URGENT: Global Admin Lockout - MFA Reset Required for [some-random-corp-alias.onmicrosoft.com]

Question

URGENT: Global Admin Lockout - MFA Reset Required for [some-random-corp-alias.onmicrosoft.com]

Farrah Sureina 0

Hello, I am the sole Global Administrator for the tenant [some-random-corp-alias.onmicrosoft.com].

I am currently locked out of that account because I no longer have access to the Microsoft Authenticator app and no backup verification methods were configured.

I am writing to you from this temporary trial account because I cannot log in to my main account to open a ticket.

Locked Account Email: ******@some-random-corp-alias.onmicrosoft.com
Issue: MFA Lockout / Lost Authenticator App
Requested Action: Please escalate this to the Data Protection Team to verify my identity and reset the MFA for my admin account.

You can contact me at this email ******@some-random-corp-domain.com or my phone number [+some-ramdom-number].

* PII Removed

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-20T10:59:43.5733333+00:00

Hello Farrah Sureina

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: Customer service phone numbers - Microsoft Support.

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: Preventing tenant lockouts - Microsoft Learn.

If neither option is possible, please don’t worry—let us know, we are happy to assist you further!
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-22T12:51:42.41+00:00

Hello Farrah Sureina Following up to see if you were able to create the support ticket, otherwise please let us know, we are happy to assist you further!

1 answer

Your answer

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-20T10:59:43.5733333+00:00

Hello Farrah Sureina

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: Customer service phone numbers - Microsoft Support.

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: Preventing tenant lockouts - Microsoft Learn.

If neither option is possible, please don’t worry—let us know, we are happy to assist you further!
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-05-22T12:51:42.41+00:00

Hello Farrah Sureina Following up to see if you were able to create the support ticket, otherwise please let us know, we are happy to assist you further!

Answer 1

The tenant is in a classic “sole global admin locked out due to MFA” scenario. Forum moderators and standard support channels that require portal access cannot directly reset MFA for this account; this must go through Microsoft’s Data Protection / Tenant Recovery process.

Use these steps to proceed:

Contact Microsoft support by phone and request Data Protection
- Call Microsoft using the global customer service numbers listed under Customer service phone numbers - Microsoft Support.
- When interacting with the IVR/agent, clearly state:
  - The issue is an Authenticator / MFA lockout.
  - The product is Office 365 / Microsoft 365 for business.
  - The account is a company (work) account, not personal.
  - Confirm being the only Global Administrator for the tenant ****.onmicrosoft.com.
  - Request to create a service request and escalate to the Data Protection Team for MFA reset / tenant recovery.
Provide tenant and admin details for verification
- Be ready to provide:
  - The locked admin UPN (email) on ****.onmicrosoft.com.
  - The tenant domain name (****.onmicrosoft.com).
  - Error messages seen during sign-in (MFA prompt that cannot be completed).
  - Confirmation that no other global admins exist and no backup MFA methods are configured.
- The Data Protection team will guide through identity verification and ownership checks. Once verified, they can reset MFA registration or otherwise restore access.
Use the trial tenant only as a channel to open a ticket (if needed)
- If phone support is difficult to reach, keep using the trial tenant to:
  - Sign in to the new tenant’s Microsoft 365 admin center.
  - Open a support ticket from there, explicitly stating that:
    - The ticket is on behalf of another tenant (****.onmicrosoft.com).
    - The issue is a Global Admin MFA lockout with no other admins.
    - The request is for Data Protection / Tenant Recovery to reset MFA for the admin account on the original tenant.
- This trial tenant does not give access to data in ****.onmicrosoft.com; it is only a way to reach support.
If a partner/reseller is involved
- If the Microsoft 365 subscription was purchased through a partner or reseller, that partner can:
  - Open a support request with Microsoft on behalf of the tenant.
  - Work with the Data Protection team to help restore access.
After access is restored
- As soon as access is regained, configure redundancy to avoid future lockouts:
  - Add at least one more Global Administrator with a different MFA method.
  - Configure multiple MFA methods (Authenticator, phone, etc.).
  - Consider creating emergency access (“break-glass”) accounts excluded from Conditional Access policies, as described in the tenant lockout prevention guidance.

Only Microsoft’s Data Protection team can complete the MFA reset in this scenario; community forums and documentation cannot directly change tenant security settings.

References: