Sole Global Admin locked out of Microsoft 365 tenant - lost Authenticator MFA

Question

Sole Global Admin locked out of Microsoft 365 tenant - lost Authenticator MFA

Yuriy Karpenko 20

I am the sole Global Administrator of my Microsoft 365 / Microsoft Entra tenant and I am completely locked out due to a lost Microsoft Authenticator MFA registration.

The password is correct.

When signing in, the only available verification methods are:

Approve a request in Microsoft Authenticator
Use a verification code from Microsoft Authenticator

Neither method is usable because the Authenticator registration was lost/restored and no valid code or approval is available.

There are no other Global Administrators and no alternative MFA methods.

I cannot access Microsoft Entra or Microsoft 365 Admin Center to reset MFA.

I already contacted Microsoft consumer support, but they redirected me to the Microsoft 365 Admin Center support page, which I cannot access because of this lockout. A service request was opened, but the support chat is now unavailable due to the daily contact limit.

This is a sole Global Administrator tenant lockout.

Please help escalate this case to the Microsoft Data Protection / Tenant Recovery team for tenant ownership verification and reset of the authentication methods for the sole Global Administrator, so I can re-register Microsoft Authenticator and regain access to the tenant.

I can provide domain ownership, DNS verification, subscription/billing information, and any other required proof privately.

Please contact me via Private Messages for the tenant information.

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Good day Yuriy,

I hope you're doing well.

Just to gently clarify before we go any further, forum users don't have the ability to access, modify, or recover user accounts. Due to security and privacy requirements, issues such as sign in failures, password recovery, and multi-factor authentication can only be addressed by Microsoft’s dedicated support teams, who have the appropriate tools and authorization to manage account level settings securely.

Since there are no other admins available to reset MFA, identity verification and account recovery can only be handled by the Microsoft Data Protection team, which is authorized to help restore access to your admin account. Please try locating the appropriate hotline for your region here: Customer service phone numbers - Microsoft Support

User's image

Note: I understand that you have reached Microsoft Consumer Support. However, please try the example scripts below to help ensure your request is directed to the appropriate team.

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

What kind of problem are you experiencing?

Answer: Authenticator.

What products do you use?

Answer: Office 365 for business.

Is this for an education or company account?

Answer: For companies.

Are you an administrator?

Answer: Yes.

Are there any other administrators in your organization?

Answer: No. I am the only admin in my tenant.

Do you need a... Service request?

Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.

If you cannot reach a live agent by phone, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription and submit your request from there.

Here are the reference threads showing that this workaround works:

Sole admin recovery and MFA reset

Error 399287 – Administrator Account Locked Out Due to MFA Verification Failure

To set up a new tenant, please follow these steps below:

Visit Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

Follow the guided setup process to create a new account for a new tenant.

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the global admin, but I’m locked out and unable to generate a QR code or bypass MFA.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team so that I can verify my identity and receive help recovering access to my original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support. You can raise support ticket at https://admin.microsoft.com/#/support/requests

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

I know being locked out of the only admin account can be stressful, but contacting the Data Protection team is the correct path forward in this scenario.

I hope these steps help you create a support ticket successfully and move closer to regaining access to your administrator account. While I’m not able to intervene directly, guiding you to the right support team is the most effective help I can provide here.

Thank you for your patience and understanding.

If the answer is helpful, please click "Yes" and kindly upvote it. If you have any extra questions about this answer, please click "Comment".

Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Yuriy Karpenko 20 Reputation points

2026-08-09T13:21:12.2833333+00:00

Thank you for the response.

Unfortunately, I have already tried the temporary-tenant workaround several times, but Microsoft does not allow me to complete the signup.

I first received a payment validation error: “The payment instrument cannot be validated.”

I then tried again with another account and received: Error Code: 715-123280

Because of these Microsoft-side signup errors, I am unable to create a temporary Microsoft 365 Business tenant and therefore cannot open a support request through the Admin Center.

I also already contacted Microsoft Consumer Support through web chat. A service request was opened, but I was redirected to the Microsoft 365 Admin Center support page, which I cannot access because I am the locked-out sole Global Administrator.

Could you please advise whether there is any written escalation path to Microsoft 365 Business Support / Data Protection Team that does not require:

access to the affected tenant,

creation of another paid/trial tenant, or

a phone call?

I can provide domain ownership, DNS verification, subscription and billing details privately for tenant ownership verification.

This remains a sole Global Administrator tenant lockout caused by lost MFA credentials.
Ruby Nguyen 1,965 Reputation points Independent Advisor

2026-08-10T17:06:14.67+00:00

Dear Yuriy,

Unfortunately, the options I've shared are the standard ways to contact Microsoft Support and I'm not aware of any alternative escalation path.

I completely understand how frustrating this situation is. However, I'm just a fellow forum user, like you, trying to help based on my experience. I don't work for Microsoft and don't have access to customer accounts, support tools, or any way to directly escalate cases to Microsoft on your behalf.

Since creating a trial tenant isn't an option in your case, I'd recommend contacting Microsoft Support again. When you call, it may help to use the example script from my previous reply. Being specific about having lost access to the only administrator account in your tenant can sometimes help the automated system route your call to the Microsoft 365 business Support or Data Protection team, rather than the consumer support team for Microsoft personal accounts.

I wish I had a more direct solution for you, but in this situation, Microsoft Support is unfortunately the only team that can assist with account recovery.

I hope you're able to get this resolved soon.
Yuriy Karpenko 20 Reputation points

2026-08-10T18:27:51.5966667+00:00

Could a Microsoft Moderator / Microsoft External Staff member please review this tenant-lockout case?

I understand that Independent Advisors cannot escalate cases. I am specifically looking for assistance from Microsoft staff who may be able to engage the Data Protection / Tenant Recovery team.

This is a sole Global Administrator MFA lockout with no alternative authentication methods and no other administrators.

I have also tried creating a temporary tenant, but Microsoft signup fails with payment validation and error 715-123280.
Ruby Nguyen 1,965 Reputation points Independent Advisor

2026-08-11T00:41:37.6533333+00:00

Dear Yuriy,

I would like to clarify that forum users and moderators, including Microsoft external staff, don't have access to backend systems. This forum is separate from Microsoft Support, so issues cannot directly escalate or route issues to the support team. Users in this forum can only provide publicly available documentation and standard troubleshooting guidance. Microsoft Support can be contacted only through the official support channels previously shared.

Regarding error code 715-123280, this error is generally associated with a backend validation or security check that interrupts the tenant creation process during signup. Since this occurs on Microsoft's backend systems, the forum community has no visibility into the specific cause or the ability to investigate further.

I’m sorry that you are having difficulty with this issue. As the best next step, I recommend contacting Microsoft Support by phone again and following the example script I mentioned above.