Microsoft Entra Domain Services stuck in failed state - cannot delete, returns 404 from ARM API, support ticket blocked by Developer plan

Question

Microsoft Entra Domain Services stuck in failed state - cannot delete, returns 404 from ARM API, support ticket blocked by Developer plan

James Freeman Sr 0

I am trying to delete my Microsoft Entra Domain Services (Azure AD DS) managed domain, but it is stuck in a failed state and I cannot delete it through the portal or via the ARM API.

Environment Details:

Tenant Name: pii removed
Tenant ID: pii removed
Primary Domain: pii removed
Managed Domain: pii removed
Subscription ID: pii removed
Resource Group: cloud-shell-storage- pii removed
ARM Resource ID: pii removed
Support Plan: Azure Support Plan - pii removed

Problem Description:

The managed domain <pii removed> entered a failed state with error: "The managed domain is in a failed state. Contact support with your Microsoft Entra tenant ID and the domain name of the managed domain."

When I tried to submit a support ticket, the Azure portal showed isEligibleCreateSupportTicket: false — my Developer plan does not allow creating a direct engineer support ticket for this issue type. The form got stuck on Step 3 showing only "Prioritized support on Microsoft Q&A."

Troubleshooting Steps Taken via Azure CLI (Cloud Shell):

List via subscription-level provider: returned empty array { "value": [] }
Direct GET on specific resource: returned Response status: 404
DELETE attempt: returned silently with no error
Azure Portal navigation to the resource: shows 404 "Resource not found"

Current Situation:

The resource does NOT exist at the ARM level. All API calls return 404 and the subscription-level list is empty. However, the managed domain appears to still be present at the Microsoft Entra backend/directory layer, as the portal previously directed me to contact support with the tenant ID and domain name.

Request:

I need Microsoft backend support to fully clean up the orphaned Domain Services entry for <pii removed> from the Entra backend. My Developer support plan prevents me from opening a direct support ticket.

Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-11T07:34:29.6433333+00:00

James Freeman Sr

Thank you for reaching out to Microsoft Q&A.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-12T07:05:26.8433333+00:00

James Freeman Sr

Let us know if you need any further assistance from our end.

1 answer

Your answer

Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-11T07:34:29.6433333+00:00

James Freeman Sr

Thank you for reaching out to Microsoft Q&A.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-12T07:05:26.8433333+00:00

James Freeman Sr

Let us know if you need any further assistance from our end.

Answer 1

The orphaned or failed Microsoft Entra Domain Services (Azure AD DS) managed domain cannot be fixed or deleted from the client side when:

The resource no longer exists at the ARM/subscription level (all ARM operations return 404, subscription-level list is empty), and
The managed domain is still present in the Entra/Domain Services backend and reports a failed state with instructions to contact support.

In this state, the only supported remediation is direct intervention by Microsoft support. The documented guidance for unrecoverable or invalid Domain Services states:

When resources are in an unrecoverable or invalid state (for example, AADDS100, AADDS110, AADDS113, AADDS114), the resolution is to either:
- Delete the managed domain and recreate it, or
- Open an Azure support request so Microsoft can repair or clean up the instance.
If the platform cannot automatically recreate or repair required resources, the environment is considered unsupported and must be fixed by Microsoft support.

Because the ARM resource is already gone and the backend object is stuck, self-service delete is no longer possible. The required action is:

Open an Azure support request specifically for Microsoft Entra Domain Services, providing:
- Microsoft Entra tenant ID.
- Managed domain name.
- Subscription ID and resource group where the domain was originally deployed.
Ask support to:
- Clean up the orphaned Domain Services instance in the Microsoft Entra backend, or
- Restore the instance from backup and then delete it cleanly.

If the portal blocks ticket creation under the current support plan, use the documented path to contact Azure support (including the global support phone numbers or the generic “get support” entry point) and reference that the managed domain is in an unrecoverable/failed state and cannot be deleted via ARM.

There is no documented CLI, PowerShell, or ARM-based workaround for this scenario once the service is in an unrecoverable failed state and the resource is missing at the subscription level. Backend cleanup by Microsoft support is required.

References: