Fix it now
Nothing switches off at midnight, and the stages differ enough that treating them as one deadline is how organisations lose data they thought was safe. A Microsoft 365 subscription bought directly runs Active, then Expired for 30 days, then Disabled for 90 days, then Deleted – and deletion is the only irreversible step in this article.
- Diary two dates for Microsoft 365, not one: the renewal, and the end of the Disabled period as your hard export deadline.
- Check whether the 30-day Expired stage even applies to you. As of 9 February 2026 it no longer applies to licence-based subscriptions bought directly through a Microsoft Customer Agreement.
- Expect apps rather than data to fail first. Microsoft 365 Apps enter reduced functionality mode – view and print only, no editing or creating – and stay installed.
- Treat Windows activation lapses as cosmetic and compliance-related, not operational. Microsoft states Windows will always be able to get critical security updates even where the copy is not genuine.
- Do not panic about a lapsed antivirus subscription. On Windows 10 and 11, Defender Antivirus is re-enabled automatically if the non-Microsoft product expires, is uninstalled or stops providing real-time protection.
- Diary CALs against your server upgrade project rather than a calendar date. They do not expire; they stop covering you when the server version moves past them.
The cancellation window is separate from all of this: seven calendar days from purchase, with a pro-rated refund, and it does not reopen until the subscription renews into a new term. A subscription cancelled inside that window skips Expired and goes straight to Disabled.
If the renewal is going ahead, none of this matters and you can stop here. Below is the timeline for each licence type, the volume licensing variations, and the one stage that cannot be undone.
Why it happens
Vendors have two competing interests when a payment stops. They want to stop supplying a paid service, and they want to avoid destroying a customer’s data over an expired card. The result is a sequence rather than a switch: a period where everything still works and the warnings escalate, a period where the service is withdrawn but the data is retained, and finally deletion. Most people renew during the first stage and never learn that the later ones exist.
For Microsoft 365 the sequence has published durations, and they are longer than the folklore suggests. A subscription runs Active, then Expired, then Disabled, then Deleted. Bought directly from Microsoft, Expired lasts 30 days and Disabled lasts 90, so the full run to deletion is 120 days rather than the ninety that gets repeated. During Expired, users carry on normally and admins see warnings. During Disabled, users lose access and the apps drop to read-only with Unlicensed Product notifications, while admins can still reach the admin centre and the data but cannot assign licences. At Deleted, the data is deleted and the Microsoft Entra ID directory is removed.
Two variations matter enough to check rather than assume. Microsoft states that as of 9 February 2026 the Expired lifecycle state no longer applies to licence-based subscriptions bought directly through a Microsoft Customer Agreement – so a large group of buyers no longer has the 30-day cushion at all. And for volume licensing customers the durations differ by term: monthly and annual give 30 days Expired and 90 days Disabled, while multi-year gives 90 and 90, with the subscription only entering Expired once all the licences are removed.
A Microsoft 365 renewal that may not happen
You have this one if A budget decision that has not been made, a card that has failed, or a supplier relationship that is ending.
- Read the dates in the admin centre rather than working from a remembered number, because they depend on whether you bought direct, through a partner, through an Enterprise Agreement or through volume licensing.
- Treat the end of the Disabled period as a hard export deadline for mailboxes and files, not as a target for a decision.
- If you are on a Microsoft Customer Agreement bought direct, assume no Expired stage and work back from the Disabled period alone.
The apps have gone read-only
You have this one if Documents open and print, editing and creating are disabled, and an Unlicensed Product banner is showing.
- This is reduced functionality mode, and nothing has been uninstalled. Reassigning a valid licence restores full function without reinstalling anything.
- Check the mundane cause first: a machine offline for more than 30 days drops into the same state until it can connect again, with no billing problem behind it.
- Check the device count too. Each licence covers five desktops, five tablets and five mobile devices, and past ten devices the least recently used is deactivated automatically.
Windows has stopped being activated
You have this one if A desktop watermark and periodic reminders on a machine that otherwise runs normally.
- Do not treat it as an outage. Microsoft states that Windows will always be able to get critical security updates even where the version is not genuine, and that other updates and benefits are limited to genuine software.
- On a KMS-activated estate, check the host rather than the client: KMS activations are valid for 180 days and clients attempt renewal every seven days by default, so a client only fails after months of not reaching the host.
- Resolve it as a compliance item on a normal working timescale, at Settings then System then Activation.
An antivirus subscription has lapsed
You have this one if A vendor nag screen, definitions no longer updating, or a console showing the endpoint as out of date.
- Confirm which engine is actually active. Microsoft documents that Defender Antivirus is re-enabled automatically if the non-Microsoft product expires, is uninstalled or otherwise stops providing real-time protection.
- If you are letting the product go deliberately, uninstall it with the vendor’s own removal tool and then confirm in Windows Security that the built-in protection reports as on.
- Remember what does not come back: controlled folder access needs Defender Antivirus in active mode with real-time protection, so switch it on again once the third-party product is gone.
Full reference
The Microsoft 365 lifecycle, in the published order
| Status | How long, bought direct | What users see | What admins can do |
|---|---|---|---|
| Active | The term | Normal access to apps and data | Everything |
| Expired | 30 days | Normal access to apps and data | Reach the admin centre; renew |
| Disabled | 90 days | No access; apps read-only with Unlicensed Product notifications | Reach the admin centre and the data, but cannot assign licences |
| Deleted | Terminal | No access | Data is deleted and the Microsoft Entra ID directory is removed |
As of 9 February 2026, the Expired state no longer applies to licence-based subscriptions bought directly through a Microsoft Customer Agreement. For volume licensing, monthly and annual terms give 30 days Expired and 90 days Disabled, and multi-year terms give 90 and 90 – with the subscription entering Expired only once all licences are removed. Read your own subscription’s dates rather than a general figure.
What each licence type does when it lapses
| Licence | First effect | Where it ends up | What is genuinely at risk |
|---|---|---|---|
| Microsoft 365 subscription | Expired: service continues, warnings escalate | Data deleted after the Disabled period | Mail, files and tenant configuration |
| Microsoft 365 Apps | Reduced functionality mode | View and print only; nothing uninstalled | Nothing, if files live elsewhere. Work stops |
| Perpetual Office | Nothing; it does not expire | Support ends on the lifecycle date | Security updates, eventually |
| Windows OEM or retail activation | Nothing; the activation stands for that device | Not applicable | Nothing |
| Windows KMS client activation | Renewal attempted every seven days | Out of activation once the 180-day interval lapses | Compliance and reminders, not availability |
| Windows Server evaluation | Expires after 180 days | Convert to retail, or rebuild | Availability, and the work of rebuilding |
| Software Assurance | Nothing immediate on most products | Version rights and SA benefits end | Your upgrade path |
| Exchange or SharePoint Subscription Edition | Nothing immediate | SharePoint SE must be uninstalled; only 2019 may be used | The right to run the software at all |
| Antivirus subscription | Definition updates stop | Defender re-enables automatically on Windows client | Detection of anything new, briefly |
| CALs | No technical effect whatsoever | Nothing visible | Compliance only, which is what reviews find |
The only irreversible step
Once a Microsoft 365 subscription passes the end of its Disabled period, the data is deleted and the Microsoft Entra ID directory is removed. There is no support route that recovers it. If renewal is in any doubt, export mailboxes and files while the tenant is still inside the window – a third-party backup product only helps if you were already running one before the lapse.
Everything else in this article is recoverable. Apps come back when a licence is reassigned. Windows activation is a compliance item that can be resolved next week. An expired antivirus subscription leaves the machine scanned by the built-in engine. Only the tenant deletion is final, and it is the one that gets the least attention because it sits furthest from the renewal date.
Perpetual licences and the date that does end
A perpetual licence does not expire, and nothing revokes it. What ends is support, on a published lifecycle date rather than a billing one. Office LTSC 2024, Visio LTSC 2024 and Project 2024 LTSC all reach end of support on 9 October 2029 under the Fixed Lifecycle Policy, with five years of support and no extended phase behind it. After that the software keeps working and stops receiving security updates, which is a slower and quieter problem than a lapsed subscription and often a more serious one.
The exception worth naming is the Subscription Editions. SharePoint Server Subscription Edition requires active Software Assurance on server licences and CALs, or a subscription licence, and Microsoft’s stated position is that if it lapses you must uninstall the Subscription Edition software and may only install and use SharePoint Server 2019. Exchange Server SE similarly requires an active qualifying entitlement to install, run and stay current. For those products, lapsing is not a compliance footnote.
Which deadlines to diary, by situation
- Microsoft 365: the renewal date, and separately the end of the Disabled period as an export deadline. The second date is the one that costs money to miss.
- Antivirus: the renewal a month early, so there is time to compare the standing figure against alternatives before it auto-renews.
- Software Assurance: the agreement anniversary. Letting it lapse is a decision worth making deliberately, because re-adding it means waiting for the next agreement renewal.
- Server evaluations: the build date plus 180 days. An evaluation reaching its end in production is a rebuild, not a warning.
- CALs: your server upgrade project, not a calendar date. They stop covering you when the server version moves past them, and nothing announces it.
- Anything bought in the last week: the seven-day cancellation window, which is the only point at which quantities can be reduced.
When a licence is the actual fix
If a Microsoft 365 subscription has lapsed and the data still matters, renewing inside the Expired or Disabled period restores the tenant intact and is far less work than any recovery alternative – and after deletion there is no alternative. Arco can reinstate Microsoft 365 Business Standard and the other Business plans, and will check whether the seat count is still the right one before renewing at last year’s number. Where the honest answer is that you should renew fewer seats, or move some users to a lighter plan, we will tell you that rather than renewing the whole block. The reclaim pass costs nothing and usually reduces the bill more than any negotiation.
Questions people ask about this
How long do I actually have after a Microsoft 365 subscription expires?
Bought directly from Microsoft: 30 days in the Expired state, then 90 days Disabled, then deletion – 120 days in total. Volume licensing differs by term, and as of 9 February 2026 the Expired state no longer applies at all to licence-based subscriptions bought directly through a Microsoft Customer Agreement. Read the dates on your own subscription in the admin centre rather than relying on a general figure.
If I renew late, do I get everything back?
Inside the Expired or Disabled period, renewing normally restores the service with the data intact. After deletion has run there is no restore path: the data is deleted and the Microsoft Entra ID directory is removed. That is why the end of the Disabled period, not the renewal date, is the deadline worth diarising.
Does Office uninstall itself when the subscription ends?
No. The applications stay installed and enter reduced functionality mode, where users can view and print documents but all editing and creating features are disabled. Reassigning a valid licence restores full function without reinstalling anything. The same state appears on a machine that has been offline for more than 30 days, with no billing problem behind it.
Will Windows stop working if activation lapses?
No. Microsoft states that Windows will always be able to get critical security updates even if the version is not genuine, while other updates and benefits are limited to genuine software. You get periodic reminders and a watermark. It is a compliance problem and an irritation rather than an outage, and it should be resolved on a normal working timescale.
What happens to my machines if the antivirus subscription lapses?
On Windows 10 and Windows 11, Microsoft Defender Antivirus is re-enabled automatically if the non-Microsoft product expires, is uninstalled, or otherwise stops providing real-time protection. So the machine is scanned rather than unprotected. If you are dropping the product deliberately, uninstall it with the vendor’s tool, confirm Windows Security reports as active, and switch controlled folder access back on.
Can I reduce seats when I renew?
At renewal, yes. Mid-term is the difficulty: the new commerce cancellation window is seven calendar days from purchase, with a pro-rated refund, and it does not reopen until the subscription renews into a new term. That is why the practical approach is an annual commitment only for headcount you are confident about, with the rest on a monthly term.
