Share via

Microsoft 365 Apps activation error codes 0xCAA70007 and 0xCAA80000

  • Article
  • Applies to:
    Microsoft 365

When you try to activate Microsoft 365 Apps, you might encounter the error "We are unable to connect right now", followed by one of the following error codes:

  • 0xCAA70007

  • 0XCAA80000

Try the following troubleshooting methods to solve the problem.

Note Some of these troubleshooting methods can only be performed by a Microsoft 365 admin. If you aren’t an admin, see How do I find my Microsoft 365 admin?

Activating Microsoft 365 on Windows 8.1 or earlier

To activate Microsoft 365 Apps, TLS 1.2 must be enabled on the operating system. Some older operating systems, such as Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012, require an update to enable TLS 1.2 by default.

Important Running Microsoft 365 Apps on these older operating systems isn't supported. For more information, see End of support resources for Office.

  1. If you are running Windows 7 or Windows Server 2008, make sure that Service Pack 1 is installed.
  2. Enable TLS 1.2 as the default protocol by using this easy fix, and then restart the device.
  3. From Start, select Control Panel > Internet options > Advanced settings.
  4. If TLS 1.2 isn’t checked, check it, then select Apply and OK.
  5. Restart the device, and then try activating Microsoft 365 again.

Update Windows
  1. From Start, type check for updates, and select Check for updates from the search results.
  2. Select Check for updates.
  3. Download and install available updates.
  4. Restart the device and try to activate Microsoft 365 again.

Update Microsoft 365

It is recommended that Microsoft 365 be configured to install updates automatically. To check for updates, open an Office app (such as Word), select File, and then select Account. Select Update options, and then select Update now.

Reset Microsoft 365 activation state

Run the Microsoft Support and Recovery Assistant (SaRA) to reset the Microsoft 365 activation state.

For manual steps or more information, see Reset Microsoft 365 Apps for enterprise activation state.

Check whether you're behind a proxy server

Are you behind a proxy server? If you're not sure, ask your administrator. If so, you (or your administrator) might have to change the proxy settings for Windows HTTP clients. To do this, follow these steps:

  1. Open a Command Prompt window as an administrator. From Start, type cmd.exe in the search box, right-click Command Prompt in the list, and then select Run as administrator.
  2. Type the following command, and then press Enter: netsh winhttp set proxy < Address of proxy server >

You need to allow the URLs and IP addresses in this list.

You can also allow Microsoft 365 to bypass the proxy server by creating a PAC file. For more information about creating a PAC file, see Managing Microsoft 365 endpoints.

Check whether you're behind a firewall

Are you behind a firewall? If you're not sure, ask your administrator. If you're behind a firewall, it might have to be configured to enable access to the following:

  • officecdn.microsoft.com
  • ols.officeapps.live.com/olsc
  • activation.sls.microsoft.com
  • odc.officeapps.live.com
  • crl.microsoft.com/pki/crl/products/MicrosoftProductSecureServer.crl
  • crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl
  • crl.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl
  • www.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl
  • go.microsoft.com
  • Office15client.microsoft.com
  • login.windows.net
  • login.microsoft.com
  • login.microsoftonline.com
  • crl.microsoft.com
  • cdn.odc.officeapps.live.com
  • ajax.aspnetcdn.com
  • officeclient.microsoft.com
  • aadcdn.msauth.net
  • aadcdn.msauthimages.net
  • enterpriseregistration.windows.net

Each firewall will have a different method to enable access to these URIs. Check your software's documentation for instructions or ask your administrator to do this for you.

For more information about Microsoft 365 Apps for enterprise URLs and IP addresses, see the following Microsoft article: Microsoft 365 URLs and IP address ranges.

Reset Winsock
  1. Open a Command Prompt window as an administrator. From Start, type cmd.exe in the search box, right-click Command Prompt in the list, and then select Run as administrator.
  2. Type the following command, and then press Enter: netsh int ip reset
  3. Type the following command, and then press Enter: netsh winsock reset
  4. Restart the device.
  5. Try to activate Microsoft 365 again.

Disable IPv6
  1. Right-click the network icon in the System Tray.
  2. Select Open Network & Internet Settings.
  3. Select Change adapter options.
  4. Right-click your network connection, and then select Properties.
  5. Uncheck Internet Protocol version 6.
  6. Try to activate Microsoft 365 again.
  7. Re-enable IPv6.

Make sure required services are running
  1. From Start, type services.msc, and then select the Services app.
  2. Make sure that the following services are all running:
    • Network Connected Devices Auto-Setup
    • Network List Service
    • Network Location Awareness
    • Windows Event Log
  3. If any of these services is not running, right-click the service and select Start.
  4. If you have a problem starting the service, run the System File Checker using the following steps:
    • From Start, type cmd. Right-click Command Prompt in the search results and select Run as administrator.
    • At the command prompt, type sfc /scannow
    • When the scan completes, restart the device.
  5. When all the services listed under step 2 are running, try activating Microsoft 365 again.

Remove Office credentials
  1. From Start, type credential manager, and then select Credential Manager from the search results.
  2. Select Windows credentials.
  3. If there are any credentials for MicrosoftOffice16, select the arrow next to them and then select Remove.
  4. Close Credential Manager.
  5. From Start, select Settings (the gear icon) > Accounts > Access work or school.
  6. If the account you use to sign in to office.com is listed there, but it isn’t the account you use to sign in to Windows, select it, and then select Disconnect.
  7. Restart the device and try to activate Microsoft 365 again.

Change proxy, firewall, or Group Policy settings

An IT administrator might be able to solve this problem.

First check your firewall or proxy setting. Add an explicit "allow" rule that contains "MSOIDCRL" in your firewall or proxy for agents. For example, set up the rules to first allow MSOIDCRL and to then deny Internet Explorer 6. For more information about how to configure firewall rules, see your firewall documentation.

If the issue persists, check if NCSI active probe is disabled. In this case, enable NCSI active probe by using the registry or Group Policy Objects (GPOs).

To use the registry to enable NCSI active probe, configure one of the following registry keys:

Important

Serious problems might occur if you modify the registry incorrectly. Before you modify it, back up the registry for restoration in case problems occur.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet\EnableActiveProbing

  • Type: DWORD
  • Value: Decimal 1 HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator\NoActiveProbe
  • Type: DWORD
  • Value: Decimal 0

To use Group Policy to enable NCSI active probe, configure the following GPO: Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings\Turn off Windows Network Connectivity Status
Indicator active tests
Value: Disabled

Additional troubleshooting

If the above troubleshooting methods don’t solve the problem, try the troubleshooting methods in the following articles: