How to fix "This tenant has been blocked due to inactivity."

Hello Carlos Flamenco,

Thanks for raising this question in Azure Q&A forum.

The error AADSTS5000225: "This tenant has been blocked due to inactivity" means Microsoft's tenant lifecycle management system has flagged your tenant as inactive and imposed a login block. This is a time-critical situation you have only 20 days from when the block was applied to request reactivation before the tenant is permanently deleted and unrecoverable.

Why this happens

Microsoft blocks tenants that have been inactive for an extended period (typically 200+ days past the billing cycle) as part of their tenant lifecycle cleanup process. Warning emails are sent to the Global Administrator's registered email before the block is applied check your inbox and spam folder for any prior notifications from Microsoft.

Step 1 Check how long ago the block was applied (critical first step)

Look at the Timestamp field in the AADSTS5000225 error message. This tells you exactly when the block was triggered. If it has been more than 20 days since that timestamp, unfortunately the tenant has already been permanently deleted and cannot be recovered. In that case, you will need to create a new tenant from scratch.

If it has been less than 20 days, proceed immediately with the steps below.

Step 2 Try signing in as Global Administrator

In some cases, standard user accounts are blocked but the Global Administrator account (the account used to originally create the tenant) can still access the Azure Portal or Microsoft 365 Admin Center. Try signing in at portal.azure.com or admin.microsoft.com with your Global Admin credentials.​

If you get in, go to Billing → Subscriptions, check if any subscription shows as Expired or Disabled, and click Reactivate. Reactivating an associated subscription often lifts the tenant block automatically.

Step 3 Contact Microsoft Support immediately

If you cannot sign in at all, contact Microsoft Support right away to request tenant reactivation. Provide the following details which are required for the reactivation request:

• Tenant ID (visible in the error message URL or from a previous Azure Portal session)

Trace ID from the AADSTS5000225 error

Correlation ID from the error

Timestamp of the failure

Business impact — brief description of why the tenant needs to be restored

You can reach support even without portal access at https://support.microsoft.com/contactus — select Azure → Can't sign in and follow the tenant verification process.

Do not submit multiple support requests while waiting — this can delay processing.

Step 4 What happens after reactivation

Once Microsoft unblocks the tenant, you will receive a notification and can sign in again within a few hours. After regaining access, immediately:

Sign in and verify all resources are intact

Reactivate any expired subscriptions under Billing → Subscriptions

Set up activity alerts in Azure Monitor to prevent future inactivity

Ensure at least one user signs in to the tenant regularly (once every 30 days minimum)

To prevent this from happening again

Set up a scheduled task or calendar reminder to sign in to your Azure tenant at least once every 30 days if it's not actively used. Also ensure your Global Administrator's email address is current so Microsoft's warning notifications reach you before any future blocks are applied.

If it helps kindly accept the answer.

Best Regards,

Jerald Felix