Critical: Only Microsoft 365 Global Admin locked out by unusable Authenticator loop

Danış ÖZCAN 20 Reputation points
2026-05-23T07:16:08.55+00:00

Hello,

I need urgent support regarding my Microsoft 365 tenant.

I lost the password for my Microsoft 365 admin account.

When I try to sign in, Microsoft redirects me to Microsoft Authenticator for verification. However, I recently reset / formatted my phone, so the Authenticator app is no longer working for this account.

Because of this, I am stuck in a loop: I cannot reset my password because MFA verification is required, and I cannot complete MFA verification because Authenticator is not working.

I cannot access the Global Admin account in any way.

Every sign-in attempt automatically redirects me to Microsoft Authenticator, even though the Authenticator app itself is already locked and not working for this account.

This creates a loop that I cannot break. Microsoft keeps redirecting me to an authentication method that is unavailable and unusable.

In my opinion, this is a serious system flaw. If the only Global Admin is locked out and the Authenticator method is no longer accessible, Microsoft should provide a clear and direct recovery path instead of repeatedly sending the user back to the same non-working Authenticator verification.

There is no other Global Admin account in the organization that can reset MFA for me.

This issue is seriously affecting our company operations. We cannot access important company services and data. All company data and Microsoft 365 services are currently unreachable for us.

I have tried to contact Microsoft support, but I could not reach any responsible support representative who can solve this problem. Phone support redirects me to English-speaking agents, but I do not speak English well enough to explain this critical technical issue.

This is not a simple password reset issue. This is a password reset + MFA / Authenticator lockout issue for the only Global Admin account.

I urgently request Microsoft Data Protection / Account Recovery team support to verify ownership of the tenant and reset MFA / Authenticator access for the Global Admin account.

Please help us as soon as possible. Our business operations are affected.

I need Turkish support or written support. I need mail please [Moderator note: Personally Identifiable Information removed] 

Thank you.

Merhaba,

Microsoft 365 kiracımızla ilgili acil desteğe ihtiyacımız var.

Microsoft 365 yönetici hesabımın şifresini kaybettim.

Hesaba giriş yapmaya çalıştığımda Microsoft beni doğrulama için Microsoft Authenticator uygulamasına yönlendiriyor. Ancak telefonuma yakın zamanda format attığım için Authenticator uygulaması artık bu hesap için çalışmıyor.

Bu nedenle kısır döngüye girdim: Şifremi sıfırlayamıyorum çünkü MFA doğrulaması isteniyor; MFA doğrulamasını da tamamlayamıyorum çünkü Authenticator çalışmıyor.

Global Yönetici hesabına hiçbir şekilde giriş yapamıyorum.

Her oturum açma denemesinde sistem beni otomatik olarak Microsoft Authenticator uygulamasına yönlendiriyor. Ancak Authenticator uygulaması zaten bu hesap için kilitli ve çalışmıyor.

Bu nedenle içinden çıkılamayan bir döngü oluşuyor. Microsoft, kullanılamayan ve çalışmayan bir doğrulama yöntemine beni tekrar tekrar yönlendiriyor.

Bence bu ciddi bir sistem hatasıdır. Tek Global Yönetici hesaba erişemiyorsa ve Authenticator doğrulama yöntemi artık kullanılamıyorsa, Microsoft’un kullanıcıyı sürekli aynı çalışmayan Authenticator ekranına yönlendirmek yerine açık ve doğrudan bir hesap kurtarma yolu sunması gerekir.

Kuruluş içinde benim adıma MFA sıfırlaması yapabilecek başka bir Global Admin hesabı da bulunmuyor.

Bu sorun şirket faaliyetlerimizi ciddi şekilde etkilemektedir. Önemli şirket hizmetlerine ve verilerine erişemiyoruz. Şirketimize ait Microsoft 365 hizmetleri ve veriler şu anda bizim için ulaşılamaz durumdadır.

Microsoft desteğine ulaşmaya çalıştım ancak sorunu çözebilecek yetkili bir destek temsilcisine ulaşamadım. Telefon desteği İngilizce konuşan temsilcilere yönlendiriyor; fakat İngilizcem bu kritik teknik sorunu açıklamak için yeterli değil.

Bu basit bir parola sıfırlama sorunu değildir. Bu, tek Global Admin hesabı için parola sıfırlama + MFA / Authenticator kilitlenme sorunudur.

Microsoft Data Protection / Account Recovery ekibinden, kiracı sahipliğinin doğrulanarak Global Admin hesabı için MFA / Authenticator erişiminin sıfırlanmasını acilen talep ediyorum.

Lütfen en kısa sürede yardımcı olun. Şirket faaliyetlerimiz bu sorundan etkilenmektedir.

Türkçe destek veya yazılı destek talep ediyorum. Mail ile bilgilendirirseniz çok sevinirim. [Moderator note: Personally Identifiable Information removed]

Teşekkürler.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments
Answer accepted by question author
Anonymous
2026-05-23T07:49:36.4733333+00:00

Please understand that as forum moderators, we do not have the tools or sufficient access to make changes to user accounts, including logging in, resetting passwords, or modifying access rights. For your security, only Microsoft Support can assist with these requests.  

 

Hello @Danış ÖZCAN,

Thank you very much for your detailed explanation. I truly understand how difficult and urgent this situation is, especially when you are unable to access the only Global Admin account and your company’s services are being affected.

Given the challenges you’ve encountered with the usual support channels, I would like to suggest an alternative approach that might help you reach Microsoft support more effectively.

As a workaround, you could consider creating a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365

User's imageUser's image

Once the new tenant is created, you will be able to access the Admin Center and submit a support request from there. In your request, you can explain your situation and ask to be connected with the Data Protection Team to assist with recovering access to your original tenant.

When submitting the ticket, you may choose your preferred contact method. If it is more comfortable, you can select email support, which allows you to communicate in writing and provide details more easily. You can follow this guide for the steps: Get support - Microsoft 365 admin | Microsoft Learn

Also, when opening the support request, please make sure to turn off the Support Assistant (AI) in the Help panel. Some users have reported that the “Contact Support” option may not appear if it is turned on. Once you switch it off, you should be able to enter your issue description and proceed with submitting the ticket normally.

User's imageUser's image

Please note a few important points:

  • The new trial tenant will not provide access to your original data or settings. It is only used as a temporary way to contact Microsoft Support.
  • Resolution time may take slightly longer since the request is being made from a different tenant.
  • Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges. 

I sincerely hope this guidance helps you move forward and get the support you need as soon as possible. While I’m unable to directly access or modify your account, I truly want to support you through this process.

 

Warm regards,

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-05-23T07:16:34.85+00:00

    For a Microsoft 365 tenant where the only Global Administrator is locked out because of lost password and unusable Microsoft Authenticator, the recovery path depends on whether there is any other admin or partner with the right roles. In this scenario there is no other Global Admin and no working MFA method, so the only supported path is escalation to Microsoft’s Data Protection / Tenant Recovery team through official support.

    Actionable steps based on the documented process:

    1. Confirm there is truly no other admin
      • Verify that there is no other Global Administrator or Privileged Role Administrator who could:
        • Reset the Global Admin password, or
        • Use “Require re-register multifactor authentication” on the locked-out account in Microsoft Entra ID.
      • If such an admin exists, that admin should follow the documented steps to reset password/MFA instead of using Data Protection.
    2. Use Self-Service Password Reset only if it was enabled
      • If Self-Service Password Reset (SSPR) was previously enabled for the Global Admin and security info (phone/email) was configured, try:
      • If SSPR is not enabled or still requires the same unusable MFA method, proceed to step 3.
    3. Contact Microsoft Data Protection / Tenant Recovery via phone support
      • For a tenant lockout where the only Global Admin is locked out (password + MFA), Microsoft’s documented guidance is to involve the Data Protection team.
      • Call the regional Microsoft customer service number listed under:
        • “Customer service phone numbers - Microsoft Support” or
        • “Find Microsoft 365 for business support phone numbers by country or region”.
      • When connected to the IVR/agent, clearly request:
        • To open a service request for a “tenant lockout” / “only global admin locked out due to MFA/Authenticator issue”.
        • To be transferred to the Microsoft 365 Data Protection team (or Azure/Microsoft 365 Data Protection / Tenant Recovery) because there is no other admin.
      • The Data Protection team has specific tools and procedures to:
        • Verify identity and tenant ownership.
        • Reset the Global Admin’s authentication methods and/or password so that access can be restored.
    4. If language is a barrier
      • When calling the regional number, request Turkish-language support or a local-language agent if available in that region.
      • If only English-speaking agents are available, prepare a short written explanation (in English) of the situation to read or send if requested. The key points they need:
        • Only Global Admin is locked out.
        • Password forgotten and MFA (Authenticator) not usable due to phone reset.
        • No other Global Admin or admin with sufficient roles.
        • Need Data Protection team to verify tenant ownership and reset MFA/password.
    5. Alternative escalation path if phone support cannot route correctly
      • If frontline support repeatedly fails to route to the correct team, Microsoft guidance suggests creating a temporary new tenant (trial subscription) only to open a support ticket:
        1. Sign up for a Microsoft 365 trial to create a new tenant.
        2. In that new tenant, go to the Microsoft 365 admin center → Support → Help & support.
        3. Open a support ticket explicitly stating:
          • This ticket is about a different, existing Microsoft 365 tenant.
          • The existing tenant’s only Global Admin is locked out due to password + MFA/Authenticator issue.
          • Request escalation to the Data Protection team for tenant lockout recovery.
        4. Provide:
          • The locked tenant’s domain and admin UPN.
          • Error messages seen at sign-in.
          • Confirmation that there is no other admin.
      • After the original tenant is recovered, cancel the trial subscription on the temporary tenant to avoid charges.
    6. Future prevention once access is restored
      • Add at least one additional admin with appropriate roles (for example, another Global Administrator or a Privileged Authentication Administrator) so that one admin can recover the other if locked out.
      • Enable and configure Self-Service Password Reset for admins and users, with multiple methods (phone, email, app) so a single device failure does not cause a lockout.
      • Follow the security guideline to:
        • Keep the number of Global Administrators low but more than one.
        • Ensure at least one Privileged Authentication Administrator exists to reset Global Admin passwords.

    Only Microsoft Support’s Data Protection / Tenant Recovery team can break the password+MFA loop for a sole Global Admin in this situation; forums and tools cannot override this.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.