logo
search
Tenant Migration

How to Complete a Microsoft 365 Internal Administrator Takeover

Natalie TaylorNatalie Taylor Sep 28, 2026 870 views

Question details

Reclaim a custom domain that is currently associated with an inactive or different Microsoft 365 organization to complete an internal administrator takeover.

How to Complete a Microsoft 365 Internal Administrator Takeover
Product
Microsoft 365
Device & OS
not provided
Scenario
Attempting to add a custom domain to a new Microsoft 365 tenant, but the process is blocked because the domain is already registered to a former, inactive email service or another tenant.
Observed behavior
Microsoft 365 displays an error stating the domain cannot be added because it is already in use by another organization, preventing the setup from proceeding.
Before you start

Ensure you have full administrative access to your domain's DNS hosting provider (such as GoDaddy, Cloudflare, or Route 53), as you will need to add specific TXT records to prove domain ownership.

Solution 1Recommended

Perform an Internal Admin Takeover via DNS Verification

Reclaim your domain by proving ownership through DNS records and escalating to Microsoft Support if the automated process fails.

An internal administrator takeover allows you to verify domain ownership and claim administrative rights when a domain is tied to an unmanaged or inactive Microsoft 365 tenant. It is crucial not to modify your MX records prematurely, as changing MX records alone will not remove the domain from the other tenant and may severely disrupt your email delivery.

1
Access the Microsoft 365 Admin Center

Log in to the Microsoft 365 Admin Center using the account you intend to use as the new administrator for the domain.

2
Attempt to add the domain

Navigate to Settings, select 'Domains', and click 'Add domain'. Enter the domain name you are trying to reclaim.

3
Initiate domain verification

When prompted that the domain is already in use, follow the on-screen wizard to verify domain ownership. Choose the option to 'Add a TXT record to the domain's DNS records'.

4
Add the TXT record to your DNS host

Log in to your DNS hosting provider's control panel, locate your domain's DNS settings, and create the TXT record requested by Microsoft 365. Wait for DNS propagation, which typically takes 10 to 30 minutes.

5
Verify and escalate if necessary

Return to the Microsoft 365 Admin Center and click 'Verify'. If the automated takeover succeeds, you will gain control. If the system still blocks the domain, contact Microsoft 365 Support or the Data Protection team and provide your DNS verification as proof.

Perform an Internal Admin Takeover via DNS Verification
Data Protection Escalation Timeframe: If your case needs to be escalated to the Microsoft Data Protection team to manually resolve the existing tenant association, resolution may take several weeks. Keep your DNS verification records intact during this period.
Free Microsoft Office alternative

Keep Your Team Productive During Migration with WPS Office

While waiting for Microsoft 365 domain releases and tenant migrations, ensure your organizational workflows remain uninterrupted. WPS Office provides a free, highly compatible, and robust alternative for creating and editing Word, Excel, and PowerPoint documents without relying on active cloud tenant configurations.

  1. 1. Download WPS Office: Visit the official WPS website and download the free installer for your operating system.
  2. 2. Install the application: Run the installer and follow the on-screen prompts to set up the lightweight office suite on your local device.
  3. 3. Edit files offline: Open WPS Writer, Spreadsheet, or Presentation to immediately begin editing your existing Microsoft Office files without requiring cloud authentication.
Highly compatible with all Microsoft Office formats (.docx, .xlsx, .pptx)Lightweight desktop installation with no tenant login blockersFamiliar UI that requires zero learning curve for seamless migrationFree alternative for both enterprise and personal productivity
microsoft office alternative - wps office

Frequently Asked Questions

Why can't I just change the MX records to reclaim my domain?

Changing MX records only redirects mail flow; it does not remove the domain's backend association with the existing Microsoft 365 tenant. Modifying MX records before Microsoft provides the correct sequence can disrupt your mail delivery without solving the domain registration issue.

How long does a tenant domain release take through Microsoft Support?

If the automated admin takeover process fails and the case is escalated to the Microsoft Data Protection team, resolving the tenant conflict can take several weeks depending on verification requirements.

What do I need to prove ownership for an admin takeover?

You must have administrative access to your domain's DNS host (e.g., Cloudflare, GoDaddy). Microsoft will generate a unique TXT record that you must publish in your DNS settings to mathematically prove you own and control the domain.