Azure Tenant Blocked

Question

hello, My Microsoft account is blocked due to i was away for a While.

Authentication failed against tenant 'Default Directory': V2Error: invalid_grant AADSTS5000225: This tenant has been blocked due to inactivity. To learn more about tenant lifecycle policies, see https://aka.ms/TenantLifecycle Trace

Answer 1

Hello Faiz Shaikh,

Greetings! Thanks for raising this question in the Q&A forum.

The error AADSTS5000225 means Microsoft's tenant lifecycle management system has placed a sign-in block on your tenant due to inactivity. This is not a password or MFA issue the directory itself has been blocked. This occurs when a tenant has been inactive for over 200 days past the billing cycle, triggering Microsoft's process to remove inactive tenants.

This is time-critical. Administrators can request a tenant to be reactivated within 20 days of the tenant entering an inactive state. Tenants that remain in this state for longer than 20 days are deleted and are not recoverable.

The first thing you should do is check the Timestamp field in the AADSTS5000225 error message you received. This tells you exactly when the block was triggered. If it has been more than 20 days since that timestamp, unfortunately the tenant has been permanently deleted and cannot be restored. If it has been less than 20 days, act immediately using the steps below.

1. Try signing in with your Global Administrator account directly at the Azure portal. Go to https://portal.azure.com and attempt sign-in. In some cases the Global Admin account can still access the portal even when other accounts are blocked. If you get in, go to Billing > Subscriptions and check if any subscription shows as Expired or Disabled reactivating an associated subscription can lift the tenant block automatically.
2. Try reactivating via the Microsoft 365 admin centre. Navigate to https://admin.microsoft.com and sign in with your admin credentials. If access is possible, check for any subscription reactivation prompts under Billing > Your products.
3. Contact Microsoft Support by phone this is the required escalation path. The Q&A forum cannot reactivate tenants. To request reactivation, contact Microsoft via the global support phone numbers. When you call, tell them you have a tenant blocked with error AADSTS5000225 and you need tenant reactivation. Be ready to provide your tenant ID or domain name, your admin account username, and a brief business justification for restoring the tenant. You can find the Microsoft global support phone numbers at https://support.microsoft.com/contactus.
4. If you have another accessible Azure tenant or subscription, open a support ticket from there and reference your blocked tenant's ID in the case details. This is often the fastest way to get the request routed to the correct lifecycle management team.
5. Do not submit multiple duplicate support requests. Refrain from submitting another assistance request while your existing case is in process and until you receive a response with a decision. Duplicate cases slow the routing and escalation process.
6. Once reactivated, prevent this from happening again. Sign-in activity alone does not guarantee your tenant will not be treated as inactive the tenant is flagged inactive based on commercial activity, not user sign-ins. Keep at least one active subscription or license in the tenant to ensure it remains commercially active. Set a recurring calendar reminder to sign in and verify tenant health at least once a month if the tenant is used infrequently.

If this answer helps you kindly accept the answer which will help others who have similar questions.

Best Regards,

Jerald Felix.