Xbox Error Code 0x87DD0021 — What It Means & How to Fix It

What Does This Error Mean?

Error 0x87DD0021 means Xbox Live is refusing your connection. This can happen because of a temporary server error, an account restriction, or a network configuration problem. It blocks access to online gaming, the Microsoft Store, and Xbox Live services.

Affected Models

Xbox One
Xbox One S
Xbox One X
Xbox Series S
Xbox Series X

Common Causes

Xbox Live services are temporarily down or undergoing maintenance
Your account has been flagged for a policy violation and has restricted access
Your network's NAT type is set to Strict, which blocks Xbox Live connections
Your router's UPnP (Universal Plug and Play) is disabled, preventing proper port forwarding
Your Microsoft account subscription (Xbox Live Gold or Game Pass Ultimate) has expired

How to Fix It

Check the Xbox Live status page at support.xbox.com/xbox-live-status. Confirm all services — especially Core Services — are showing as up.

If any service is listed as Limited or Down, wait for Microsoft to resolve it before troubleshooting further.
Check your NAT type. Go to Settings > General > Network settings > Test NAT type. You want NAT Type 1 (Open) or NAT Type 2 (Moderate).

NAT Type 3 (Strict) will cause Xbox Live connection errors. Enable UPnP in your router settings to open NAT.
Enable UPnP on your router. Log into your router's admin panel (usually at 192.168.1.1 or 192.168.0.1), find the UPnP setting, and turn it on.

UPnP lets your Xbox automatically open the ports it needs to connect to Xbox Live. This is the easiest way to fix a Strict NAT type.
Restart your Xbox and router. Hold the power button for 10 seconds, unplug both devices, wait 60 seconds, restart the router first, then the Xbox.

A full network restart often resolves temporary NAT and routing issues.
Check your Microsoft account subscription status at account.microsoft.com. Renew any expired Xbox Live or Game Pass subscription.

An expired subscription causes Xbox Live features to stop working, which can show up as a connection error.

When to Call a Professional

If this error is caused by an account enforcement action, contact Xbox Enforcement at enforcement.xbox.com. For network issues that persist after trying all steps below, contact your internet service provider to check your NAT and port settings.

Frequently Asked Questions

What is NAT type and why does it matter for gaming?

NAT (Network Address Translation) is how your router manages connections between your devices and the internet. For gaming, NAT Type 1 (Open) or Type 2 (Moderate) are best — they allow full communication with game servers. NAT Type 3 (Strict) blocks many connections and causes join failures, party chat issues, and errors like 0x87DD0021.

How do I log into my router settings?

Open a web browser on a phone or computer connected to your home network. Type 192.168.1.1 or 192.168.0.1 in the address bar and press Enter. You will see a login screen — the default username and password are usually printed on a sticker on the back of your router.

Could my account be banned without me knowing?

Yes — Xbox can apply temporary suspensions for policy violations without sending a prior warning. If you suspect an account action, visit enforcement.xbox.com to check your account standing. Temporary suspensions have an end date; permanent bans require an appeal process.