Account Blocked due to Suspicious Activity

Account Blocked Due to Suspicious Activity

Issue

When attempting to sign in, some accounts may receive the error:
“Account being blocked due to suspicious activity.”

This indicates that Microsoft has detected multiple risky sign-in attempts. The account is then flagged as high risk, and all future sign-in attempts are blocked until the risk level is cleared.

Resolution

To remove the risk level and restore access:

  1. Have the user change their password at: https://AMI.creighton.edu.

  2. Allow up to 15 minutes for Microsoft to remove the high-risk designation after the password change.

  3. Once the risk level is cleared, the user can attempt to sign in again.

Notes

  • This lockout is imposed by Microsoft and cannot be bypassed.

  • Common causes include:

    • Multiple failed or suspicious sign-in attempts.

    • Signing in while connected to a VPN.

  • Important: Creighton does not support the use of third-party VPNs. Only Creighton-provided VPNs, such as GlobalProtect, should be used.

Print Article