URGENT — AADSTS5000224 / ENTIRE TENANT DEAUTHENTICATED — GLOBAL ADMIN LOCKED OUT

2026-09-18T02:17:04.1033333+00:00

AADSTS5000224 — The tenant you are trying to access has been deauthenticated and is no longer available.

The affected tenant's Global Administrator cannot access the Microsoft 365 Admin Center, so a support request cannot be opened from the affected tenant.

Please escalate this case to the Microsoft Entra / Data Protection / tenant recovery team for investigation and re-enablement of authentication.

Affected tenant: [CUSTOMER DOMAIN / ONMICROSOFT DOMAIN]

Global Administrator: [ADMIN ACCOUNT]

Trace ID: [Moderator note: Personally Identifiable Information removed]

Correlation ID: [Moderator note: Personally Identifiable Information removed]

Timestamp: 2026-09-18 01:53:18 UTC

This is not a password, MFA, browser, or Conditional Access issue. Multiple browsers and private browsing were tested, and other Microsoft 365 tenants authenticate normally from the same system/network.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments No comments

1 answer

Sort by: Most helpful
  1. Elena-VH 1,810 Reputation points Independent Advisor
    2026-09-18T02:34:54.6266667+00:00

    Dear Todd Brady - The Kyda Group Inc,

    The error AADSTS5000224: "The tenant you are trying to access has been deauthenticated and is no longer available" typically indicates a tenant-level authentication or availability problem that cannot be resolved through standard administrator actions.

    As this is a public community forum, no one has access to tenant data, internal Microsoft systems, or the ability to directly engage the tenant recovery teams. This situation requires assistance from Microsoft support personnel who can investigate the tenant status and determine whether recovery or re-enablement is possible.

    If your Microsoft 365 subscription was purchased through a partner or reseller, please contact them immediately. The reseller can open a support request on your behalf when the tenant administrator cannot access the portal.

    If your Microsoft 365 subscription was purchased directly from Microsoft, here are some options I recommend you look through and try:

    Option 1: Try to contact Microsoft Data Protection Support by phone (Primary Method)  

    For a full list of regional numbers, you can also visit this official page: Customer service phone numbers - Microsoft Support. The support team will assist you as soon as possible. For reference:  Get support | Microsoft Docs   

    Note: You may also consider calling a Microsoft support number for a different region if support in your local region is unavailable or unable to route your case appropriately.

    (While calling, you may hear an introduction of about 30 seconds, such as "you can visit the link...". You can ignore it and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)     

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively: 

    In some countries, it is an automated conversation like this: First, when you call the hotline, you will be asked as follows: 

    IVR: What kind of problem are you concerned about? 

    You: Authenticator. 

    IVR: What kind of product do you use? 

    You: Office 365 for business. 

    IVR confirmation: education or company account? 

    You: For companies 

    IVR: Are you an administrator? 

    You: Yes. 

    IVR: Do you have the other administrator in your organization? 

    You: No. 

    IVR: Do you need a... Service request? 

    You: Yes  

    This process should connect you with a live agent who will create a service request with the Data Protection team. They will then contact you to help you regain access. 

    Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method) 

    If the automated phone system does not get you to a human agent, one workaround is to create a separate trial Microsoft 365 tenant and use that tenant to open a support ticket on behalf of the locked tenant.

    • Sign up for a new Microsoft 365 Business trial using this link: Compare All Microsoft 365 Plans. You will need to use a different, personal email address to register. 
    • Once the trial account is created, log in to its Admin Center > From the Admin Center, open a new Service Request. For reference:  Get support | Microsoft Docs   
    • In the ticket description, explain that you are locked out of your primary tenant (your.onmicrosoft.com) and that you need to speak with the Data Protection team to regain access.
    • Remember to provide your locked account's details and a good contact number for them to reach you. 

    Important:

    - Please remember to cancel the trial subscription after your original account issue is resolved to avoid any future charges. 

    - When creating the support request, I also recommend disabling or bypassing the AI/Support Assistant option if presented and choosing the path that allows you to contact a support engineer directly.

    I hope the information shared is helpful. If you have any questions or are stuck on any steps, please feel free to reach out. I'm looking forward to your update.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.