Admin account recovery

Question

Admin account recovery

Mark Adams 0

I am the only Global Administrator of a Microsoft 365 Business tenant. I am locked out due to MFA after a phone change. I cannot sign in anywhere, including support pages. I need identity escalation for admin account recovery.

Mark Adams 0 Reputation points

2026-05-09T13:37:01.9+00:00

I have tried the support line 10 times and it fails to understand english. I am English
Mark Adams 0 Reputation points

2026-05-09T13:39:38.54+00:00

Is there no other way of creating this ticket than going through the unresponsive automated phone line, it fails to get anywhere every time I try. It just says it cannot help me or doesn't understand the domain. I need to speak to a human.

“Yes – I need to create a ticket and speak with the Data Protection team for tenant admin MFA reset / tenant recovery.”
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-11T02:10:21.7633333+00:00

Mark Adams

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: https://learn.microsoft.com/en-us/partner-center/customers/gdap-preventing-tenant-lockouts

If neither option is possible, please don’t worry—let us know, we are happy to assist you further!
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-12T07:04:31.0233333+00:00

Mark Adams

Following up to check if the resolution provided was helpful. Let us know if you need any further assistance.

1 answer

Your answer

Mark Adams 0 Reputation points

2026-05-09T13:37:01.9+00:00

I have tried the support line 10 times and it fails to understand english. I am English
Mark Adams 0 Reputation points

2026-05-09T13:39:38.54+00:00

Is there no other way of creating this ticket than going through the unresponsive automated phone line, it fails to get anywhere every time I try. It just says it cannot help me or doesn't understand the domain. I need to speak to a human.

“Yes – I need to create a ticket and speak with the Data Protection team for tenant admin MFA reset / tenant recovery.”
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-11T02:10:21.7633333+00:00

Mark Adams

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: https://learn.microsoft.com/en-us/partner-center/customers/gdap-preventing-tenant-lockouts

If neither option is possible, please don’t worry—let us know, we are happy to assist you further!
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-12T07:04:31.0233333+00:00

Mark Adams

Following up to check if the resolution provided was helpful. Let us know if you need any further assistance.

Answer 1

Use Microsoft’s Data Protection / Tenant Recovery process, as only that team can reset MFA and restore access when the sole Global Administrator is locked out.

Follow these steps for identity escalation and admin account recovery:

Call Microsoft’s business support line
- Use the regional phone number listed under Customer service phone numbers - Microsoft Support or Support for Business Products in the documentation.
- Clearly state that this is a tenant lockout and that there is only one Global Administrator, who is locked out due to Microsoft Authenticator / MFA.
Navigate the IVR to reach the Data Protection team In many regions the call flow is automated. Use wording similar to this when prompted:
- When asked for the problem type: say “Authenticator”.
- When asked what product: say “Office 365 for business” or “Microsoft 365 for business”.
- When asked whether this is an education or company account: say “For companies”.
- When asked if there is another administrator: say “No”.
- When asked if a service request is needed: say “Yes – I need to create a ticket and speak with the Data Protection team for tenant admin MFA reset / tenant recovery.”
Work with the Data Protection team
- The frontline agent will create a Data Protection / Tenant Recovery ticket and route it to the specialized team.
- Be prepared to provide:
  - Admin UPN (email) for the locked tenant.
  - Tenant domain(s) (e.g., contoso.onmicrosoft.com and any custom domains).
  - Business verification details and documentation proving ownership and admin rights.
- The Data Protection team will verify identity and then reset MFA / security info for the Global Admin so that a new authentication method can be registered.
If phone contact repeatedly fails: create a temporary trial tenant to open a ticket
- Sign up for a new Microsoft 365 trial tenant (separate from the locked tenant).
- In the new tenant, go to the Microsoft 365 admin center → Support → Help & support and open a ticket.
- In the ticket, explicitly state:
  - This new tenant is only for contacting support.
  - The locked tenant name, domain, and admin UPN.
  - That this is a Global Admin MFA lockout and there is no other Global Admin.
  - Request escalation to the Data Protection team for tenant admin MFA reset / tenant recovery.
- After recovery of the original tenant, cancel the trial to avoid charges.
After access is restored
- Sign in as Global Admin and add multiple MFA methods (Authenticator on more than one device, phone, SMS, etc.).
- Configure Self-Service Password Reset (SSPR) and ensure alternate contact info (email, mobile) is set so future recovery is easier.

This path (phone escalation or trial-tenant ticket) is the supported way to recover a locked sole Global Admin account when MFA blocks all sign-in and no other admin can reset MFA.

References: