URGENT: Sole Admin Locked Out by MFA – Requesting Escalation to Restore Access

Question

URGENT: Sole Admin Locked Out by MFA – Requesting Escalation to Restore Access

Jeff Chiles 0

The sole admin in our organization has been locked out of his account due to issues with the Microsoft Authenticator. He has tried every support channel that exists and no one was able to help restore access for him (he already tried unregistering it, reinstalling, password resets, etc). We urgently need access restored for him. He can't even submit support inquiries like this due to being locked out. We are currently paying for an utterly useless subscription until he can access the account again.

Carolyne Milgo 1,151 Reputation points

2025-10-02T15:43:53.2533333+00:00
Hello Jeff!
Reach out to Microsoft Support for assistance.

Have you tried to use the global customer service phone numbers.

https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

or creating a ticket through a different account: https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-support?view=o365-worldwide#phone-support

When contacting support, provide your tenant ID and explain that no admin accounts (including partners) have access. Be prepared to verify your identity for security purposes.

The Microsoft data protection team typically will assist in regaining access or unlocking your account, depending on your scenario.

Plan to Prevent Future Lockouts

Create an Emergency Access Account (“Break Glass” Account):

Set up an emergency access account in Azure AD with permissions to bypass conditional access policies.

This account should only be used in emergencies and monitored closely.

More details: Microsoft Docs – Emergency Access

Policy Best Practice: Always exclude at least one admin or emergency account from restrictive conditional access policies.

Your answer

Carolyne Milgo 1,151 Reputation points

2025-10-02T15:43:53.2533333+00:00

Hello Jeff!
Reach out to Microsoft Support for assistance.

Have you tried to use the global customer service phone numbers.

https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

or creating a ticket through a different account: https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-support?view=o365-worldwide#phone-support

When contacting support, provide your tenant ID and explain that no admin accounts (including partners) have access. Be prepared to verify your identity for security purposes.

The Microsoft data protection team typically will assist in regaining access or unlocking your account, depending on your scenario.

Plan to Prevent Future Lockouts

Create an Emergency Access Account (“Break Glass” Account):

Set up an emergency access account in Azure AD with permissions to bypass conditional access policies.

This account should only be used in emergencies and monitored closely.

More details: Microsoft Docs – Emergency Access

Policy Best Practice: Always exclude at least one admin or emergency account from restrictive conditional access policies.