administrator MFA lockout

Question

administrator MFA lockout

Frida R 0

I am the only Global Admin of my Microsoft 365 tenant and I am completely locked out due to MFA. I have no alternative authentication methods. I need an MFA reset or admin recovery. I have called 8 times today, waited in line for 3 hours and then got fed up.

I want to open a service request and be routed to the Data Protection Team to regain access to the tenant and reset the admin’s authentication methods. How do I do that when I cant log in anywhere (I am currently logged in with another account)

Thanmayi Godithi 11,825 Reputation points Microsoft External Staff Moderator

2026-04-27T10:59:33.4266667+00:00

Hi Frida R,

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: Customer service phone numbers - Microsoft Support.

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: Preventing tenant lockouts - Microsoft Learn.

If neither option is possible, please don’t worry and share the details requested over Private message.
Frida R 0 Reputation points

2026-04-27T11:45:17.9333333+00:00

I have been calling all morning and been kept waiting or been disconnected. Now I cant even call because my number seems to have been blocked. When I call I get no options at all, just a referral to a website which is of no use to me since i cant log in. How do I send a private message please?
Thanmayi Godithi 11,825 Reputation points Microsoft External Staff Moderator

2026-04-27T13:23:18.0133333+00:00

Hi Frida R ,

You can find the Private message option right under your question.
Amy Vasudevan 20 Reputation points

2026-05-13T11:59:03.3933333+00:00

I am facing the same problem. I have tried calling the support number over 10 times and keep getting cut off. How can I get the DNS TXT record

1 answer

Your answer

Thanmayi Godithi 11,825 Reputation points Microsoft External Staff Moderator

2026-04-27T10:59:33.4266667+00:00

Hi Frida R,

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: Customer service phone numbers - Microsoft Support.

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: Preventing tenant lockouts - Microsoft Learn.

If neither option is possible, please don’t worry and share the details requested over Private message.
Frida R 0 Reputation points

2026-04-27T11:45:17.9333333+00:00

I have been calling all morning and been kept waiting or been disconnected. Now I cant even call because my number seems to have been blocked. When I call I get no options at all, just a referral to a website which is of no use to me since i cant log in. How do I send a private message please?
Thanmayi Godithi 11,825 Reputation points Microsoft External Staff Moderator

2026-04-27T13:23:18.0133333+00:00

Hi Frida R ,

You can find the Private message option right under your question.
Amy Vasudevan 20 Reputation points

2026-05-13T11:59:03.3933333+00:00

I am facing the same problem. I have tried calling the support number over 10 times and keep getting cut off. How can I get the DNS TXT record

Answer 1

To regain access as the only Global Administrator with no working MFA methods, the recovery must go through Microsoft Support and the Data Protection team. Since sign-in to the locked tenant isn’t possible, use one of these supported paths:

Call Microsoft Support and request Data Protection
1. Use the global customer service phone numbers listed at Customer service phone numbers - Microsoft Support.
2. When the IVR/agent asks about the issue, clearly state:
  - The problem is with Authenticator / multifactor authentication.
  - The product is Office 365 for business / Microsoft 365 for business.
  - The account is a company (work) account.
  - You are the only Global Administrator and are locked out due to MFA.
  - You need to open a service request and be routed to the Data Protection team to reset the admin’s authentication methods and restore tenant access.
3. If asked whether there is another admin, answer No so the case is handled as a tenant lockout.
4. Be prepared to provide business documentation and tenant details for identity verification (domain, admin UPN, organization information).
If calls keep failing, create a temporary tenant to open a ticket
1. Register a new trial Microsoft 365 tenant (separate from the locked one).
2. Sign in to the Microsoft 365 admin center of this new tenant.
3. Go to Support → Help & support and create a support request.
4. In the ticket description, clearly state:
  - This new tenant is only for contacting support.
  - The real issue is a different existing tenant where you are the only Global Admin and are locked out due to MFA.
  - Request escalation to the Data Protection team for MFA reset / admin recovery on the original tenant.
  - Include the locked tenant’s domain, admin username, and error behavior.
5. Work with the support engineer and Data Protection team through the case until access is restored, then cancel the trial tenant to avoid charges.

If the tenant was created or is managed by a Microsoft partner or reseller, their support channel can also open a Data Protection ticket on your behalf.

Note: Forum moderators and standard support channels cannot bypass identity verification or directly change tenant ownership or admin MFA; all such actions must go through Microsoft’s Data Protection / tenant recovery process.

References: