Windows
Conditional Access geofencing blocked sign-in until the account was excluded
The user could get into email but was blocked from accessing the Microsoft 365 account because a geofencing/conditional access rule was still applied. The account was added to the exclusion list after the Microsoft Entra ID P1 license was reactivated so the policy could be edited.
Killed once by someone from XL.net, on 2026-06-12.
Affects
Versions
- Windows
Apps
- Microsoft 365
- Microsoft Entra ID
What you see
- User can sign in, but the account shows a message that access is not available right now when opening email or the Microsoft 365 account.
Why it happens
Likely A geofencing / conditional access policy was blocking the sign-in, and the Microsoft Entra ID P1 license needed to manage that policy had been disabled by non-payment until it was reactivated.
When it shows up
Microsoft 365 sign-ins work, but one account is still blocked by a geofencing or conditional access policy
You are in this case if:
- Microsoft Entra ID P1 license status is Disabled or Expired due to non-payment
- The conditional access policy includes a non-US / geofencing rule
- The affected account is not in the exclusion list
1 fix below
The steps that killed it
The steps are behind a quick check
There are two ways in and both take a few seconds. Signing in opens the steps on every bug page; so does reading the picture.
Or answer this
Drawing a picture for you.
Can't read it? Sign in instead.
Someone from XL.net killed this on a Windows computer on 2026-06-12. It is written up from that one repair, so it cites no outside page.