admin account to Azure is blocked?

Truong, Ruby 0 Reputation points
2026-04-18T15:50:46.14+00:00

how i can unblocked my account or where/who i can contact?

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-04-18T15:51:00.97+00:00

    If the Azure admin account is blocked, the unblocking options depend on why it is blocked and whether there are other admins in the tenant.

    1. If the tenant itself is blocked due to inactivity (error AADSTS5000225)
      • When seeing an error like AADSTS5000225: This tenant has been blocked due to inactivity, the tenant has been marked inactive.
      • Administrators can request reactivation only within 20 days of the tenant entering the inactive state. After 20 days, the tenant is permanently deleted and cannot be recovered.
      • To reactivate within that 20‑day window, the tenant administrator must contact Microsoft using the global support phone numbers listed in the “Tenant inaccessible due to inactivity” guidance.
      • As a workaround to get into a working tenant and open a support ticket (if not on a free plan), sign in via:
        • https://portal.azure.com/<TenantId> or
        • https://portal.azure.com/<yourTenantName>.onmicrosoft.com
      • If that fails, sign in to https://entra.microsoft.com/, go to Entra ID → Overview → Manage tenants, create a new tenant, then access Azure Portal with the new tenant domain (for example, https://portal.azure.com/xxx.onmicrosoft.com) and open a support ticket from there (if eligible).
    2. If the admin account is blocked by risk or suspicious activity
      • If the account is blocked due to suspicious activity when signing in as a guest to another organization, and self‑service password reset (SSPR) is enabled, use the Password reset portal to reset the password and remediate user risk. After a successful reset, try signing in again.
      • If SSPR is not enabled or the account is still blocked after reset, contact the organization’s IT administrator to review and unblock the account.
    3. If the admin is locked out because of MFA (no access to Microsoft Authenticator)
      • If there is another global administrator in the tenant:
        1. That admin signs in to the Azure portal.
        2. Goes to Microsoft Entra ID → Users.
        3. Selects the locked‑out admin account.
        4. Opens Authentication methods and selects Require re‑register multifactor authentication.
        5. On next sign‑in, the locked‑out admin is prompted to set up MFA again.
      • If there is no other global admin (only one global admin and that account is locked out), this becomes a tenant lockout scenario. In that case, a support ticket must be opened so Microsoft’s Data Protection/Tenant Recovery team can verify ownership and reset MFA registration. This is done via Microsoft Support (phone or web) from any account that can still sign in and open a support request.
    4. If the Microsoft account is locked (no “Next” button when signing in)
      • When the sign‑in page does not show Next, the account has been locked due to suspicious activity or Terms of Use violations.
      • Use the aka.ms link shown in the lock message to submit the reinstatement form. A Microsoft Online Safety support agent reviews the request and responds by email.

    If none of the above paths work and there is no other admin, the only resolution is to contact Microsoft Support (global support phone numbers or web support) and request tenant recovery or account reinstatement, providing proof of ownership.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.