The error ADSTS5000225: This tenant has been blocked due to inactivity appears when you try to sign in to a Microsoft service and the Azure/Microsoft Entra tenant associated with the account has been automatically blocked by Microsoft. This commonly affects access to services like Microsoft 365, Azure Portal, Outlook, Teams, or other Microsoft cloud apps.
This is not a password or account hack issue. It happens because the tenant has had no active sign-ins, subscriptions, or billing activity for an extended period, and Microsoft automatically blocks inactive tenants to reduce security risks and resource misuse.
What Does ADSTS5000225 Mean
This error means:
- The tenant (organization) tied to the account is inactive
- Microsoft has temporarily blocked sign-ins
- User accounts still exist, but authentication is denied
- The tenant must be re-activated manually
The block is applied at the tenant level, not just a single user.
Common Scenarios Where This Error Appears
You are most likely to see ADSTS5000225 if:
- You created a Microsoft 365 or Azure tenant and never used it
- A trial subscription expired and was left unused
- A work or school tenant hasn’t had activity for months
- You are trying to sign in to an old test or developer tenant
- Billing was never set up or was canceled long ago
How to Fix ADSTS5000225: Tenant Blocked Due to Inactivity
Follow the steps below in order. Only a Global Administrator can resolve this issue.
1. Confirm Which Account and Tenant Are Affected
Make sure you are signing in with the correct account.
- Note the email address shown on the error page
- Check whether it belongs to a work or school account
- Try signing in at a different Microsoft service
- Confirm this is not a personal Microsoft account
Personal Microsoft accounts are not affected by tenant inactivity blocks.
2. Sign In as a Global Administrator (If Possible)
Only tenant admins can reactivate an inactive tenant.
- Go to the Microsoft sign-in page
- Sign in using a Global Administrator account
- Use the full admin email address
- If admin sign-in works, continue to the next step
If admin sign-in is also blocked, proceed to Microsoft support.
3. Reactivate the Tenant From Microsoft Entra / Azure Portal
If you still have admin access, reactivation is usually quick.
- Sign in to Microsoft Entra ID (formerly Azure AD)
- Open the tenant overview
- Check for any banners or alerts about inactivity
- Follow the reactivation instructions if shown
In some cases, adding activity automatically lifts the block.
4. Add or Renew a Subscription (Most Effective Fix)
Microsoft often unblocks tenants after billing activity.
- Sign in to the Microsoft 365 or Azure admin portal
- Add a paid subscription or start a new trial
- Ensure billing information is valid
- Wait a few minutes and try signing in again
Even a basic paid plan can reactivate the tenant.
5. Contact Microsoft Support to Unblock the Tenant
If you cannot sign in at all, Microsoft must unblock it manually.
- Go to Microsoft Support
- Choose Azure Active Directory / Microsoft Entra ID
- Select Tenant blocked due to inactivity
- Provide:
- Tenant name or tenant ID
- Admin email address
- Approximate creation date
Microsoft may ask you to verify ownership before unblocking.
6. Check If the Tenant Was Deleted or Soft-Deleted
Very old inactive tenants may be removed.
- Confirm the tenant still exists
- Ask Microsoft support if it is recoverable
- If deleted permanently, a new tenant must be created
Blocked tenants are usually recoverable, deleted ones are not.
7. Use a Different Tenant or Create a New One (If Needed)
If the tenant is no longer required:
- Create a new Microsoft 365 or Azure tenant
- Use a new domain or alias
- Recreate users and services
- Avoid long periods of inactivity
This is often faster for test or dev environments.
How Long Does It Take to Unblock a Tenant
Typical timelines:
- Billing-based reactivation: minutes to a few hours
- Microsoft support request: 24–72 hours
- Ownership verification cases: may take longer
Once unblocked, sign-in usually works immediately.
How to Prevent ADSTS5000225 in the Future
To avoid tenant inactivity blocks:
- Keep at least one active admin account
- Sign in periodically (every few months)
- Maintain an active subscription or trial
- Avoid abandoning test tenants
- Monitor tenant alerts and emails
Microsoft treats long-term inactivity as a security risk.
Final Thoughts
The ADSTS5000225: This tenant has been blocked due to inactivity error is a tenant-level security restriction, not a user or password issue. In most cases, the tenant can be restored by signing in as a Global Admin, adding billing activity, or contacting Microsoft support.
If the tenant is important, act quickly—blocked tenants are usually recoverable, but long-abandoned ones may eventually be deleted.
