Training: Instruction to develop new skills.
The error AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra (Azure AD) tenant associated with that email has been marked inactive and blocked. In this state, sign-in to Azure resources for that tenant is blocked, and after 20 days the tenant is permanently deleted.
Based on the tenant lifecycle behavior:
- Check how long the tenant has been inactive/blocked
- If the tenant has been blocked for less than 20 days, a tenant administrator can request reactivation.
- If it has been more than 20 days since it entered the inactive state, the tenant is deleted and cannot be recovered.
- If it has been less than 20 days since the block
As tenant admin (or via whoever is admin for that tenant):- Contact Microsoft using the global support phone numbers to request tenant reactivation. See the guidance under “Administrators” in the tenant-inaccessible article.
- Do not open multiple support cases for the same issue; wait for the decision on the first case.
- If it has been more than 20 days since the block
- The tenant is deleted and cannot be recovered.
- In that case, to continue with Azure training using that email address, create or use a new tenant:
- Sign in to https://entra.microsoft.com/ with the same Microsoft account.
- Go to Entra ID → Overview → Manage tenants and create a new tenant.
- Note the new tenant’s domain name (for example,
yournewtenant.onmicrosoft.com). - Then access the Azure portal using the tenant-specific URL format, for example:
https://portal.azure.com/<yourTenantName>.onmicrosoft.com
This lets work in the new tenant even if the old one is blocked.
- If the account is tied to an Azure free trial / benefit
- If the email previously had a free trial, sometimes going to the Azure signup flow again (for example, via
https://signup.azure.com) and completing the “upgrade” to a pay-as-you-go account (still with basic/no charges if nothing is used) can re-establish access, as described in a similar case. This is done after signing in with the same email that shows the error onportal.azure.com.
- If the email previously had a free trial, sometimes going to the Azure signup flow again (for example, via
- If none of the above paths work
- As a last resort for AZ-104 learning, create a new Microsoft account (new email) and sign up for a new Azure free account with that identity, then use that new tenant for training.
References:
- Tenant inaccessible due to inactivity
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A