The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra tenant is inaccessible because of its lifecycle state. It is not, by itself, evidence that your password or computer is the problem. A tenant administrator should contact Microsoft promptly: Microsoft says reactivation can be requested within 20 days after the tenant enters the inactive state. If it remains inaccessible for more than 20 days, Microsoft says it is deleted and cannot be recovered.
What the AADSTS5000225 error means
The full message may appear as AADSTS5000225: This tenant has been blocked due to inactivity. Some sign-in flows prefix it with interaction_required. In either form, the error points to the tenant—not necessarily an individual account, password, browser, or local device.
Microsoft Entra’s guidance describes this as an inactive tenant state that makes the tenant inaccessible. The error alone does not tell you when the tenant entered that state or whether it is still eligible for reactivation. See Microsoft’s guidance for troubleshooting inaccessible tenants, last updated March 16, 2026.
How to request tenant reactivation
- Ask a tenant administrator to contact Microsoft. Microsoft’s published guidance identifies contacting Microsoft as the route to request reactivation. Use Microsoft’s published support phone numbers and explain that the tenant is showing AADSTS5000225.
- Make the request within the eligibility window. Microsoft says an administrator can request reactivation within 20 days after the tenant enters the inactive state. The error message does not establish when that period began, so confirm the tenant’s timing with Microsoft or tenant records.
- Wait for the existing case to be decided. If an assistance request is already open, do not submit another while it is being processed; Microsoft says to wait for a decision.
- Limit automated sign-in attempts. Application owners and developers should minimize authentication requests to the deactivated tenant while waiting for reactivation.
What happens after 20 days?
Microsoft says a tenant that remains inaccessible for more than 20 days is deleted and cannot be recovered. If this applies, do not assume that creating a new tenant will restore the old tenant’s data, identities, configuration, or resources. Microsoft’s inaccessible-tenant guidance links to its data protection policies for questions about data handling.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Can a portal URL workaround fix it?
A Microsoft Q&A moderator suggested trying a tenant-specific Azure portal URL in one reported case. That is an anecdotal, case-specific suggestion—not a guaranteed fix or an alternative to contacting Microsoft about the tenant’s lifecycle state. See the Microsoft Q&A discussion.
Quick Recap
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
