Hello @Max,
Thank you for providing those details. I understand how frustrating it can be to lose access to your school account, especially when you're being blocked by Error 399287.
Based on similar cases, Error 399287 is often associated with a Microsoft identity verification or MFA-related block, sometimes referred to as a "BadReputation" flag on the verification method.
I’d like to clarify that as a forum moderator, I do not have access to user sign-in logs, cannot reset MFA, revoke access, or contact Microsoft Support on your behalf. Please consider me an end user as well, providing guidance based on experience and documented processes.
To better understand your situation, could you please clarify:
- Could you please help me understand why the school is unable to assist in this situation? For example, are you unable to contact the IT team, or is there no administrator available to help?
- Are you an end user or an administrator for the school's Microsoft 365 tenant?
- Is there another administrator who may still have access to the environment?
- Was the Microsoft 365 subscription purchased directly from Microsoft, or through a partner/reseller?
In many cases, your tenant admin can resolve this by revoking the user’s MFA methods and requiring them to set up MFA again. Here’s how an admin can do that:
- Go to Microsoft Entra Admin Center: https://entra.microsoft.com
- Navigate to Users > All Users.
- Select your user account.
- Go to Authentication Methods.
- Click "Require re-register multifactor authentication".
This action clears out the user’s existing authentication methods, including phone numbers, Microsoft Authenticator registrations, and software OATH tokens, and prompts them to set everything up again during their next sign‑in.
If the issue continues after the reset, the Global Administrator should open a support ticket so a Microsoft Technical Support Engineer can investigate further. Microsoft Support can check and clear backend blocks when needed. For instructions, you can refer to: Get support - Microsoft 365 admin | Microsoft Learn
If you are the only administrator in this tenant, please follow the instructions below carefully to escalate your case directly to the Data Protection team:
1. Find the related hotline number for your country to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support
2. Depending on your country or region:
For some countries, when calling the support number, although there are about 30 seconds opening as something "you can visit the link...." But you can ignore this opening and wait until the option, then "1" as a business email user, "1" again for technical help.
For some countries, it will be an automated conversation like:
- First, when you call the hotline, it asks what kind of problem you are worried about.
- Answered: authenticator.
- A: What kind of product are you using?
- B: Microsoft 365 for business.
- A confirmation: education or company account?
- B: For companies
- A: Are you an administrator?
- B: Yes.
- A: Do you have the other admin in your organization?
- B: No.
- A: You need one.... Service request?
- B: Yes
Note:
- You may need to call multiple times before you are connected to a live support representative and can successfully create a support request with a ticket number for tracking.
- If your subscription is from a partner or reseller, contact the reseller's support provider to help open a service request on behalf of you instead.
If you still need further assistance, please let me know the answers to the questions above so I can better understand the situation and guide you through the appropriate next steps.
Thank you for your understanding, and I look forward to your response.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.