My tenant/Global Admin account is locked.

Question

My tenant/Global Admin account is locked.

John Jensen 0

My tenant/Global Admin account is locked. This requires escalation to the Microsoft Data Protection Team

Sridevi Machavarapu 33,820 Reputation points Microsoft External Staff Moderator

2026-04-16T19:44:09.7833333+00:00

Hello John Jensen,

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: Customer service phone numbers - Microsoft Support

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: Preventing Tenant Lockouts - Partner Center | Microsoft Learn

If neither option is possible, please don’t worry—let us know, we are happy to assist you further!
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

1 answer

Your answer

Sridevi Machavarapu 33,820 Reputation points Microsoft External Staff Moderator

2026-04-16T19:44:09.7833333+00:00

Hello John Jensen,

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: Customer service phone numbers - Microsoft Support

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: Preventing Tenant Lockouts - Partner Center | Microsoft Learn

If neither option is possible, please don’t worry—let us know, we are happy to assist you further!
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 1

For a locked tenant or Global Administrator account where no other global admin can help, the Microsoft Data Protection Team must be engaged to restore access.

Follow these steps:

Confirm there is no other Global Administrator
If another global admin exists in the tenant, that admin should sign in to the Azure portal → Microsoft Entra ID → Users → select the locked admin account → Authentication methods → Require re-register multifactor authentication. This forces MFA re-registration and typically resolves access issues.
If you are the only Global Administrator (tenant lockout)
In a true tenant lockout scenario (only global admin is locked and cannot sign in to any admin portal or open a ticket):
- Open a support case with Microsoft and request escalation to the Data Protection Team. They are the only team that can:
  1. Reset credentials of an administrator account.
  2. Help regain access to a tenant owned by the organization.
- Use the global customer service phone numbers listed under Global Customer Service phone numbers and clearly state:
  - The issue is a tenant lockout.
  - The caller is the only Global Administrator.
  - Escalation is needed to the Microsoft Data Protection Team / Tenant Recovery.
If completely unable to open a ticket from the locked tenant
As shown in similar cases, if sign-in to the original tenant is impossible, one of these approaches is used:
- Call the regional support number directly and ask the agent to create a Data Protection / Tenant Recovery ticket on behalf of the locked tenant. Provide:
  - Tenant domain name.
  - Global admin UPN/email for the locked account.
  - Description of the lockout (MFA lost, account locked, etc.).
- If frontline support cannot route correctly, some customers create a temporary trial tenant, sign in as admin there, and from that tenant’s Microsoft 365 admin center submit a support request explicitly asking to speak with the Data Protection Team for the original locked tenant. In the ticket, include:
  - The original tenant’s domain.
  - The locked global admin account.
  - Confirmation that this is a tenant lockout and there is no other global admin.
What the Data Protection Team does
After verification of ownership, the Data Protection Team can:
- Reset the global admin credentials or MFA methods.
- Help reclaim or confirm ownership of the tenant if needed.

Until the Data Protection Team completes verification and resets access, no one (including forum moderators or standard support agents) can bypass security controls or directly unlock the tenant/global admin account.

References: