'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Defederate a Domain from Office 365 After an Administrator Dies
Question details
The organization needs to recover control of a domain, remove it from an existing Microsoft 365 tenant, and migrate it to a new one after the sole administrator passed away.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Recovering and defederating a domain to migrate to a new tenant when the primary IT administrator is deceased and access is lost.
- Observed behavior
- The domain remains locked to an inaccessible tenant, preventing the organization from managing services or assigning the domain to a new tenant.
Ensure you have access to your domain registrar's DNS settings and gather official legal documentation proving your organization's identity and ownership of the domain.
Recover Tenant Access via Microsoft Data Protection Team
Contact Microsoft Support to verify your organizational ownership and regain global admin access to release the domain.
Since the primary administrator is unavailable, Microsoft requires strict verification to grant access to a tenant. This process ensures the security of the data but requires you to provide substantial proof of ownership.
Verify if any other users within your organization possess Global Administrator privileges. If a secondary admin exists, they can log into the Microsoft 365 Admin Center and manage the domain immediately.
If no other administrators are available, call Microsoft Business Support. Explain the situation and request to be escalated to the Microsoft Data Protection Team for tenant and administrator recovery.
Submit the required legal documentation requested by the Data Protection Team. This typically includes proof of organizational ownership (like nonprofit registration), personal identification, and proof of domain ownership via your DNS registrar.
Once access is restored by Microsoft, log into the Microsoft 365 Admin Center. Navigate to Settings, select Domains, choose the specific domain, and click Remove to defederate it from the old tenant.
Log into your new Microsoft 365 tenant's Admin Center, navigate to Settings > Domains, and click Add domain. Follow the setup wizard to verify the domain using DNS records.
Switch to WPS Office for a Hassle-Free Experience
Dealing with tenant lockouts, domain defederation, and complex administrative recovery in Microsoft 365 can disrupt your organization's workflow. Consider switching to WPS Office, a lightweight, free alternative that provides robust productivity tools without the overhead of complex cloud tenant management.
- 1. Download WPS Office: Visit the official WPS Office website and download the installer for your operating system.
- 2. Install the application: Run the downloaded setup file and follow the simple on-screen instructions to install the suite.
- 3. Open your files instantly: Launch WPS Office and directly open your existing Microsoft Office files with perfect formatting preservation.
Frequently Asked Questions
Can I forcefully remove a domain from an Office 365 tenant I don't control?
No. For security reasons, Microsoft requires you to either have Global Admin access to the current tenant holding the domain or to prove organizational and domain ownership through their Data Protection Team to have it removed.
What happens to the data in the old tenant when a domain is removed?
Removing a domain does not immediately delete the data, but it will change the sign-in addresses of users tied to that domain (reverting them to the default .onmicrosoft.com domain). Ensure you back up all necessary emails and files before migrating.
Will Microsoft Support give me the password of the deceased administrator?
No. Microsoft will not provide the password for an existing account. Instead, after verifying your ownership, they will typically elevate a newly created or existing user account to Global Administrator status so you can manage the tenant.
