Unable to verify custom domain in Entra — domain appears associated with another tenant

Question

Unable to verify custom domain in Entra — domain appears associated with another tenant

Cathy Wood 20

I own and control the DNS for progrezo.com through GoDaddy and am trying to verify the domain in my Microsoft Entra tenant.

My current Entra tenant is: 858d74e4-4298-434e-9d10-2154a19b8f47

Microsoft gave me the TXT verification value: MS=ms90590531

The TXT record has been added at the root of progrezo.com, but Entra continues to report: “Unable to verify domain name.”

The domain lookup I performed indicates that progrezo.com is associated with another Entra tenant: b6e580c4-3566-431e-9844-c0fd05c0ea79

I cannot access or switch to that tenant. My Entra Manage tenants page shows only my current Default Directory.

Question: Can someone determine whether the other tenant is managed or unmanaged, and advise how I can release progrezo.com from that tenant so I can verify it in my current tenant?

I have not deleted my current tenant or user and do not want to do so unless Microsoft confirms it is necessary.

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Mohamed Kabesh 81

Hi Cathy,A custom domain can only be verified in one Microsoft Entra tenant at a time. If progrezo.com is already verified in another tenant, adding the TXT record in your current tenant will prove DNS ownership, but it will not automatically release the domain from the other tenant.

The next step is to determine whether the tenant currently holding the domain is managed or unmanaged.

Check whether the existing tenant is managed or unmanaged

You can try the following Microsoft sign-in realm lookup, replacing the username with any value:

https://login.microsoftonline.com/getuserrealm.srf?login=******@progrezo.com&xml=1

Check the NameSpaceType value.

Managed or Federated generally indicates that the domain is associated with a normal managed Entra tenant.
If the domain belongs to a self-service or "shadow" tenant, it may be possible to perform an administrative takeover.

The Tenant ID alone is not enough to determine whether the tenant is managed or unmanaged.

If it is an unmanaged tenant

An unmanaged tenant can sometimes be created when somebody signs up for a Microsoft cloud service, such as Power BI, using an email address from the company domain.

In this situation, Microsoft supports an admin takeover process.

There are generally two approaches:

External admin takeover: You verify ownership of the domain through DNS and use the domain verification process with the force-takeover option from your existing tenant.
Internal admin takeover: You join the unmanaged directory and use Microsoft's takeover process to become its administrator, then remove the domain from that tenant before adding it to your intended tenant.

Microsoft documents this under "Take over an unmanaged directory as administrator in Microsoft Entra ID."

If it is a managed tenant

A force takeover is normally not applicable to a managed tenant.

In that case, the domain must be removed from the existing tenant before it can be verified in your current tenant.

I would first check whether the tenant was created or managed by:

A previous IT administrator
A Microsoft 365 reseller or CSP
A previous IT service provider
A former employee who configured Microsoft 365/Azure services

If you cannot identify or access the administrator, I recommend opening a Microsoft Support case and providing:

Domain name: progrezo.com
Current/Destination Tenant ID: 858d74e4-4298-434e-9d10-2154a19b8f47
Tenant currently holding the domain: b6e580c4-3566-431e-9844-c0fd05c0ea79
The Entra verification error
The TXT verification record
Evidence that you control the public DNS for the domain

Ask Microsoft specifically to confirm whether the source tenant is managed or unmanaged and assist with releasing the domain if the tenant is orphaned or inaccessible.

Also confirm that the Microsoft TXT record is publicly resolvable, just to exclude DNS propagation as a separate issue.

Most importantly, do not delete your current tenant or your current user account. That should not be required to resolve the domain association.

Cathy Wood 20 Reputation points

2026-10-06T13:51:33.88+00:00

Many thanks Mohamed.
Cathy Wood 20 Reputation points

2026-10-06T14:02:14.0066667+00:00

The realm lookup returned NameSpaceType = Managed for progrezo.com. The domain is therefore associated with a managed Entra tenant that I cannot access. My current tenant ID is 858d74e4-4298-434e-9d10-2154a19b8f47, and the other tenant ID previously identified for progrezo.com is b6e580c4-3566-431e-9844-c0fd05c0ea79. The TXT record MS=ms90590531 is already published at GoDaddy. Please advise how Microsoft can release/move the domain from the inaccessible managed tenant, or how to open the appropriate support case please.
Mohamed Kabesh 81 Reputation points

2026-10-07T03:33:30.99+00:00
Thanks Cathy, that result settles it. Managed means a regular tenant has verified progrezo.com, so there's no self-service takeover and your TXT record can't succeed while the domain is verified there. The release has to come from that tenant's administrators or from Microsoft support.

1. Try to identify the owner of the other tenant

From your tenant, use Microsoft Graph findTenantInformationByDomainName('progrezo.com'). It returns the other tenant's display name and its *.onmicrosoft.com name, which helps you work out who set it up (a former IT provider, reseller, or employee).

Check your DNS for signs the domain is in use there, such as an MX record pointing to Exchange Online or autodiscover/lyncdiscover records. If it is, the tenant is probably active and someone should be administering it.

Try signing in at portal.azure.com or admin.microsoft.com with an address on your domain (for example, an old admin mailbox) and use the password reset option if you control that mailbox.

If you find an admin, they can remove every reference to the domain from that tenant and delete the domain, after which you can verify it in yours.

2. If no admin is reachable, open a support case

Microsoft can restore administrative access to a tenant, but only after identity and ownership verification through the standard support and Data Protection processes. Once you have admin access, or Microsoft support does the removal, the domain can be released.

To open the case:

In your Entra admin center, go to Diagnose and solve problems, use Self-Service Support, work through the follow-up prompts, and select Create a support request.

Or use Help & support in the Microsoft 365 admin center.

Include the domain name, both tenant IDs (yours and b6e580c4-3566-431e-9844-c0fd05c0ea79), the exact verification error and timestamps, and DNS proof of ownership (a screenshot of the TXT record at GoDaddy plus the registrar account details).

You don't need to delete your current tenant or user for any of this, so please don't, unless Microsoft support tells you to.

Thanks Cathy, that result settles it. Managed means a regular tenant has verified progrezo.com, so there's no self-service takeover and your TXT record can't succeed while the domain is verified there. The release has to come from that tenant's administrators or from Microsoft support.

1. Try to identify the owner of the other tenant

From your tenant, use Microsoft Graph findTenantInformationByDomainName('progrezo.com'). It returns the other tenant's display name and its *.onmicrosoft.com name, which helps you work out who set it up (a former IT provider, reseller, or employee).

Check your DNS for signs the domain is in use there, such as an MX record pointing to Exchange Online or autodiscover/lyncdiscover records. If it is, the tenant is probably active and someone should be administering it.

Try signing in at portal.azure.com or admin.microsoft.com with an address on your domain (for example, an old admin mailbox) and use the password reset option if you control that mailbox.

If you find an admin, they can remove every reference to the domain from that tenant and delete the domain, after which you can verify it in yours.

2. If no admin is reachable, open a support case

Microsoft can restore administrative access to a tenant, but only after identity and ownership verification through the standard support and Data Protection processes. Once you have admin access, or Microsoft support does the removal, the domain can be released.

To open the case:

In your Entra admin center, go to Diagnose and solve problems, use Self-Service Support, work through the follow-up prompts, and select Create a support request.

Or use Help & support in the Microsoft 365 admin center.

Include the domain name, both tenant IDs (yours and b6e580c4-3566-431e-9844-c0fd05c0ea79), the exact verification error and timestamps, and DNS proof of ownership (a screenshot of the TXT record at GoDaddy plus the registrar account details).

You don't need to delete your current tenant or user for any of this, so please don't, unless Microsoft support tells you to.