Urgent assistance required: Unable to access my Microsoft 365 Business account due to MFA lockout

For a Microsoft 365 Business tenant where the only global admin is locked out due to MFA and there are no alternative verification methods configured, recovery must be handled by Microsoft’s Data Protection team. Forum moderators and general support channels cannot directly reset MFA or bypass verification for an admin account.

Follow this path to regain access:

1. Contact Microsoft Data Protection support by phone
   Use the regional phone numbers listed at Customer service phone numbers - Microsoft Support. This is the primary and supported method when the sole global admin is locked out and cannot sign in to open a ticket. When connected to the IVR/agent, clearly state:
   • This is a Microsoft 365 for business tenant.
   • It is a company account, not education or personal.
   • The caller is the only global administrator.
   • The issue is loss of access to Microsoft Authenticator / MFA and inability to complete sign-in.
   • An admin-level MFA reset is required.
   Example IVR flow (as documented):
   • When asked what the problem is: say “Authenticator”.
   • Product type: “Office 365 for business”.
   • Education or company: “For companies”.
   • Are you an administrator?: “Yes”.
   • Do you have another administrator?: “No”.
   • When asked about a service request: “Yes, I need to create a ticket and speak to the Data Protection team.”
   The Data Protection team has specific tools and processes to verify identity and restore access for sole global admins, including resetting MFA methods. Be prepared to provide:
   • Tenant domain (for example, savidome.onmicrosoft.com).
   • Admin username (business email).
   • Business and identity verification details they request.
2. If phone contact repeatedly fails, use a temporary trial tenant to open a ticket
   If it is not possible to reach a live agent or get routed correctly, create a new trial Microsoft 365 tenant (separate from the locked tenant) and use its admin center to open a support ticket:
   • Sign up for a Microsoft 365 Business/Enterprise trial (as documented in the Q&A context).
   • Sign in to the new tenant’s Microsoft 365 admin center.
   • Go to Support → Help & support.
   • Open a ticket explicitly stating that the issue concerns another existing tenant where the caller is the sole global admin locked out due to MFA.
   • Ask to be connected to or escalated to the Data Protection / Tenant Recovery team for that original tenant.
   Important notes from the documented process:
   • This new trial tenant is only a channel to contact support; it does not provide access to data in the locked tenant.
   • Support will likely ask for proof of ownership and admin rights for the locked tenant.
   • After resolution, cancel the trial subscription in the new tenant to avoid charges.
3. If there is any other global admin (for completeness)
   If at any point it is discovered that another global admin exists in the tenant, that admin can reset MFA without involving Data Protection by:
   • Signing in to Microsoft Entra ID (Entra admin center).
   • Navigating to Users → All users → [select the locked admin].
   • Opening Authentication methods.
   • Selecting “Require re-register multifactor authentication”.
     On next sign-in, the locked admin will be prompted to set up MFA again (for example, re-enrolling Microsoft Authenticator on the new phone).

Because all self-service options and normal sign-in paths are blocked, only the Data Protection / Tenant Recovery process can resolve this scenario. Continue to work through the phone support route and ensure the case is explicitly tagged as a sole global admin MFA lockout so it reaches the correct team.

References:

• Troubleshoot sign-in issues and account access problems
• Preventing tenant lockouts
• You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
• Use a screen reader to set up and troubleshoot multifactor authentication
• Common problems with two-step verification for a work or school account
• Mandatory multifactor authentication for Azure and admin portals
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Microsoft account has been locked
• I can't sign in to my Microsoft account