Microsoft 365 Error Codes

Fix Microsoft Sign-In Error 530035: Access Permission Denied

Tauseeq Magsi Sep 30, 2026 873 views

Question details

The user is attempting to sign in to a Microsoft resource but receives an error stating they do not have permission, despite a successful credential check.

How to Fix Microsoft Sign-In Error 530035 (No Permission to Access Resource)

Product: Microsoft 365
Device & OS: not provided
Scenario: Accessing a specific Microsoft app, website, or resource via login.microsoftonline.com using a work or personal account.
Observed behavior: Sign-in succeeds using the correct credentials, but the system throws Error 530035, blocking access because the account or device is not authorized under current policies.

Before you start

Confirm whether you are using a Microsoft 365 work/school account or a personal account, and ensure you have access to a device with administrative privileges if organizational policy changes are required.

Solution 1Recommended

Configure Authentication via Microsoft Entra Admin Center

Bypass blocked direct sign-ins and adjust conditional access policies that are preventing the device or account from reaching the resource.

Error 530035 typically triggers when Conditional Access policies in your organization's directory block the connection based on location, device compliance, or user risk. If direct sign-in via login.microsoftonline.com is blocked, you must route through the admin center to review what is triggering the block.

Access Microsoft Entra

Navigate to the Microsoft Entra admin center (entra.microsoft.com) and sign in using your global administrator or security administrator credentials.

Locate Conditional Access

In the left-hand navigation menu, expand 'Protection' and select 'Conditional Access' to view all active security policies.

Review Sign-in Logs

Go to 'Identity' > 'Users' > 'Sign-in logs'. Filter by the affected user to identify exactly which Conditional Access policy resulted in the 'Failure' status for Error 530035.

Modify the Blocking Policy

Return to the Conditional Access policies list, open the policy identified in the logs, and adjust the conditions (such as excluding the user, updating trusted locations, or allowing non-compliant devices temporarily) and save the changes.

Configure Authentication via Microsoft Entra Admin Center

Administrative Rights Required: You must have administrator privileges in your tenant to modify Entra policies. If you are an end-user, provide the error code and sign-in details to your IT department.

Solution 2

Verify Account Type and Test Alternative Access

Rule out local device configuration issues or incorrect account selection by testing the sign-in on an alternate network or machine.

Free Microsoft Office alternative

Avoid Login Hassles with WPS Office

If persistent Microsoft 365 server blocks and complex authentication errors are disrupting your workflow, consider using WPS Office. It provides powerful, locally accessible tools without relying on complicated enterprise cloud policies.

1. Download the Installer: Visit the official WPS Office website and download the free installer for your operating system.
2. Install the Software: Run the setup file and follow the on-screen instructions to complete the fast installation process.
3. Open Your Files instantly: Double-click any existing Microsoft Office document to open it immediately in WPS Office without needing complex online authentication.

No complex Entra ID or Azure AD login requirements for basic offline document editing.Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Lightweight, fast installation, and completely free to use for your daily office tasks.Familiar user interface ensuring a seamless migration from Microsoft Office.

Frequently Asked Questions

Does error 530035 mean my password is wrong?

No. Error 530035 specifically means your username and password were correct, and the primary sign-in succeeded. The block happens immediately after because the account or device does not meet the security conditions required to access the resource.

How do I find out which policy is causing error 530035?

An IT administrator can determine this by logging into the Microsoft Entra admin center, navigating to the user's 'Sign-in logs', and checking the 'Conditional Access' tab for the specific failed login event. This will explicitly name the policy blocking access.

Can I bypass error 530035 as a standard user without admin rights?

Generally, no. If the error is caused by a company-wide security policy (like requiring a company-issued laptop or a specific IP address), you cannot bypass it yourself. You must contact your organization's IT helpdesk to have your device registered or the policy adjusted.

Why does this happen only on certain Microsoft apps?

Administrators can configure Conditional Access policies to target specific cloud apps (for example, securing SharePoint while leaving Outlook accessible). Therefore, you might have permission to check email but lack authorization to view sensitive internal sites.

Microsoft Office Error Codes