A cloud-based identity and access management service for securing user authentication and resource access
The error AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra ID (Azure AD) tenant associated with the college email has been marked inactive and blocked, not that the individual account has done anything wrong.
When a tenant is inactive beyond Microsoft’s lifecycle thresholds, Microsoft’s commerce system blocks sign‑ins (error AADSTS5000225). If the tenant stays in this blocked state for more than 20 days, it is permanently deleted and cannot be recovered.
To proceed:
- Determine whether the tenant is still within the 20‑day reactivation window:
- If the tenant has been blocked for less than 20 days, it can still be reactivated by an administrator.
- If it has been blocked for more than 20 days, the tenant is deleted and cannot be restored; a different tenant or account must be used.
- If reactivation is needed and the 20‑day window has not passed:
- Contact the administrator of the college’s Microsoft 365/Azure tenant (typically the college IT department) and share the full error, including the timestamp, Trace ID, and Correlation ID.
- The tenant administrator must then contact Microsoft using the global support phone numbers to request tenant reactivation and wait for Microsoft’s decision. They should not open multiple support cases for the same issue.
- If the tenant is already beyond the 20‑day window or the college does not intend to reactivate it:
- The tenant will be or has been deleted and is not recoverable.
- To use Azure (including Azure for Students), a different active tenant is required (for example, another organizational tenant or a new one created by an administrator).
The fact that this is the first attempt to use the college email for Azure does not prevent the error: the block is on the tenant as a whole due to inactivity, not on the individual sign‑in history.
References: