Locked out of Azure AD Tenant

Question

Locked out of Azure AD Tenant

andrew tugman 0

Similar to other posts, such as this one, I'm locked out of my Azure tenant. I purchased a new iPhone, and no longer have access to the old one, which was used for MFA. I'm the global admin.

It seems I need to contact the Data protection team but have been unsuccessful in doing so. I am hoping someone can route my request to them/have them reach out to me. Will share my contact info when appropriate.

Thank you.

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-06-02T19:20:50.0633333+00:00

Hello @andrew tugman

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: Preventing tenant lockouts - Microsoft Learn.

If neither option is possible, please don’t worry—let us know, we are happy to assist you further!
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-06-03T17:12:01.7066667+00:00

Hello @andrew tugmanFollowing up to see if you were able to create the support ticket, otherwise please let us know, we are happy to assist you further!

1 answer

Your answer

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-06-02T19:20:50.0633333+00:00

Hello @andrew tugman

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: Preventing tenant lockouts - Microsoft Learn.

If neither option is possible, please don’t worry—let us know, we are happy to assist you further!
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-06-03T17:12:01.7066667+00:00

Hello @andrew tugmanFollowing up to see if you were able to create the support ticket, otherwise please let us know, we are happy to assist you further!

Answer 1

Because the only registered MFA method was on the lost phone and there are no other global admins who can reset MFA, recovery must go through Microsoft’s Data Protection team.

Use one of these supported paths:

If there is any other global admin
- Another global admin can sign in to the Azure portal, go to Microsoft Entra ID → Users → [your account] → Authentication methods, and select Require re-register multifactor authentication.
- On next sign-in, MFA registration is prompted again so a new phone can be enrolled.
If you are the only global admin on the tenant
- Contact Microsoft’s Data Protection team via the regional support numbers. For Azure/Entra tenants, use the global support phone numbers listed in support documentation and ask to be routed to the Azure Data Protection (or Microsoft 365 Data Protection, depending on workload) team for tenant/admin account recovery.
- Clearly state:
  - You are the only global administrator.
  - You are locked out due to loss of the MFA device and have no other verification methods.
  - You need MFA/security info reset or admin credential reset for your existing tenant.
- The Data Protection team has dedicated processes to verify identity and reset credentials or MFA for locked-out global admins.
If you cannot open a ticket from the locked tenant
- If direct phone routing is difficult, one documented workaround is to create a separate, temporary tenant (for example, via a Microsoft 365 or Azure trial) and then use that tenant’s admin center to open a support request.
- In the ticket, specify that the issue concerns a different existing tenant where you are the global admin but are locked out due to MFA.
- Be prepared to provide:
  - The locked tenant’s domain (for example, contoso.onmicrosoft.com or custom domain).
  - The global admin UPN on that tenant.
  - Error messages seen at sign-in.

Until Data Protection completes verification and resets MFA/credentials, access to the tenant cannot be restored by forums or moderators; they can only direct to these official channels.

References: