account reinstatement request referenced in the Outlook.com unblock guidance.
If the tenant itself has been marked inactive or blocked, only a tenant administrator can work with Microsoft support to reactivate it; end users cannot clear a TenantAccessBlockedError directly.
References: