Decommission the old Microsoft 365 tenant only after your checks pass, because deleting a subscription starts a short clock on your data. Learn what Microsoft requires before a tenant can go, how domain removal works and follow 6 steps in the right order.
Cutover is over, users are happy and the old tenant still sits there with a bill. Your next job is to decommission it, and that feels like the last easy task.
I decommission old Microsoft 365 tenants for a living, and I treat the last step as the riskiest one. Here you see what Microsoft requires, in what order, and what to check before you delete anything.
When is It Safe to Decommission the Old Microsoft 365 Tenant?
Decommission is safe when every check from your migration plan passes and users confirm their data. I wait for a full working period in the new tenant before I touch the old one.
Microsoft's page on data retention, deletion and destruction says a paid subscription that ends keeps customer data in a limited function account for 90 days. After that period Microsoft disables the account and deletes the data, and 180 days is the outer limit.
Tenant deletion has a faster clock. Microsoft says that after you delete a Microsoft 365 subscription, it moves to Disabled and then Deprovisioned 72 hours later, and the data is permanently deleted in three days.
What must be Gone Before a Tenant can be Deleted?
Microsoft's page on deleting a tenant in Microsoft Entra ID lists the checks. Only a Global Administrator can delete the tenant.
| Item | What Microsoft requires |
|---|---|
| Invoices | All outstanding amounts are paid |
| Users | Only the Global Administrator who deletes the tenant remains |
| Applications | No applications remain in the organization |
| MFA providers | None are linked to the organization |
| Subscriptions | License based subscriptions reach the Deprovisioned state |
| Azure subscriptions | Cancel them, then delete or transfer them |
| Self service products | Products like Power BI and Power Apps are deleted |
Microsoft adds two warnings. If users sync from on premises, stop sync first, and deleting a self service sign up product is immediate and irrevocable.
How do You Remove a Domain From the Old Tenant?
Microsoft's page on removing a domain says the domain cannot be the default domain. Users, shared mailboxes, resource mailboxes and contacts must not use it.
Microsoft 365 groups, distribution lists and teams must not use the domain, and no admin account can sign in with it. Microsoft also says you must understand how email flow changes when the domain has MX records pointing to Microsoft 365.
Removal can take as little as 5 minutes, or several hours up to a day when many objects point at the domain. The onmicrosoft.com domain cannot be removed.
The tenant deletion page does not list domains as a requirement, but you remove the domain first if the new tenant needs it.
How do You Decommission the Old Microsoft 365 Tenant?
I follow six steps in this order to decommission the old Microsoft 365 tenant.
- Confirm the new tenant. Check mail, files, sites and teams with real users, and keep your rollback path open until they sign off.
- Take a final copy. Copy any files or sites that changed since the last copy, and export anything the new tenant does not hold.
- Move the domain. Move users and groups to another domain, then remove the old domain if it still sits in the old tenant.
- Clean the tenant. Stop directory sync, remove applications and MFA providers, delete self service products and delete every user except one Global Administrator.
- Cancel the subscriptions. Delete them in the Microsoft 365 admin center and wait 72 hours until they reach Deprovisioned.
- Delete the tenant. Sign in as the Global Administrator and delete the organization in the Microsoft Entra admin center.
Before step 1, read Microsoft 365 migration rollback so you know what you can still undo. For the checks that come before cutover, read Microsoft 365 migration planning checklist.
What should You Confirm Before You Close the Old Tenant?
Nobody can open the old tenant after deletion, so confirm the new tenant holds everything first. Check mail, files, sites and teams with real users, and export anything the new tenant does not hold.
List anything that points at the old tenant, like saved links, flows and workflows. Rebuild or replace them before you cancel subscriptions.
For sites, read how to migrate a SharePoint site to another tenant. For Teams, read what does not migrate in Microsoft Teams.
What are the Best Practices to Decommission a Tenant?
- Wait for sign off. Decommission the old tenant only after users confirm their data.
- Copy last. One final copy before you decommission beats a second migration.
- Mind the clock. Subscription deletion starts a 72 hour countdown.
- Clear the domain first. Users, groups and mailboxes block domain removal.
- Keep one admin. The Global Administrator who deletes the tenant must stay.
Which Mistakes Cause Data Loss When You Decommission a Tenant?
Teams repeat four errors when they decommission a tenant. They delete subscriptions before the final copy, and they forget workflows and flows that still point at the old tenant. They also skip the domain check, and they close the tenant before users sign off.
My Verdict on Closing the Old Tenant
Decommission is a project with its own order, not a button. Microsoft sets the checks and your sign off sets the date.
Copy last, clear the domain, cancel subscriptions and decommission the old tenant only when everyone agrees. Then the old bill ends and nobody loses a file.
Frequently Asked Questions
How do You Decommission an Old Microsoft 365 Tenant?
Confirm the new tenant, take a final copy, move the domain, clean the tenant, cancel subscriptions and delete the organization as Global Administrator.
Who can Delete a Microsoft 365 Tenant?
Microsoft says only a Global Administrator can delete a Microsoft Entra organization. You do it from the Microsoft Entra admin center.
What Blocks Tenant Deletion?
Unpaid invoices, extra users, applications, MFA providers and active subscriptions block deletion. Self service products and Azure subscriptions block it too.
How Long do You Wait After Deleting Subscriptions?
A deleted Microsoft 365 subscription moves to Deprovisioned 72 hours later, according to Microsoft. Wait that long before you retry tenant deletion.
How Long does Microsoft Keep Data After a Subscription Ends?
Paid subscription data stays in a limited function account for 90 days according to Microsoft. Deletion happens after that, no later than 180 days.
Do You Remove the Domain Before You Delete the Tenant?
Domains are not on Microsoft's requirement list for tenant deletion. Remove the domain first if the new tenant needs it, after you move users, groups and mailboxes off it.
Can You Remove the onmicrosoft.com Domain?
No. Microsoft says the onmicrosoft.com domain cannot be removed. You remove your own custom domains from the old tenant instead.
Jamie blends strategic marketing insight with technical writing, turning migration and recovery topics into guidance that works for technical and general readers alike.
Published 20 October 2026. Tenant deletion details come from Microsoft's page on deleting a tenant in Microsoft Entra ID. Domain steps come from Microsoft's page on removing a domain. Data retention comes from Microsoft's page on data retention, deletion and destruction. Microsoft can change these limits, so check them before you plan.