Taking over a Microsoft Azure Active Directory shadow tennant

by Volker Weber

Sketch

When you are invited as a guest into a Microsoft Team space and there is no Azure Active Directory tennant for your domain, as it wasn't for my domain, you will create a new user (and a domain) when you sign up. I was recently confused by that. I had just entered my personal credentials and it created a second user with the same name/password combination. One was a work account, the other a personal account. I could not really get rid of the the work account, because there was no admin for my domain. Imagine yourself on a big ship, without a crew.

Then I wanted to set up a free team myself but I could not. Microsoft had not planned for somebody with a work account he could not manage. I asked for help, but received an answer this could unfortunately not be done. That was the end of it.

Only, it wasn't.

Gregory told me to google for "IT admin takeover", and that leads to multiple documents, one of them being "Take over an unmanaged directory as administrator in Azure Active Directory". If you have control of your DNS entry, you can convince Microsoft that you are supposed to be the admin. The process asks you to add a TXT record to the DNS entry for your domain and then grants you admin rights for the shadow domain once you have done that.

You are still on a big ship, but now you are the captain.

So I first created a new admin on the vowenet.onmicrosoft.com domain, then deleted my original admin and the domain. Finally, I was free again.

Be careful though. A big ship has lots of buttons and dials. Don't make yourself captain if you don't know how to operate a big ship.

Comments

captian (spelling)

Ron Wayne, 2018-08-12

I always hated that viral tenant scenario and I asked Microsoft if they would also create viral tenants for domains like google.com, gmx.de and alike. The answer was that there is a nondisclosed blacklist ...

But I have the feeling that viral tenant creation will go away eventually - e.g. SharePoint sharing via secure links works with any mail account and does not create a viral tenant. Better.

Tobias Zuegel, 2018-08-13

Recent comments

Kai Pahl on vowe's magic flying circus auf Microsoft Kaizala at 21:33
Axel Koerv on vowe's magic flying circus auf Microsoft Kaizala at 20:25
Thomas Muders on vowe's magic flying circus auf Microsoft Kaizala at 20:21
Enrico Lippmann on Und die dritte Januar-Woche #dontbreakthechain at 20:13
Volker Weber on vowe's magic flying circus auf Microsoft Kaizala at 20:12
Axel Koerv on vowe's magic flying circus auf Microsoft Kaizala at 20:09
Volker Weber on vowe's magic flying circus auf Microsoft Kaizala at 19:56
Thomas Muders on vowe's magic flying circus auf Microsoft Kaizala at 19:54
Volker Weber on vowe's magic flying circus auf Microsoft Kaizala at 19:53
Christian Ott on vowe's magic flying circus auf Microsoft Kaizala at 19:51
Volker Weber on vowe's magic flying circus auf Microsoft Kaizala at 19:42
Thomas Muders on vowe's magic flying circus auf Microsoft Kaizala at 19:40
Volker Weber on Und die dritte Januar-Woche #dontbreakthechain at 19:40
Enrico Lippmann on Und die dritte Januar-Woche #dontbreakthechain at 19:35
Volker Weber on vowe's magic flying circus auf Microsoft Kaizala at 18:13
Axel Koerv on vowe's magic flying circus auf Microsoft Kaizala at 18:10
Jochen Kattoll on Let's talk about voice assistants. Seriously. at 16:13
Frank Quednau on vowe's magic flying circus auf Microsoft Kaizala at 14:13
Thomas Günter on vowe's magic flying circus auf Microsoft Kaizala at 13:03
Benjamin Bock on vowe's magic flying circus auf Microsoft Kaizala at 12:43
Bruce Elgort on Und die dritte Januar-Woche #dontbreakthechain at 02:04
Volker Weber on IKEA to launch Sonos-powered Symfonisk in August at 21:38
Bernd Fellerhoff on IKEA to launch Sonos-powered Symfonisk in August at 21:34
Bernd Fellerhoff on IKEA to launch Sonos-powered Symfonisk in August at 21:17
Bernd Fellerhoff on IKEA to launch Sonos-powered Symfonisk in August at 21:01

Ceci n'est pas un blog

I explain difficult concepts in simple ways. For free, and for money. Clue procurement and bullshit detection.

vowe

Contact
Publications
Stuff that works
Amazon Wish List
Frequently Asked Questions

rss feed  twitter  amazon

Local time is 22:06

visitors.gif

buy me coffee

Paypal vowe