Partner lockout of Microsoft 365 tenant – looking for advice on next steps
Hello all, I’d appreciate some guidance from the community on a serious situation we are facing. On 12 September 2025, our Microsoft partner unilaterally locked us out of our Microsoft 365 tenant. They retained exclusive Global Administrator / Partner Delegated Admin rights, which means: All staff and directors are unable to access email, Teams, SharePoint/OneDrive, or even log into their Azure AD-authenticated workstations. Our corporate and staff personal data is now inaccessible to us as the controller. Access restoration has been explicitly conditioned on payment of a disputed invoice (not related to Microsoft licence pass-through). This raises several concerns: Operational: we are effectively paralysed. Security/IP: the partner still has exclusive access to proprietary source code and other confidential business data. Compliance: we cannot meet our GDPR/UK DPA obligations on availability of personal data while locked out. We contacted Microsoft Business Conduct on Friday evening with full details of the incident, but so far no human response has been received to those emails. Questions for the community From a Microsoft tenancy perspective – what’s the fastest/most effective way to remove a partner’s delegated admin access if they refuse to release it voluntarily? Has anyone experienced or seen a similar scenario where access was conditioned on disputed payments? Are there formal Microsoft Partner Code of Conduct provisions that directly address this type of misuse of delegated admin rights? Any practical lessons on balancing the technical fix (regaining control of the tenant) with the legal approach (injunction, regulatory notifications)? My focus is on regaining secure access, protecting data/IP, and ensuring compliance. Any experience, insight, or links to Microsoft policy/resources would be greatly appreciated.
Windows hardware developer program deactivated in Partner Center - support cases closed unresolved.
Hello, I need assistance with the Windows Hardware Developer Program in Partner Center. My account shows as deactivated and inaccessible, even though my account is fully authorized and, I am the Global Administrator for our Entra ID tenant. Our organization has an active EV code signing certificate. Our D-U-N-S/company information is valid I have already opened Partner Center support tickets, but they were closed without resolution: Case ID: 2508050010001953 Case ID: 2508080010002600 Case ID:2508160010000069 Case ID:25081900100000123 First two tickets got closed, last two tickets I just opened asking for more clarification. Our company is desperately need to get WHQL certified driver so our customers can ship Windows products. From other community posts, it seems this may require a manual review and escalation to Partner Center Operations / Vetting Team, since automated provisioning has failed. Could a Microsoft representative please review this case and escalate it appropriately? Thank you, Huei-Mei Su Lisuantech
Problems Registering for the Hardware Program
Hello! Over a week ago I found, that my organization account for some reason disappeared/deleted without notification and I couldn't log in to it anymore... Last year our company participated in the Hardware Developer program, had the verified Developer profile, and successfully submitted the hardware programs. Just after that, I registered the organization again, entered the same company data for the verification, and also passed the Developer verification again very quickly, then clicked to participate in the Hardware Program again. For some reason, I still don't see the Hardware Program active in my account, but together with that I can't activate it again in the list of available programs. So it is not active and I can't select it to activate it... I created a support ticket 10 days ago and I still waiting for the resolution... I have tried to ask what is the issue, but received a response - "Account Verification is still under review". After that, I asked another question about the issue and how much time will it take to resolve it - but received no response... Could someone explain what happened? Why the organization was deleted? Why after successful Developer profile verification the support team tell, that verification is still going on? Why I don't see the Hardware program dashboard if I have activated it already?Do More with Microsoft 365 E3 promo
The link for this promo downloads a locked PDF that no one seems to be able to open. How do we access the details of this promo? Please advise Partner blog post: https://www.microsoft.com/en-us/americas-partner-blog/2024/12/16/microsoft-365-copilot-enables-new-opportunities-for-partners/ Link to PDF: https://aka.ms/DMWL_ME3_Promo_ExecSum Promo offer Do More with Microsoft 365 E3 promo Security remains a top priority for customers. The introduction of AI amplifies this concern, underscoring the importance of safeguarding data. Now through June 30, 2025, CSP partners will receive a 15 percent discount off the net partner price for new-to-Microsoft 365 E3 customers. Microsoft 365 E3 provides essential foundations to enable AI, including Microsoft 365 apps and security capabilities that simplify IT management and support customers on their Zero Trust journey. For customers seeking next-level threat protection and data security, Microsoft 365 E5 provides additional capabilities such as XDR to defend across the infrastructure and ensure data security throughout the data lifecycle.
About Preconsented applications
Hello, I am trying to more effectively administrate our customers via Microsoft Graph API, and are trying to follow this guide: https://learn.microsoft.com/en-us/graph/auth-cloudsolutionprovider This is where I don't get things working: Additionally, as a partner developer, you can build a partner-managed app to manage your customers' Microsoft services. Partner-managed apps are often called preconsented apps because all your customers are automatically preconsented for your partner-managed apps. This means when a user from one of your customer tenants uses one of your partner-managed apps, the user can use it without being prompted to give consent. Partner-managed apps also inherit Delegated Admin Privileges, so your partner agents can also get privileged access to your customers through your partner-managed application. I have attempted to use Microsoft Graph via Powershell, HTTP, both delegated and user-methods, nothing seems to be working. If trying Connect-Mggraph -ClientId "***partnermultitenantappid***" -TenantId "****customertenantid****", I get this error: AADSTS90099: The application '****' (*****) has not been authorized in the tenant '*****'. Applications must be authorized to access the customer tenant before partner delegated administrators can use them. This gets solved if I log in to the tenant directly and add the application as per normal. But that eliminates the whole point about something being pre-consented. I have followed all the steps and I have added the application as a serviceprincipal for the AdminAgents group, which I have confirmed is also assigned to the PartnerRelationship with all permissions. The Partner relationship has all rights minus Global Administrator as part of the steps of troubleshooting the issues ive encountered thus far. What am I missing? Again reading from the article: Partner-managed apps also inherit Delegated Admin Privileges, so your partner agents can also get privileged access to your customers through your partner-managed application. Final question: Is it only possible to authenticate to customer tenants with delegated authentication, or is it possible with even application authentication as well?
Partner Center API: Getting subscription usage count
Goal: Given a customerId, skuId, and productId for a specific microsoft license check the usage data (i.e. how many used / unused licenses) for that license. Examples: skuId = "0004" productId = "CFQ7TTC0JXCZ" Steps taken so far: I can pull down a customer's subscriptions via https://learn.microsoft.com/en-us/rest/api/partner-center/manage-orders/get-s-s-s-s-s-s-s-s-s-s-subscriptions. The response contains a skuId and productId, so I can filter the response to find the license I'm interested in. However, the https://learn.microsoft.com/en-us/rest/api/partner-center/manage-orders/get-s-s-s-s-s-s-s-s-s-s-subscriptions#microsoft.partner.core.collections.resourcecollection[microsoft.partner.services.subscriptions.v1.models.subscription] does not contain any information about license usage. It contains the total quantity associated with the subscription but doesn't specify the number of licenses used. I can use a different https://learn.microsoft.com/en-us/rest/api/partner-center/manage-customer-accounts/get-subscribed-skus#microsoft.partner.providers.contracts.v1.productsku to pull down all the subscribed skus for a specific customer. This endpoint does return the license usage information that I want, but it doesn't return the desired productId and the returned skuId doesn't match the pattern I expect. It also returns a skuPartNumber that isn't helpful to mapping back to my input skuId and productId I'm stuck, so any support would be much appreciated! Thank you!Microsoft Partner Centre application Help!!!!
Sorry to contact you again on this, but nothing has changed: my application is still being rejected for the original reasons. Silent Install I cannot find any literature that hints at what form the MS silent install command should take (other than the standard one I entered: "myapp.exe" /SILENT ). Copilot was unable to help. Attempts to find the answer on other forums (e.g. stack overflow) have been dismissed as having nothing to do with programming! It would be a great help if the application form listed sample strings. Report This File As Safe I purchased a Microsoft Authenticode Code Signing Certificate in November (for $369) believing that it would prevent users from encountering the Windows Defender screen when they installed my app. This proved not to be the case. Sectigo, the vendor, couldn't tell me how I might overcome this hurdle, but suggested I might improve my chances of doing so were I to submit my app to the MS store. This done, I discovered that I needed to 'Report this file as safe'. Though I don't understand the logic of this (self-certifying, that is), I have tried to do so several times without success because: (a) For three weeks or so, nothing happened when I clicked the button, (b) When, finally, I was transported to a report form, filling it out and forwarding it to MS made no difference. Surely, it would save everyone's time if someone from MS could tell me in layman's terms what I need to do to satisfy the application process. Regards, RichardHelp with using Partner Program and account verification
I just created my own business and I am trying to launch our first app on the Microsoft Store. I created an account in the partner system under my personal account, because that is what I use for all business communications. I then created a business developer account, setting it up with all the required information (including business emails for support and contact info instead of my personal email). While going through the verification process, I kept on getting rejected during employment verification, and they couldn't tell me why I was getting rejected, which is understandable, but Microsoft support would close any ticket I created asking for help with the verification process. And now it says I do not meet the necessary requirements to finish the verification process and I can't do anything to fix it. So I am not sure what I do now. Do I need to delete my account and make a new non-business account and submit the app under a personal account? And if I do that, can I eventually transfer the app to a business account? Is there anything I can do with the business account now that it has failed verification? It looks like I am just stuck and can never fix it. What are the requirements for having a business account on the Microsoft Store? I was not able to find any information about this in the Microsoft support documentation. Am I too young of a company? Do I have too few employees? Do I need to be more established and public before I apply? I tried to follow the documentation exactly for verification and I never saw anything indicating I did not have the necessary requirements. I appreciate any help you can give. I have never done something like this before, and I had a hard time trying to understand how to fix the rejections and where to go from here.Microsoft Partner Centre application has been rejected for reasons I have addressed
My Microsoft Partner Centre application has been rejected for two reasons I believe I have addressed several times. I contacted Support (Partners at Microsoft), and was told I needed to raise a ticket. I did so with email address removed for privacy reasons thirteen days ago (the support confirmation email I received quoted an ETA of '8': I don't know whether this is hours or days). Here are the two items that are failing my application: "10.2.10 Security A security prompt with the message, "Windows Protected Your PC. Microsoft Defender Smartscreen prevented an unrecognized app from starting. Running this app may put your PC at risk" was displayed during installation of the x64 package (separate from any UAC prompt). Your product must not compromise the security of users, the Store, or a related system, nor cause that security to be called into question. If you believe the Smartscreen warning is a false positive then please perform the following actions to expedite resolution of the issue. 1. Download the file using Microsoft Edge browser. 2. When informed that the download was blocked by Smartscreen select the blocked file and click "Report this file as safe | I am the owner or representative of this website and I want to report an incorrect warning about it " 3. Fill out and submit the form. You will receive an email confirming receipt of your report. 4. 24 hours after sending the report confirm that the file no longer displays a Smartscreen warning before resubmitting the product for certification." I've followed these instructions several times; no form comes up/nothing happens when I click the button Report this file as safe. "10.2.9.2 Security - Package Submissions Win32 products must install silently. For more details see the Installer parameters section at https://docs.microsoft.com/en-us/windows/uwp/publish/msiexe/provide-package-details" It does install silently using the command provided (though mine is a single user app that won't be loaded using a silent install). Thanks in advance for any advice you can provide. Regards, Richard
