Tenant recovery / Global Admin restoration for an orphaned Microsoft 365 tenant - I am the domain owner, have no admin, and control DNS

Peter J Elliot 0 Reputation points
2026-06-15T20:29:23.2+00:00

I am the legal owner of the domain peterelliot.org and of the Microsoft 365 / Exchange Online tenant built on it (primary account UPN: [Moderator note: Personally Identifiable Information removed]@peterelliot.org). I need tenant recovery: restoration of Global Administrator access so I can recover and export mailbox data.

Situation:

  • The tenant is effectively orphaned. It was set up and administered over many years by a succession of outside IT providers; I personally never held admin credentials.
    • The most recent provider (a Microsoft partner / Partner of Record) has confirmed IN WRITING that they no longer have an active admin relationship with the tenant and are unable to perform recovery on my behalf.
      • There is no reachable Global Administrator.
        • In late April 2026 the account locked after I signed in from new devices, and with no admin to verify identity I have been locked out of mail and the historical mailbox since.
      • Why I am posting here:
        • I cannot open a case in the Microsoft 365 admin center because that requires an admin sign-in I do not have.
          • Phone support pre-routes my number to an automated dead-end queue and disconnects.
        • Proof of ownership I can provide immediately:
          • I control DNS for peterelliot.org at my registrar (Bluehost). I can publish any TXT verification record Microsoft specifies to prove domain ownership.
            • I can provide registrar records and the prior provider's written disclaimer of the admin relationship.
          • Request: please escalate this to the Data Protection / Tenant Recovery team so ownership can be verified (via DNS TXT) and Global Administrator access restored to me as the domain and tenant owner. Thank you.
Microsoft 365 and Office | Subscription, account, billing | For business | Other

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-06-15T20:29:38.4633333+00:00

    To regain access to a tenant when there is no reachable Global Administrator and no active partner relationship, the only supported path is to work with Microsoft support and the Data Protection team through a support ticket and identity verification.

    From the documented guidance:

    1. When locked out of a tenant and no Global Administrator is available, a support ticket must be opened so the Data Protection team can assist with:
      • Resetting credentials of an administrator account.
      • Claiming ownership of the tenant, where appropriate.
    2. For Microsoft 365 / Entra ID tenants, this is done via Microsoft’s standard support channels, not via forums or indirect escalation. The Data Protection team is engaged from within that support workflow; community responders cannot directly route a case to them.
    3. The Data Protection team may require proof of ownership such as:
      • Domain ownership evidence.
      • Official business documentation.
      • Other verification artifacts, as requested in the support process.
    4. If the tenant is inaccessible due to inactivity (for example, showing error AADSTS5000225: This tenant has been blocked due to inactivity), administrators have a limited window (20 days after the tenant becomes inactive) to contact Microsoft via the global support phone numbers to request reactivation.
    5. In general tenant lockout scenarios (no Global Admin, no partner with GDAP, or MFA lockout), the documented next step is always that the tenant owner or Global Administrator must contact Microsoft support directly. Partners or forums cannot bypass identity verification or restore access on behalf of the customer outside those channels.

    In summary, restoration of Global Administrator access and tenant recovery for an orphaned tenant is handled only through a Microsoft support ticket and Data Protection review, using the official Microsoft 365 / global support contact methods. Proof such as DNS control and registrar records is relevant, but it must be presented within that support process; it cannot be processed or escalated from here.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Kai-L 19,140 Reputation points Microsoft External Staff Moderator
    2026-06-15T21:14:45.4866667+00:00

    Dear @Peter J Elliot,

    Good day, and I appreciate the detailed description of your situation. I have sent you a private message  

    Please check your inbox for that message. 

    You can open Private Messages at your post:  

    User's image

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.