A cloud-based identity and access management service for securing user authentication and resource access
To unblock a blocked tenant in Azure, the required action depends on why the tenant is blocked.
- If the tenant is blocked due to inactivity (error AADSTS5000225)
- This typically shows as:
This tenant has been blocked due to inactivitywhen signing in. - Administrators can request reactivation only within 20 days of the tenant entering the inactive state. After 20 days, the tenant is deleted and cannot be recovered.
- To request reactivation:
- A tenant administrator must contact Microsoft using the global support phone numbers: https://support.microsoft.com/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2.
- Do not submit multiple assistance requests; wait for the decision on the existing case.
- If the tenant has already been deleted (more than 20 days after being blocked), it cannot be unblocked or recovered.
- This typically shows as:
- If the issue is sign-in being blocked by tenant restrictions ("Your network administrator has blocked access")
- This means the organization’s security policy only allows sign-in to selected organizations.
- Only the work or school account organization’s administrator can change this policy.
- To get access:
- Contact the administrator of the work or school tenant that owns the account and ask them to update the tenant restrictions policy or make an exception, following the tenant restrictions setup documentation.
- If the problem is that the tenant is owned by the organization but access is lost (admin lockout)
- If locked out of the tenant and no admin can sign in, a support ticket is required.
- The Data Protection Team can help:
- Reset credentials of an administrator account.
- Help claim ownership of the tenant, if applicable.
- To start this, open a support ticket via the global customer service phone numbers: https://support.microsoft.com/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2.
Once the tenant is successfully reactivated or access is restored, upgrading the subscription can then be done from the Azure portal as usual.
References:
- Tenant inaccessible due to inactivity
- How to fix the error message "Your network administrator has blocked access"
- Discover your Microsoft cloud footprint FAQ
- Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A
- Global Admin Locked out - Microsoft Q&A
- Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A