How to Recover Microsoft 365 Access After Changing to a Custom Domain
Question details
The user is unable to log in to their Microsoft 365 Business Standard account after updating the tenant to a new custom domain.
- Product
- Microsoft 365 Business Standard
- Device & OS
- not provided
- Scenario
- Attempting to log into a Microsoft 365 tenant after switching the default onmicrosoft.com domain to a newly configured custom domain.
- Observed behavior
- The user was automatically logged out and cannot sign back in using either the new custom domain address or the original onmicrosoft.com fallback address.
Verify if there is another global administrator account within your organization that can still log in, and prepare your tenant information (original onmicrosoft.com address, billing details) before contacting support.
Contact Microsoft Account Recovery Support
Because both the custom domain and onmicrosoft.com logins are failing, you must contact Microsoft's phone support to verify your identity and restore administrative access.
When a custom domain change causes a complete administrator lockout, standard password reset tools usually fail because the system cannot correctly route the updated User Principal Name (UPN). In this scenario, Microsoft's Data Protection or account-recovery team must manually verify your business identity to restore tenant access.
Visit the official Microsoft 365 business support page to find the customer service phone number specific to your country or region.
Call the support number and clearly state 'Business Support' or 'Data Protection' when prompted by the automated voice system to ensure you are routed to the correct department.
Explain to the support agent that you lost access to your tenant after a custom-domain change. Emphasize that neither the new custom domain nor the original onmicrosoft.com login works.
Provide the requested tenant details, such as your billing information, original tenant creation details, or company registration, so the agent can authenticate your ownership and initiate account recovery.
Keep Working While You Recover Your Account
Locked out of Microsoft 365? Don't let a tenant login issue halt your productivity. WPS Office is a lightweight, powerful alternative that lets you create, edit, and save your documents locally without requiring a complex cloud domain setup.
- 1. Download and Install WPS Office: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Open Your Local Files: Launch WPS Office and click 'Open' to access your existing Word, Excel, or PowerPoint files stored locally on your computer.
- 3. Edit and Save Seamlessly: Continue your work and save the files in their original Microsoft Office formats so you can easily upload them back to OneDrive once your tenant access is restored.

Frequently Asked Questions
Why did my onmicrosoft.com address stop working after adding a custom domain?
When you set a new custom domain as the primary address in Microsoft 365, the system automatically updates User Principal Names (UPNs). If there is a propagation delay or a configuration error, the system might not temporarily recognize either the old or the new UPN, causing a lockout.
Can I use the self-service password reset tool for this issue?
If your account is not recognized due to a domain mapping error, the self-service password reset tool will likely return an error stating the account does not exist. In these cases, manual intervention from Microsoft support is required.
How long does a custom domain change take to propagate in Microsoft 365?
While DNS changes can process in a few minutes, full propagation across all Microsoft 365 services and Azure Active Directory can take up to 24 to 48 hours. However, this standard delay should not permanently lock out the global administrator account if configured correctly.




