This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 83%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
I have been steadily getting emails from Microsoft Security the past few days for a microsoft account I do not regularly use much outside of email. These essentially look like security suggestions for accounts I have no idea what they are or who they are for. All links do go to microsoft.com / portal.azure.com hosts so they look legit. The emails look something like this:
===
You have a new recommendation for XXXXXXX (this is what I assume is a username)
Enable password hash sync if hybrid
See why this recommendation was generated for your directory and how to remediate it in the (link) Microsoft Entra admin center.
...
===
I tried navigating to the Entra admin but it says I do not have access. I worry that someone/something has gained access to my account and is doing nefarious things . Any help would be appreciated.
Another update - when I sign into the azure portal it seems like my access to a lot of things is being blocked. I was asked to sign in again when trying to get into the Entra admin and when I did - this message appeared:
===
Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '<app guid>' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.
===
This adds to me fear the an entity has gained access to my account and has removed or revoked my access to manage it somehow.
Another update - when I sign into the azure portal it seems like my access to a lot of things is being blocked. I was asked to sign in again when trying to get into the Entra admin and when I did - this message appeared:
=== Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '<app guid>' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.
===
This adds to me fear the an entity has gained access to my account and has removed or revoked my access to manage it somehow.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(198.4, 26%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJK%3C/text%3E%3C/svg%3E)
Hello @kthomp53,
Thank you for reaching out to Microsoft Q&A.
We understand that you're receiving security notifications emails from Microsoft, related to a Microsoft account that you may not be actively using. These emails are likely security recommendations related to your account in Microsoft's even if you're not actively managing or using the account.
Here are a few reasons why this could be happening:
If this Microsoft account is tied to a work or school organization, they might be using Azure AD to manage accounts, and the email is part of their ongoing security checks.
Sometimes, even if you don't actively use the account, it could still be part of a subscription, service, or platform you're tied to (such as using Microsoft 365 for work, or Azure services).
Further, you have stated that you are seeing below error when you are trying to azure portal “Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '<app guid>' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.”
Usually, logging in by using your personal Microsoft Accounts (Outlook, Hotmail or OneDrive), you are connected to the Microsoft Services tenant by default. Within the default tenant, there is no linked directory for performing any actions. This behavior is expected. The purpose of allowing guest accounts is to support collaboration on files and resources across platforms like portal.azure.com and portal.office.com. However, for admin or security-related actions, you must either be a user in the same directory or an external user from another directory. A guest account linked to a Microsoft account (such as Gmail, Live, or Hotmail) won’t have these higher-level access permissions.
Also, to prevent this in future, we recommend removing any external organizations that are linked to your account which are no longer needed. Here's how you can do that:
Go to https://myaccount.microsoft.com/organizations.
On the left-hand menu, select "Organizations."
You'll see a list of your "Home organization and other organizations you collaborate with."
Next to the tenant or organization you want to remove, click the 'Leave' button.
Once you click 'Leave,' you will be removed from that organization. Please note that you cannot leave your home organization.
Please find the relevant document for more information: https://zcusa.951200.xyz/en-us/troubleshoot/entra/entra-id/app-integration/error-code-AADSTS50020-user-account-identity-provider-does-not-exist
I hope this explanation helps to clarify the situation. If you have any further questions or need assistance with any other issues, feel free to reach out.
Thanks & Best Regards,
Janaki Kota
Hello @kthomp53,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Hello @kthomp53,
Just checking in to see if the information I provided was helpful. If it was helpful, please consider upvoting my response. If you have any further queries regarding this issue, please feel free to post them here.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 9%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
Did you get to the bottom of this? I was also receiving similar e-mails, I piggybacked on this thread here: https://zcusa.951200.xyz/en-us/answers/questions/2141040/im-receiving-what-appear-to-be-fake-emails-from-ms
I have since left the external organisation I was part of, haven't received any additional e-mails since.
Hello - I appreciate your responses. I was just able to check back in on this - when trying to log into myaccount.microsoft.com it is giving me this error: "You can't sign in here with a personal account. Use your work or school account instead."
Hello @kthomp53,
Thanks for the prompt response.
We understand that you are now getting the error below when you are trying to access myaccount.microsoft.com.
"You can't sign in here with a personal account. Use your work or school account instead." As a part of troubleshooting, we have tried to reproduce the issue and noticed that when we are trying to access myaccount.microsoft.com with our personal account, it is getting redirected to the https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id URL. Later, we tried to check the same with work or school account and the above URL only can authenticate the work or school account.
If I replace "common" with "organizations", I can enter a personal account. But I will not be able to login again because of AADSTS50020 error: User account 'xxxxxx@hotmail.com' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Based on the error message, it seems to point this application is not for personal account login.
Whenever you sign in Azure portal using Microsoft Personal Account you by default get connected to the Microsoft Services tenant (f8cdef31-a31e-4b4a-93e4-5f571e91255a).
You can also confirm this by navigating to Azure Active Directory > Overview blade and you can see f8cdef31-a31e-4b4a-93e4-5f571e91255a as Tenant ID.
In this default tenant, you do not have any directory associated with it which you can confirm by navigating to settings.
As this is a standard tenant without any directory associated, you cannot perform actions such as creating new users, groups, enterprise applications, and so on. To perform administrative actions, you must have administrative access to the tenant.
For this purpose, you need to create your own tenant rather than using the Microsoft Services (f8cdef31-a31e-4b4a-93e4-5f571e91255a) tenant.
To create a new tenant, open in-private/incognito browser window (just to avoid SSO), access https://azure.microsoft.com/en-us/free/ to create a free Azure account.
When you create a new tenant, you by default become the Global Administrator of the new tenant and have full access to all the options in that tenant.
If you still want to access Entra portal using your personal Microsoft account only, you can invite that user as a guest user as mentioned here: https://zcusa.951200.xyz/en-us/azure/active-directory/external-identities/add-users-administrator#add-guest-users-to-the-directory and assign the Global Administrator role.
Once you are added to an azure tenant and you accept the invite sent to you via email, you can use https://portal.azure.com/#create/Microsoft.AzureActiveDirectory URL to create your own tenant as well.
Thanks & Best Regards,
Janaki Kota
If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Hello @kthomp53,
Just checking in to see if the information I provided was helpful. If it was helpful, please consider upvoting my response. If you have any further queries regarding this issue, please feel free to post them here.
Hello @kthomp53,
Just checking in to see if the information I provided was helpful. If it was helpful, please consider upvoting my response. If you have any further queries regarding this issue, please feel free to post them here.