Microsoft Security | Microsoft Entra | Microsoft Entra ID
A cloud-based identity and access management service for securing user authentication and resource access
Cannot Verify Custom Domain, possibly because of previous registration
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 71%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDW%3C/text%3E%3C/svg%3E)
David Webb
0
Reputation points
I am trying to register a domain I have just acquired. I have added the required TXT record to the domain but even after 24 hours the verification process fails.
I think the problem is that the domain was previously used with a Microsoft product and the prior owner has not deregistered it. I do not know who the prior owner was so cannot ask them to fix this.
What do I need to do here?
Microsoft Security | Microsoft Entra | Microsoft Entra ID
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 99%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
Rukmini 43,915 Reputation points Microsoft External Staff Moderator2026-04-06T07:31:09.85+00:00 Hello David Webb
Please share the details over the private messages so that we can assist you further.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 28.000000000000004%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECK%3C/text%3E%3C/svg%3E)
Catherine Kyalo 3,180 Reputation points Microsoft Employee2026-04-21T15:38:15.23+00:00 You are unable to verify a custom domain in Microsoft Entra ID (Azure AD) even after adding the TXT record correctly. This is most likely because the domain is still registered in another Microsoft tenant by the previous owner. A custom domain can only be verified in one tenant at a time across all of Microsoft's cloud services.
Troubleshooting Steps
1. Confirm the TXT record is correct
Use a DNS lookup tool to verify your TXT record is published:
- Go to https://mxtoolbox.com/TXTLookup.aspx
- Enter your domain name and verify the
MS=msXXXXXXXXTXT record matches what Azure shows
2. Request a domain takeover (Admin Takeover)
Since the domain was previously registered by another tenant, you can perform a domain takeover:
- Sign in to the Microsoft Entra admin center
- Navigate to Identity > Settings > Domain names > + Add custom domain
- Add the domain and get the TXT record
- Add the TXT record to your DNS (which you've already done)
- If the domain is registered in an unmanaged (viral) tenant, Microsoft will allow you to perform an admin takeover
3. If the domain is in a managed tenant
If the previous owner had a fully managed tenant:
- You will need to contact Microsoft Support to request a forced domain removal from the other tenant
- Go to Azure Portal > Help + Support > New support request
- Select Microsoft Entra ID > Domain Management as the issue type
- Explain that you own the domain (provide proof of ownership such as domain registrar documentation) and request it be released from the other tenant
4. Verify you own the domain
Microsoft Support may ask for proof of domain ownership:
- Domain registrar records showing your name/organization
- Ability to add specific DNS records on demand
- WHOIS records
Reference Documentation
Sign in to comment
Sign in to answer