Microsoft Business Account locked

For a sole Global Administrator who is completely locked out due to MFA with no alternate methods and no other admins, the only supported path is recovery through Microsoft’s Data Protection/Tenant Recovery process. The steps are:

1. Confirm there are no other Global Admins
   • If there is any other Global Administrator on the tenant, that admin must:
     • Sign in to the Azure portal → Microsoft Entra ID → Users → select the locked-out admin account → Authentication methods → select Require re-register multifactor authentication.
     • After this, sign-in will prompt for fresh MFA registration for the admin account.
   • If there is no other Global Admin (your case), proceed to step 2.
2. Contact Microsoft Data Protection team by phone
   • Use the regional phone number listed under Customer service phone numbers - Microsoft Support to reach Microsoft support.
   • When navigating the phone menu/IVR, clearly indicate:
     • The issue is with Authenticator / MFA.
     • The product is Office 365/Microsoft 365 for business.
     • The account is a company/organization (work) account, not personal.
     • You are the only Global Administrator and are locked out due to MFA.
     • You need the Data Protection team to assist with MFA reset / re-registration for the tenant admin account.
   • The frontline agent should create a service request and route it to the Microsoft Data Protection / Tenant Recovery team, who will verify identity and ownership and then reset MFA/restore access.
3. If phone support is difficult to reach: create a temporary trial tenant to open a ticket
   • As an alternative, create a new Microsoft 365 trial tenant (separate from vbtechsolutions.onmicrosoft.com).
   • Sign in to the new tenant’s Microsoft 365 admin center and open a support ticket.
   • In the ticket, state clearly that:
     • The problem is with a different existing tenant (vbtechsolutions.onmicrosoft.com).
     • You are the Global Admin of that tenant but are locked out due to MFA with no alternate methods.
     • You need the ticket escalated to the Data Protection team to reset MFA / security info for the admin account.
   • Be prepared to provide business and identity verification as requested.
4. If your subscription is through a partner/reseller
   • If the Microsoft 365 subscription was purchased via a CSP/partner, ask the partner to open a support request with Microsoft on your behalf and request Data Protection/Tenant Recovery for your locked tenant.

The Data Protection team is the only channel that can override MFA for a sole Global Admin who has no other authentication methods and cannot access the admin portals.

References:

• Troubleshoot sign-in issues and account access problems
• Preventing tenant lockouts
• Common problems with two-step verification for a work or school account
• Microsoft account has been locked
• Can't set up MFA because five devices are already registered to use an authenticator app
• Global Admin Locked out - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Mandatory multifactor authentication for Azure and admin portals