Microsoft 365 E3 Developer tenant deauthenticated - AADSTS5000224 - all admins inaccessible

Question

My Microsoft 365 E3 Developer tenant appears to be unexpectedly deauthenticated.

Tenant name:

[Moderator note: Personally Identifiable Information removed]

Error:

AADSTS5000224

The tenant you are trying to access has been deauthenticated and is no longer available.

Symptoms:

• All administrator accounts cannot sign in
• Microsoft 365 Admin Center inaccessible
• Microsoft Entra admin center inaccessible
• SharePoint domain returns NXDOMAIN
• Outlook mailboxes appear removed from server
• Office desktop apps still show Microsoft 365 Apps for enterprise locally
• Developer E3 subscription is not expired

I have invoices, tenant records, domain ownership proof, Trace ID and Correlation ID available privately.

How can I reach the tenant recovery / Microsoft 365 / Entra backend team when the admin center itself is inaccessible?

Answer 1

Hi @omimoe,

Good day, and I appreciate how clearly you outlined your concern.  

Based on your description, the error AADSTS5000224 is generally associated with a tenant-wide deauthentication or backend block. In this state, authentication is disabled at the tenant level, which prevents access to services such as the Microsoft 365 Admin Center, Microsoft Entra admin center, Azure portal, Exchange, and SharePoint. Because authentication itself is blocked, this scenario cannot typically be resolved through standard troubleshooting steps like password reset, MFA reset, browser cleanup, or configuration changes within the tenant, especially when all administrator accounts are affected.

To move toward a resolution, I suggest the following steps: 

Option 1: Contact Microsoft Data Protection Support by Phone (Primary Method)       

Since the affected tenant’s admin center is inaccessible, the next essential step is to involve the Microsoft Data Protection team, as they are the only team authorized to help recover an admin account in these circumstances. You can start by calling your regional Microsoft support hotline here: Customer service phone numbers - Microsoft Support.

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.       

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:      

Here are some tips and an example of a prompt to help you reach out the Microsoft Data Protection team support more effectively:   

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)         

In some countries, it is an automated conversation like:  

IVR: What kind of problem are you concerned about?        

You: Authenticator.        

IVR: What kind of product do you use?        

You: Office 365 for business.        

IVR confirmation: education or company account?        

You: For companies        

IVR: Are you an administrator?        

You: Yes.        

IVR: Do you have another administrator in your organization?        

You: No.        

IVR: Do you need a... Service request? 

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team. 

3/ Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method)   

If you still cannot reach to a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.         

  

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn   

  

I truly hope this helps you regain access to your account quickly. Even though I can't directly intervene, directing you to the correct and specialized support is the most effective help I can provide from my position.  

Thank you for your kindness and contributions to the forum.  

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".        

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

The tenant is in a deauthenticated / inaccessible state, so recovery must be handled directly by Microsoft support; it cannot be fixed from the admin portals.

For this scenario:

1. Treat the error as an inaccessible tenant due to inactivity/deactivation
   • Error messages like AADSTS5000225 (tenant blocked due to inactivity) and similar deactivation errors are expected when a tenant is made inaccessible.
   • When a tenant is in this state, all admin sign-ins and access to Microsoft 365 and Entra admin centers are blocked.
2. Contact Microsoft support immediately to request reactivation
   • Administrators can request tenant reactivation only within a limited window (20 days) after the tenant enters the inactive/inaccessible state; after that, the tenant is deleted and not recoverable.
   • Because the admin center is inaccessible, use out-of-band support channels:
     • Use the global customer service / Microsoft 365 for business support phone numbers listed in the documentation:
       • global support phone numbers
       • Find Microsoft 365 for business support phone numbers by country or region
   • Clearly state that:
     • The tenant is a Microsoft 365 E3 Developer tenant.
     • The error is AADSTS5000224 indicating the tenant has been deauthenticated / is no longer available.
     • All admin accounts are locked out and both Microsoft 365 and Entra admin centers are inaccessible.
   • Provide the supporting information already collected (tenant name, domain, Trace ID, Correlation ID, invoices, domain ownership proof) to the support engineer so the backend / data protection team can validate ownership and assess whether the tenant can be reactivated.
3. Avoid duplicate requests while the case is in progress
   • After opening a support case, do not submit multiple assistance requests for the same tenant; wait for the decision and follow-up from Microsoft.
4. If the tenant cannot be reactivated
   • If the tenant remains in the inaccessible state beyond the allowed period, it is deleted and not recoverable.
   • In that case, data is removed according to Microsoft’s data protection policies, and a new tenant would be required if services are still needed.

There is no self-service or portal-based path to reach the “tenant recovery / Microsoft 365 / Entra backend team” in this state; the only supported path is via Microsoft support (phone or equivalent support channel), which will route the case internally (for example, to the Data Protection team) as needed.

---

References:

• Tenant inaccessible due to inactivity
• Tenant access recovery
• Preventing tenant lockouts
• Delete a tenant in Microsoft Entra ID
• How to fix the error message "Your network administrator has blocked access"
• "Sorry, but we're having trouble signing you in" when a user signs in to Microsoft 365, Azure, or Intune
• Tenant inaccessible due to inactivity - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A