Recover Global Admin Microsoft account with lost MFA Access lockout

民輝 黃 20 Reputation points
2026-06-15T04:23:58.67+00:00

Hello, I am unable to get logged back into one of my tenants as a global administrator because my Microsoft Authenticator app was reset and I found out my tenant only had this form of verification configured on the global admin account. I do not have any other global administrator accounts so I am currently experiencing a total lockout.

Since I cannot get into this tenant, can someone with Microsoft in this forum assist me with opening a case to the Data Protection Team? @Raja Pothuraju perhaps?

Microsoft 365 and Office | Subscription, account, billing | For business | Windows
0 comments
Answer accepted by question author
Huy-K 13,985 Reputation points Microsoft External Staff Moderator
2026-06-15T05:07:07.5133333+00:00

Dear @民輝 黃,

Please note that none of moderators could help you with this while your account are belonged to an organization to do this action. Since you are a Global Admin of your tenant, kindly follow these steps:

Option 1: You may need to contact the Data Protection Team at the service phone number via this link: Customer service phone numbers - Microsoft Support.

The main objective is to go through the IVR (automated system) until you reach a live agent and emphasize this very important security factor. Please help me try this script below, this is a commonly used script for authentication issues to bypass IVR, but you can try to see if it helps get through the system. Please help me to speak loudly, only keywords, clearly and patiently waiting for the machine's response. First, when you call the hotline, they will ask you what kind of problem you are facing with.

Answer: Authenticator.
A: What products do you use?
B: Office 365 for business.
Verification: Education or corporate account?
B: For companies
A: Are you an administrator?
B: Yes.
A: Are there other administrators in your organization?
B: No.
A: I need one.... Service request?
B: Yes

During the call, you must provide information related to the subscription, such as your company name, billing history, phone number, and alternate email address. This information helps data protection teams verify identities and securely regain access to administrator accounts.

Option 2: Create a new tenant with trial subscription to access and submit a ticket in the Admin Center.

If you still can't get in touch with a real person for help, help me try the following:

Sign up for a free trial (new tenant with trial subscription) of Microsoft 365 at this link: Compare All Microsoft 365 Plans | Microsoft. The goal is to create a temporary tenant with a Global Administrator account so that you can sign in to the Microsoft Admin Center. Once connected, you can submit a support ticket directly to Microsoft. Please remember to cancel the trial subscription once your issue is resolved to avoid unwanted charges.

How to submit support ticket in Admin Center: Get support - Microsoft 365 Admin | Microsoft Learn

Once you contact the Data Protection team, you will be required to provide proof of ownership of the company. This allows them to verify their identity and help reassign the Global Administrator account.

As a moderator, I do not have the tools to investigate your specific account directly, as this is a support forum between users. Moderators and collaborators, including external Microsoft employees, may not directly intervene in the functionality of Microsoft products or access internal systems. Our role is limited to providing technical guidance on reported problems, requests, or ideas. However, I will do my best to guide you as clearly as possible.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-06-15T04:24:16.7966667+00:00

    Because the only global administrator on the tenant is locked out due to loss of Microsoft Authenticator and no other admin or method is available, recovery must go through Microsoft’s Data Protection / Tenant Recovery process. Forum moderators can only escalate by creating a support ticket; they cannot directly bypass verification.

    To proceed, use one of these supported paths:

    1. Contact Microsoft 365 / Data Protection support by phone
      1. Call Microsoft 365 support for business and ask to be transferred to the Microsoft 365 Data Protection team. Use the regional phone numbers listed at Get support - Microsoft 365 admin and Find Microsoft 365 for business support phone numbers by country or region.
      2. Clearly state:
        • This is a tenant lockout scenario.
        • You are the only global administrator.
        • MFA is enforced and the only registered method (Microsoft Authenticator) is no longer accessible.
        • You need a tenant admin MFA reset / access recovery.
      3. Be prepared to complete identity and tenant ownership verification (for example, business documentation, domain ownership, or other proof as requested by the Data Protection team).
    2. If another global admin exists (or is later identified)
      • That admin can sign in to the Azure portal → Microsoft Entra ID → Users → select the locked-out user → Authentication methods → Require re-register multifactor authentication. This forces MFA re-registration on next sign-in.
    3. If no other global admin exists and phone support is hard to reach
      • Continue insisting on speaking with an agent and explicitly request escalation to the Data Protection team for tenant admin MFA reset, as described in similar resolved cases.

    Microsoft for Nonprofits and other programs cannot bypass identity verification or directly grant access; all tenant access decisions are handled through Microsoft 365 support and the Data Protection team.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.