![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 69%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
Microsoft Security | Microsoft Entra | Other
Additional Microsoft Entra services and features related to identity, access, and network security
The error AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra (Azure AD) tenant tied to the Azure portal sign-in has been marked inactive and blocked.
Recovery options depend on how long the tenant has been inactive and the role in that tenant:
- Check whether the tenant can still be reactivated
- Tenants blocked due to inactivity can be reactivated only within 20 days of entering the inactive state.
- After 20 days in this blocked state, the tenant is deleted and not recoverable.
- If within 20 days and an administrator of that tenant
- Follow the guidance for inaccessible tenants:
- As an administrator, contact Microsoft support using the global support phone numbers to request tenant reactivation.
- See the “Administrators” section in the tenant-inactivity guidance for the exact steps.
- While the case is in progress, do not submit multiple assistance requests; wait for the decision on the first case.
- Follow the guidance for inaccessible tenants:
- If more than 20 days since the tenant was blocked
- The tenant is deleted and cannot be recovered.
- In that case, to attend the Azure DevOps class, create or use another active tenant (for example, by creating a new tenant in Microsoft Entra or using a different Azure subscription/tenant that is still active).
- If sign-in is blocked but tenant may still exist
- Confirm that the correct account and tenant are being used. If there are multiple accounts (work vs personal) with similar addresses, ensure the correct work/school account is selected when signing in.
- If locked out as the only global admin and cannot sign in at all, contact the appropriate Microsoft Data Protection team (per the sign-in troubleshooting guidance) so they can verify ownership and help with access.
- If the tenant is inaccessible but a new tenant is acceptable for class use
- Sign in to the Microsoft Entra admin center (if possible) and use Entra ID → Overview → Manage tenants to create a new tenant.
- Use that new tenant’s domain name or tenant ID when accessing the Azure portal so that Azure DevOps class work can proceed in the new environment.
References:
- Tenant inaccessible due to inactivity
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A
- Troubleshoot sign-in issues and account access problems