Tag not monitored by Microsoft.
Because the account is the only Global Administrator and MFA is blocking access, recovery must go through Microsoft’s Data Protection / Tenant Recovery process. Forum moderators and normal support channels cannot bypass MFA or directly change tenant ownership.
Use these steps to proceed:
- Try any alternate sign-in options
- If any other MFA method was ever configured (SMS, voice call, backup phone, alternate email, FIDO key, etc.), use Other verification options on the sign-in screen and attempt those methods first.
- If none exist or they all fail, continue with the Data Protection route below.
- Contact Microsoft Data Protection team by phone
- Call the appropriate Customer service phone number for the region using the number listed under business support. Use the instructions from the context to reach a live agent and request Data Protection / Tenant Recovery assistance.
- Clearly state:
- This is a Microsoft 365 for business trial tenant.
- The caller is the only Global Administrator.
- MFA is enforced and the only registered method (Microsoft Authenticator) was lost/cleared.
- The password is known but MFA cannot be completed.
- When the IVR asks what the problem is, respond along the lines of:
- Problem: “Authenticator”
- Product: “Office 365 for business” / “Microsoft 365 for business”
- Account type: “Company account”
- Role: “Administrator”
- Other admins: “No, there is no other administrator.”
- Request: “Yes, I need to create a service request and speak with the Data Protection team to reset my MFA / authentication methods.”
- The Data Protection team will then guide through identity and tenant ownership verification (business documentation, domain ownership, etc.) and can reset MFA registration so sign-in is possible again.
- Alternative path if phone support is hard to reach
- If phone support cannot be reached or does not successfully route to Data Protection, create a new trial tenant purely to open a support ticket:
- Sign up for a new Microsoft 365 trial tenant (any business/enterprise trial plan).
- In that new tenant, go to the Microsoft 365 admin center → Support → Help & support.
- Open a ticket explicitly stating:
- The issue is with a different existing tenant where the caller is the Global Admin.
- Locked out due to lost Authenticator and no other MFA methods.
- There is no other global admin on that tenant.
- Request escalation to the Data Protection team for tenant admin MFA reset / tenant recovery.
- This new tenant does not give access to the original tenant’s data; it is only a channel to reach support. Remember to cancel this new trial later to avoid charges.
- If phone support cannot be reached or does not successfully route to Data Protection, create a new trial tenant purely to open a support ticket:
- After access is restored
- Once Data Protection resets MFA and access to the original tenant is restored:
- Sign in to the Microsoft 365 admin center for the original tenant.
- Add multiple MFA methods (Authenticator on more than one device if allowed, SMS, phone call, etc.) to avoid future lockouts.
- Optionally assign a second Global Administrator account so there is a backup admin who can reset MFA if needed.
- To cancel the trial before billing starts, go to Billing → Your products in the admin center and follow the cancellation process for the trial subscription.
- Once Data Protection resets MFA and access to the original tenant is restored:
These are the only supported ways to regain access when the sole Global Admin is locked out by MFA.
References:
- Troubleshoot sign-in issues and account access problems
- You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
- Common problems with two-step verification for a work or school account
- Forgot password to sign in to Microsoft 365, Intune, or Azure
- All about passwords
- Global Admin Locked out - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- Tenant access recovery
- How do I find my Microsoft 365 admin?
- Find the administrator for your work or school account