Sole Global Admin Account Locked Out

Question

Sole Global Admin Account Locked Out

Andie Sammut 0

I need tenant recovery of a sole global admin i think i need the Microsoft’s Data Protection Team after i researched online has anyone gone through this?

Andie Sammut 0 Reputation points

2026-05-20T07:08:20.9233333+00:00

Microsoft digital receptionist from that provided number is a disgrace just told me to wait and did not connect me to any agent
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-20T07:20:26.5666667+00:00

Andie Sammut

Thank you for reaching out to Microsoft Q&A.

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: https://learn.microsoft.com/en-us/partner-center/customers/gdap-preventing-tenant-lockouts

If neither option is possible,let us know, we are happy to assist you further!
Andie Sammut 0 Reputation points

2026-05-20T07:22:36.0366667+00:00

I have tried both but not having any luck, tried calling but didnt get anywhere and opened a ticket 24 hours ago with no success
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-21T06:16:42.19+00:00

Andie Sammut

Thank you for your reply.

Were you able to contact the Microsoft Data Protection team or still facing the issue?
Andie Sammut 0 Reputation points

2026-05-21T06:19:54.8933333+00:00

i have contacted them and received a first call back but the ticket has been now stale for almost 24 hours after that
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-21T06:34:47.6066667+00:00

Andie Sammut

Thank you for reply.

The Microsoft Data Protection team will contact you as soon as possible.

1 answer

Your answer

Andie Sammut 0 Reputation points

2026-05-20T07:08:20.9233333+00:00

Microsoft digital receptionist from that provided number is a disgrace just told me to wait and did not connect me to any agent
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-20T07:20:26.5666667+00:00

Andie Sammut

Thank you for reaching out to Microsoft Q&A.

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: https://learn.microsoft.com/en-us/partner-center/customers/gdap-preventing-tenant-lockouts

If neither option is possible,let us know, we are happy to assist you further!
Andie Sammut 0 Reputation points

2026-05-20T07:22:36.0366667+00:00

I have tried both but not having any luck, tried calling but didnt get anywhere and opened a ticket 24 hours ago with no success
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-21T06:16:42.19+00:00

Andie Sammut

Thank you for your reply.

Were you able to contact the Microsoft Data Protection team or still facing the issue?
Andie Sammut 0 Reputation points

2026-05-21T06:19:54.8933333+00:00

i have contacted them and received a first call back but the ticket has been now stale for almost 24 hours after that
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-21T06:34:47.6066667+00:00

Andie Sammut

Thank you for reply.

The Microsoft Data Protection team will contact you as soon as possible.

Answer 1

Tenant recovery for a sole global admin who is locked out is handled by Microsoft’s Data Protection team. The process is standardized and requires identity and ownership verification; it can’t be bypassed by forums, moderators, or Microsoft for Nonprofits.

Actionable steps based on documented scenarios:

Try self-service recovery first (if available)
- If Self-Service Password Reset (SSPR) is enabled for the tenant, attempt recovery via the Self Service Password Reset tool.
- If SSPR or other recovery methods (like another admin) are not available, proceed to Data Protection.
Contact Microsoft Data Protection / tenant recovery support
- If locked out of a tenant owned by the organization and there is no other global admin, open a support case with Microsoft:
  - Use the global customer service phone numbers: global support phone numbers.
  - Clearly state:
    - This is a tenant lockout.
    - There is only one global admin and that account is locked (MFA, password, or other access issue).
    - A request is needed for the Microsoft 365/Azure Data Protection team (sometimes called Data Protection or Tenant Recovery) to assist.
- In partner scenarios (Partner Center / CSP / GDAP), guidance explicitly says:
  - “If you’re the only global admin on the account – contact the Azure Data Protection team.”
  - If the company doesn’t have a global admin, contact Microsoft 365 Data Protection via the Microsoft 365 admin support numbers.
What the Data Protection team does
- According to the documented guidance, the Data Protection team can:
  - Reset credentials of an administrator account.
  - Help claim ownership of tenants.
  - Work tenant lockout cases where no other global admin can assist.
- They will require:
  - Identity verification.
  - Proof of organization ownership (for example, domain ownership or business documentation), depending on the scenario.
- Once verification is complete, they can reset the admin credentials or MFA so access can be restored.
If the tenant is inaccessible due to inactivity
- If the error is AADSTS5000225: This tenant has been blocked due to inactivity, administrators must contact Microsoft using the same global support phone numbers.
- Tenants can be reactivated within 20 days; after that, they are deleted and not recoverable.
If the tenant is a nonprofit or partner scenario
- Microsoft for Nonprofits cannot bypass identity verification or directly restore access; all tenant ownership and access decisions go through Microsoft 365 support and Data Protection.
- Partners with GDAP and the right roles can help reset passwords or promote admins; if no such partner or role exists, the tenant owner must contact Microsoft support.
If completely unable to open a ticket from the locked tenant
- Some documented cases describe creating a temporary/trial tenant solely to access an admin portal and open a support ticket, explicitly asking to be connected to the Data Protection team on behalf of the original locked tenant.
- This temporary tenant does not give access to the original tenant’s data; it is only a channel to reach support.

In summary, for a sole global admin lockout, the supported path is to contact Microsoft support and have the case escalated to the Data Protection team, who then verify identity and reset admin access or MFA. No other documented mechanism bypasses this process.

References: