Entra ID tenant blocked due to inactivity - AADSTS5000225 error, need tenant reactivation

Question

Entra ID tenant blocked due to inactivity - AADSTS5000225 error, need tenant reactivation

Steve Lysik 0

Hello,

My Microsoft Entra ID tenant has been blocked due to inactivity and I am receiving the following error when trying to access the Entra admin center (entra.microsoft.com):

Error: AADSTS5000225 - "This tenant has been blocked due to inactivity."

Tenant details:

Tenant ID: PII
- Primary domain: PII
- - Admin account: PII
- Impact:
- - - Unable to access the Microsoft Entra admin center
- - Azure Databricks workspace (PII.azuredatabricks.net) is experiencing session timeouts because Azure AD token refresh requests are being rejected
  - - The Azure portal (portal.azure.com) is still accessible
  - Steps already tried:
  - - Signed into the Azure portal using the tenant-scoped URL: PII(as suggested in similar Q&A posts), but the Entra admin center still shows the blocked error
  - Could a Microsoft engineer please reactivate this tenant? This is an active tenant used for Azure Databricks workloads with a Visual Studio Enterprise Subscription.
- Thank you.

Thanmayi Godithi 11,905 Reputation points Microsoft External Staff Moderator

2026-03-13T09:35:57.9833333+00:00

Hello @Steve Lysik,

The error message you encountered indicates that your tenant has been inactive for over 200 days past the billing cycle, triggering Microsoft’s effort to remove inactive tenants. When a tenant remains inactive for this period, the OMS commerce system imposes a login block (AADSTS5000225). Twenty days after the login block is applied, the tenant is permanently deleted.

Tenant inaccessible due to inactivity

If you plan to unblock your inactive tenant, it’s essential that it has been blocked for less than 20 days. After the 20-day period, the tenant is permanently deleted and cannot be recovered.

If it has been less than 20 days since the block, please provide the details requested over private message.

Note: If it's a test tenant, please re-create a new tenant for testing purposes.

Quickstart: Create a new tenant in Microsoft Entra ID

Do let me know if you have any queries, we are happy to assist you further.

1 answer

Your answer

Thanmayi Godithi 11,905 Reputation points Microsoft External Staff Moderator

2026-03-13T09:35:57.9833333+00:00

Hello @Steve Lysik,

The error message you encountered indicates that your tenant has been inactive for over 200 days past the billing cycle, triggering Microsoft’s effort to remove inactive tenants. When a tenant remains inactive for this period, the OMS commerce system imposes a login block (AADSTS5000225). Twenty days after the login block is applied, the tenant is permanently deleted.

Tenant inaccessible due to inactivity

If you plan to unblock your inactive tenant, it’s essential that it has been blocked for less than 20 days. After the 20-day period, the tenant is permanently deleted and cannot be recovered.

If it has been less than 20 days since the block, please provide the details requested over private message.

Note: If it's a test tenant, please re-create a new tenant for testing purposes.

Quickstart: Create a new tenant in Microsoft Entra ID

Do let me know if you have any queries, we are happy to assist you further.

Answer 1

The error AADSTS5000225 indicates that the Microsoft Entra tenant is blocked due to inactivity. When a tenant is made inaccessible for inactivity, it enters a 20‑day window during which an administrator can request reactivation. After 20 days in this state, the tenant is permanently deleted and cannot be recovered.

To attempt reactivation of the tenant:

Confirm that the block occurred less than 20 days ago. If more than 20 days have passed since the tenant became inaccessible, it is deleted and cannot be restored.
As the tenant administrator, contact Microsoft support directly and request tenant reactivation:
- Use the global support phone numbers listed in the documentation to open a support case and provide the tenant ID and primary domain.
- Do not open multiple cases for the same issue; wait for a response and decision on the initial case.
While the tenant is blocked, authentication requests (including token refreshes for Azure Databricks) to that tenant will continue to fail until the tenant is reactivated.

If the tenant has already been in the blocked state for more than 20 days, it is deleted and cannot be reactivated. In that case, a new tenant must be created and workloads (including Azure Databricks) reconfigured to use the new tenant.

Note: Access to the Azure portal using a tenant‑scoped URL does not override a tenant inactivity block; only Microsoft support can reactivate the tenant within the allowed window.

References: